
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json)
Hash identifier: 90axSUmCIqBHSt4UccfwSgLzxsb/d3zVYtPOPuI7RLA=
Subject key identifier: 99:E0:06:F4:F9:C8:50:A2:0B:29:F2:8A:DA:27:B9:66:3E:9A:33:43
Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Certificate serial: 10F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
Manifest number: 10DF
Signing time: Fri 12 Jun 2026 14:25:00 +0000
Manifest this update: Fri 12 Jun 2026 14:25:00 +0000
Manifest next update: Fri 19 Jun 2026 14:25:00 +0000
Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: ai2ZISyFtDdasPj9i14yZcW0B6OBh5VvfaJ0/nmDvSY=)
2: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=)
3: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU=)
4: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: QAfeG31AUJ9ysS7/jFhyhx6FaI+gxOiP1E4c7gwnNZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl
rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4345 (0x10f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Validity
Not Before: Jun 12 14:25:00 2026 GMT
Not After : Jun 19 14:25:00 2026 GMT
Subject: CN=6a2c16bc-02ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:ac:8b:03:1f:d5:5b:2f:9e:6c:1b:31:6b:
12:c7:bc:da:c8:a0:08:19:36:8c:ec:6b:26:38:f8:
21:a4:28:c9:c2:9a:3a:60:92:92:b8:22:2d:80:53:
71:be:e3:bf:73:8b:c1:ad:8c:94:fb:c7:94:b7:7b:
82:bf:cc:b6:2f:1a:55:d9:4b:28:c5:06:55:94:1e:
5d:46:ab:35:9f:1e:d8:6b:15:ec:40:49:26:82:c7:
7e:ad:82:a1:47:36:66:20:70:3d:bf:26:5c:fb:33:
4b:4c:69:d8:ae:3b:ad:f4:c5:12:47:ae:14:b2:91:
dd:f5:3b:ff:82:59:86:77:17:bf:81:19:d9:eb:84:
23:a3:8e:e5:04:52:e9:af:31:f7:41:e6:8e:1d:fe:
d0:38:b6:28:2e:ce:ad:05:a5:49:84:99:73:ec:3a:
14:39:77:c2:df:22:05:f5:97:6d:6b:36:69:13:e3:
f4:53:e0:e6:31:f9:c7:ba:78:74:7a:63:7a:9d:41:
ec:23:1e:f9:21:e6:1d:d1:d1:e8:e4:3e:26:23:57:
2a:11:95:0a:11:7f:fd:8b:26:cc:a8:93:09:03:df:
9a:bf:c5:b0:a9:9b:be:66:5e:28:01:fe:ca:87:e4:
9b:85:a2:71:de:cb:03:03:a3:06:10:1c:8b:f7:2a:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E0:06:F4:F9:C8:50:A2:0B:29:F2:8A:DA:27:B9:66:3E:9A:33:43
X509v3 Authority Key Identifier:
keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:55:8b:51:90:f0:27:7e:69:b3:5b:fd:fc:25:98:6b:ba:45:
2b:2e:36:90:d8:94:56:ea:af:25:3a:76:ea:4e:9f:2d:57:ae:
ea:e2:5a:d1:e4:62:4c:1e:cf:3d:12:b2:df:45:a0:d6:23:dd:
0a:ee:f8:72:b3:5e:dd:39:11:cf:b8:30:6d:8a:13:8d:74:c4:
e4:f5:1b:c9:a9:6d:87:09:61:37:ec:e5:96:2f:21:05:a2:5b:
1d:8a:ec:82:43:8b:af:5f:20:91:ad:50:62:07:fd:98:54:c1:
33:94:65:31:a7:98:60:41:d2:f0:7a:65:9b:68:a6:ca:70:0b:
73:f0:dc:f6:7e:b5:a4:b9:a5:5a:ab:37:80:83:42:5d:14:c7:
17:8a:8d:8c:bd:38:9b:17:0d:b8:89:27:03:bf:1c:a1:7e:30:
60:f3:16:3f:00:27:5b:a2:f1:b6:0f:fd:b4:c1:b0:67:3b:1a:
2b:fe:4e:bc:8d:9b:bc:ce:b1:b3:4e:45:81:3d:ac:f9:cc:74:
ad:84:a6:1b:1e:6d:73:a4:a0:f5:e4:cc:16:82:e0:6b:f9:04:
3f:7a:bb:82:59:c5:1e:3b:e2:c7:9c:02:57:56:5c:31:e4:92:
07:5d:cc:18:ae:aa:bc:57:52:f9:cd:b4:78:69:32:d0:c1:87:
64:f0:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:45:41 2026 by rpki-client