
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json)
Hash identifier: E855uuibZZX4TmCYV+ETVeygcAU0hHDBEaIM60xxYRE=
Subject key identifier: 11:DA:8B:96:E1:2B:47:61:82:99:CF:FC:8D:D1:B0:23:59:4C:8A:2E
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
Manifest number: 0112
Signing time: Sat 13 Jun 2026 06:04:04 +0000
Manifest this update: Sat 13 Jun 2026 06:04:04 +0000
Manifest next update: Sat 20 Jun 2026 06:04:04 +0000
Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: nGN05jliMfbE/qA3pbrCm766BD6P8868QpeYqN8TWR4=)
2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Validity
Not Before: Jun 13 06:04:04 2026 GMT
Not After : Jun 20 06:04:04 2026 GMT
Subject: CN=6a2cf2d4-6013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:9a:be:b8:ee:6b:b2:11:76:92:62:3e:9d:91:
cd:87:54:1e:a9:d5:d8:57:33:b7:54:5a:e5:9f:d5:
8d:1f:a4:e9:29:33:ea:d0:77:b0:70:6a:8c:22:d3:
00:be:40:43:0e:69:70:ed:4f:16:04:7e:8f:40:e2:
ee:54:e4:29:3a:02:6c:10:f7:24:08:64:b9:ec:58:
7c:11:b7:c1:e0:e9:35:7d:2b:f1:81:6f:58:a5:f3:
e6:97:79:88:5e:84:b6:7f:fe:c5:6e:22:db:00:e6:
5d:d9:9a:a3:0b:24:f6:5c:f2:4e:c3:c2:17:6b:97:
85:f3:5c:6c:06:05:8d:99:8e:4c:98:79:1d:8d:4a:
47:d5:55:26:10:72:21:a2:b6:29:0d:3a:f7:04:e0:
52:36:22:03:db:98:3c:99:e8:84:ae:47:c7:74:76:
3e:a1:68:91:1e:de:9b:0f:b9:a8:bb:12:f7:3a:b0:
d6:38:c8:14:aa:cc:12:28:f8:b4:72:56:2c:60:63:
a6:7c:62:5b:71:ae:9b:b5:9e:e5:04:c7:a1:20:79:
e5:c8:70:e6:d5:85:34:a0:15:e4:7c:7e:76:06:fa:
bc:88:1c:6e:50:d2:70:28:6f:c7:a9:39:0d:ab:73:
9c:66:d3:17:99:09:09:06:23:e0:c8:ef:ff:9f:9d:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:8B:96:E1:2B:47:61:82:99:CF:FC:8D:D1:B0:23:59:4C:8A:2E
X509v3 Authority Key Identifier:
keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:0b:5e:0f:03:7a:ac:b6:03:12:60:b4:0d:8d:c3:89:23:
6b:00:8d:21:24:75:7e:ea:48:49:b0:31:51:85:c6:b1:71:1a:
2e:2b:1a:8c:3a:bd:20:fd:9c:37:81:2e:83:61:d1:a4:9b:8f:
56:98:7a:be:9a:e7:1d:5b:5e:ce:42:ae:23:e9:2f:a4:dc:68:
e3:97:ae:d4:7e:ce:05:86:bb:49:a5:79:a0:0f:ec:bf:b5:cd:
a5:43:7e:79:db:1b:b6:23:79:69:b0:f5:22:45:61:f6:94:79:
b7:63:06:08:43:51:3a:ef:33:51:ac:7c:cc:ad:00:b6:de:0d:
a9:9b:08:63:4d:0d:1e:67:50:b9:29:a8:d0:75:df:28:25:45:
9d:37:1f:56:54:ac:4e:81:2b:df:d0:ce:2b:b9:71:e1:4e:f5:
7d:b2:68:89:9b:76:36:f6:97:b7:a9:7f:d6:0b:72:06:22:ab:
8e:b4:a9:49:81:8d:29:04:b6:de:c0:2a:5d:3b:23:f3:a8:b8:
71:96:dd:5e:11:23:61:95:df:80:0f:40:2e:f8:a9:a0:9a:aa:
b9:9d:09:01:4d:50:a8:0b:68:52:f7:ba:89:fe:fb:b6:18:9a:
ee:3e:6a:b8:fe:9c:66:3c:6d:4f:35:c8:29:a6:39:e8:68:c3:
f7:ea:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:07 2026 by rpki-client