
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier: lShXlFjpGW/etN0L5GPqrrUZydmoDaFxKYl2Kl7juFQ=
Subject key identifier: 83:50:26:08:92:8B:8B:DD:64:66:7A:07:47:DA:92:57:FB:28:C9:7D
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial: 05FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number: 05E5
Signing time: Fri 12 Jun 2026 23:05:43 +0000
Manifest this update: Fri 12 Jun 2026 23:05:43 +0000
Manifest next update: Fri 19 Jun 2026 23:05:43 +0000
Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: ahuAZvUAgZqUpT3a6rrXgGSGMI6P8Q/m+GPUBE2db8s=)
2: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: Sn67Wsq1d2oCfy6pDGrSn0YDKV0xfK/wnuR+TWYyUN0=)
3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: OMLVMbADMiWDue7ZTRWxAOooyihp025Pd2cOw63qWcY=)
4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Validity
Not Before: Jun 12 23:05:43 2026 GMT
Not After : Jun 19 23:05:43 2026 GMT
Subject: CN=6a2c90c7-7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:c0:60:63:85:56:61:b0:6c:96:ae:33:a9:
a0:8a:72:62:fc:1e:ec:86:f1:15:76:30:06:5e:ab:
cf:7a:d2:ce:68:56:08:ff:f6:ef:01:0b:bc:0e:5e:
0c:d3:5c:22:4e:fd:bd:a9:b8:02:31:6b:d5:50:93:
66:5a:9f:65:7f:b0:33:79:39:b0:e7:9c:ac:c4:27:
4a:03:21:1b:64:b3:96:0e:71:2a:9d:9e:c1:f2:22:
b1:6b:21:a9:e3:70:8e:87:cb:6c:e3:03:34:5d:ed:
88:ff:40:ae:52:4d:76:4e:c1:34:5c:8e:cc:f9:c4:
3e:92:6a:76:f8:a7:3f:fd:98:6f:14:1b:8b:2c:48:
29:76:61:80:3c:f5:95:75:1f:d4:4b:2a:ca:5e:c5:
ba:26:8c:b7:88:6b:82:65:4c:00:21:66:d0:c8:4f:
68:69:8f:8d:c5:56:4f:02:e0:d7:4a:7c:ad:24:d0:
50:0e:c9:41:a0:54:98:67:ad:83:84:1b:c2:4a:ff:
f2:b8:16:85:67:55:5f:16:49:2b:13:6a:51:37:01:
69:68:86:a8:30:00:e1:95:8a:e6:ac:ed:4a:71:33:
aa:dc:f2:da:0e:be:23:03:56:29:ec:06:21:9f:22:
dd:09:3f:74:81:56:c9:9e:bb:4c:b9:42:8f:b2:a3:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:26:08:92:8B:8B:DD:64:66:7A:07:47:DA:92:57:FB:28:C9:7D
X509v3 Authority Key Identifier:
keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:31:8e:6d:b3:3b:aa:8b:0f:d4:54:2b:c0:13:50:a4:c0:1a:
46:9c:9c:14:a9:05:62:3b:94:31:a3:11:f0:96:c9:76:76:8c:
63:74:bc:fd:b6:a3:cf:20:25:23:78:11:aa:8b:34:63:e5:10:
40:c2:ef:35:4a:c1:89:37:1e:2a:e5:fe:fe:80:82:24:3a:a5:
cb:aa:99:7c:e9:d1:17:15:8d:41:ba:4a:73:65:5e:cf:4c:8e:
64:c8:de:d4:62:f3:8f:4c:86:cf:c4:35:08:f1:aa:6b:22:6a:
40:a1:2d:35:46:93:db:fc:de:c0:7a:35:67:a1:3d:35:5c:9d:
8f:73:e0:7f:b4:a9:75:7e:f1:c3:ab:ae:c7:a1:f8:07:1e:eb:
23:d8:28:8c:82:61:11:ea:6f:fe:bf:80:9e:8c:e5:50:db:0d:
1b:a9:2e:e1:54:69:2d:88:c1:d2:cc:f9:cb:57:d3:9b:3a:56:
79:fc:b4:ea:d9:28:29:cf:35:5e:cd:c7:90:f1:46:ff:ac:ca:
e9:ab:1f:11:81:7d:64:c2:1d:ed:77:31:78:8b:1f:6a:ef:20:
29:3c:e1:ef:3e:e8:ab:11:50:bb:ec:83:e2:89:c6:41:40:b7:
2b:6f:c9:28:87:fc:9a:a5:41:f7:ae:f6:fd:77:d1:25:8e:16:
a1:b1:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:37 2026 by rpki-client