
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json)
Hash identifier: 3JYo9ewWZIZaVWdIwP8ZCBazFjvWY4IRilbhQ2DufDs=
Subject key identifier: 48:F7:CF:EA:07:AD:8E:A4:57:27:0C:6F:D4:34:A8:AD:7F:EC:88:9D
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial: 0B53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
Manifest number: 0B39
Signing time: Fri 12 Jun 2026 19:18:00 +0000
Manifest this update: Fri 12 Jun 2026 19:18:00 +0000
Manifest next update: Fri 19 Jun 2026 19:18:00 +0000
Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: jbSONB3g3H+gvvvIgLdjc9DTDp8fmca+9Yv/V2iPW24=)
2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=)
3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2899 (0xb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Validity
Not Before: Jun 12 19:18:00 2026 GMT
Not After : Jun 19 19:18:00 2026 GMT
Subject: CN=6a2c5b68-c671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:66:8f:c5:59:62:b0:22:3f:5f:dc:d9:39:
94:ad:bb:5c:0f:4e:ca:af:60:fb:8c:2b:7e:e7:30:
2d:44:da:5a:c9:63:d9:40:80:0e:f4:d9:ab:d4:95:
07:9e:23:88:b5:7d:03:93:51:ac:0b:94:dc:7a:aa:
3e:37:e9:3f:0c:99:56:31:13:e7:ab:cf:40:55:32:
6e:35:ee:a8:ef:fd:24:03:21:c1:5e:72:a6:18:bc:
2c:42:88:68:ca:8f:5e:48:72:6f:6a:27:e8:94:84:
7b:a6:e2:1d:e9:19:a7:50:2e:a3:ba:d7:04:6e:48:
bf:37:40:43:51:6f:46:54:07:4e:0d:da:24:bf:71:
88:2f:44:4a:4b:05:e1:a8:75:22:1c:1b:aa:ff:f2:
0a:4a:7e:07:02:35:5e:39:c8:0d:8f:48:55:39:ab:
88:86:d1:7d:b4:ea:2d:0c:07:5c:99:c2:ce:e9:95:
31:92:ef:54:05:58:da:c0:22:be:0f:1b:4e:4a:fa:
9a:9b:6e:9b:74:9d:d1:de:d6:72:42:86:94:e9:e9:
31:f0:fc:de:aa:99:c4:5d:3f:33:3f:f3:6b:b0:86:
35:1a:7c:21:fa:09:51:f4:d9:86:f1:5d:b3:22:23:
db:5d:b9:61:c1:54:f0:2f:ba:89:88:89:bb:f0:e2:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:CF:EA:07:AD:8E:A4:57:27:0C:6F:D4:34:A8:AD:7F:EC:88:9D
X509v3 Authority Key Identifier:
keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7e:b5:75:16:d8:7f:1e:f8:ea:2f:64:62:e6:89:66:b3:a1:
9e:26:d6:98:e8:12:fa:70:3b:55:20:98:69:da:f6:30:3f:1b:
bf:94:c8:31:5c:56:77:69:0f:2a:e0:0b:79:bf:8c:93:70:9b:
36:76:1c:d4:83:a8:87:39:29:54:98:3a:13:70:81:5d:f4:b3:
28:0c:0e:60:1d:e1:25:04:43:c4:58:f1:24:aa:a1:da:a9:6c:
03:67:c0:7f:62:38:79:21:7c:b5:4c:d5:38:e3:0f:d8:1e:a4:
d4:29:ba:fa:ce:34:2a:ca:0b:4f:86:13:77:57:bb:0e:69:ee:
e0:3c:20:cc:6d:91:f9:98:d2:8c:c0:97:cc:f2:71:78:b1:de:
74:44:32:d9:cc:1c:a2:22:b9:16:87:a5:fa:08:b0:7c:bd:ee:
35:10:1d:89:3c:24:b1:8b:4a:2e:f4:e7:87:a7:fe:0e:06:a6:
b7:a4:cf:1e:d8:a5:dc:0f:30:58:af:4d:40:c9:ea:17:ef:23:
af:b6:c9:50:7c:6a:77:cf:ce:24:58:1b:17:1f:cf:56:a5:f3:
03:8e:b2:61:fa:51:87:42:79:34:28:a1:3f:b0:fc:59:4a:a1:
55:73:dd:31:79:80:7a:ec:a0:53:49:49:cf:07:61:4c:51:e7:
12:cf:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:51 2026 by rpki-client