
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json)
Hash identifier: qntc4EiQorWPPxa4lUn6xL4qftwAAeotAAzXSnQJUHo=
Subject key identifier: 5B:4C:31:5F:9C:5C:76:0E:1D:F4:F3:10:1F:72:3F:06:E8:D1:F5:DA
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 1B7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
Manifest number: 1B21
Signing time: Fri 12 Jun 2026 16:15:48 +0000
Manifest this update: Fri 12 Jun 2026 16:15:48 +0000
Manifest next update: Fri 19 Jun 2026 16:15:48 +0000
Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: gdC1fPXaVvG3G94T/EEvPgE8vQWljfOu+jmWQAGXAbU=)
2: A704B6CA4E9611F1B39189EDBB833773.roa (hash: E4Gh/Hv+zCrfZWmDryHxww+Tu0R+4hjamnHpY0bEw4U=)
3: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=)
4: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: XSeKehM5j7pmoHF65TaAHO/RyKTZ5nn2cCKLbFlPOHY=)
5: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: s/ccLEEt6e6Q4nFE0+o3sJxXQEtivVp1ICl6j+C0f1g=)
6: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: 98CICCcqBKJeROeWvWGHm6VVkIAhPXOwkpVDtDOK4LM=)
7: EF9C17344E9611F1BFD1AE0BBC833773.roa (hash: gAKPkvfXsAOzOcaRCMLahWRXkGysJXYsTu5Osr0QToM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7034 (0x1b7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Jun 12 16:15:48 2026 GMT
Not After : Jun 19 16:15:48 2026 GMT
Subject: CN=6a2c30b4-5706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:37:d2:11:fe:ff:71:c4:ac:53:8d:c1:3c:
0d:f0:81:f6:d5:b0:70:bc:ad:46:bc:d9:25:20:5f:
9c:e9:d1:11:38:f1:e0:00:f5:f5:8d:cc:e1:aa:f9:
96:81:84:cd:da:d3:44:de:22:f2:ee:85:07:2e:be:
57:b1:9e:4f:1e:05:65:74:1c:7a:b7:1b:39:18:c1:
2d:59:96:ed:78:9e:cc:79:92:a3:07:60:88:e4:25:
87:e8:d5:e7:3a:a5:b2:dc:05:6c:d1:fe:5c:48:db:
55:77:d3:b5:e6:0d:22:80:03:63:54:97:8d:bc:6d:
b0:05:98:59:98:0e:01:73:db:0b:f5:37:1a:06:cc:
d2:cf:1f:30:be:dc:c1:d8:84:c8:f5:86:de:d1:02:
75:14:1c:46:b2:09:e4:da:15:6f:1b:b5:f4:e8:88:
ce:38:89:5c:a3:e2:3e:c8:30:ae:1c:98:17:29:f0:
35:81:0f:9d:74:fd:d0:e0:58:50:3f:5b:42:40:ac:
3e:ba:ed:db:de:1e:c9:b0:0c:6b:c0:68:a8:46:84:
32:1a:04:e6:61:2b:46:2d:d5:c1:f1:fb:95:43:3b:
0c:c7:b7:5e:8f:80:0c:d6:9f:52:f7:8b:e7:09:10:
5f:e5:2a:bf:0c:88:60:20:35:72:cd:ca:07:0d:11:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:31:5F:9C:5C:76:0E:1D:F4:F3:10:1F:72:3F:06:E8:D1:F5:DA
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:23:03:66:67:82:ed:94:5e:83:6d:98:cc:a9:74:2d:b1:32:
11:8d:44:d1:b8:2a:9c:cf:44:4c:3b:15:27:7b:eb:8a:bc:8d:
c8:c1:fa:c0:9a:92:10:03:af:14:95:0e:85:62:4c:1c:c5:5c:
fd:47:2f:14:64:2a:b3:c2:7f:9f:73:c1:51:a5:8e:a5:9c:05:
af:4c:f9:50:e0:5e:f0:cc:c4:3b:7c:98:c8:6f:32:12:14:81:
71:83:ae:90:c6:32:5f:84:9d:cd:62:c0:4b:f9:b5:ff:80:e7:
a9:19:3f:ab:60:57:57:2c:f6:aa:a0:6a:29:4f:b0:2a:6e:51:
f0:72:3c:be:4b:d9:e4:f3:d2:7d:ba:bf:50:7f:57:44:e5:6c:
0a:80:c5:fa:3c:e1:db:09:f2:86:74:0f:ec:53:ed:2c:f7:4d:
ec:46:18:c7:86:50:88:42:5b:2a:e1:af:f5:e6:b4:54:85:5c:
ba:e2:1f:ab:cd:c6:17:d1:54:33:b1:b9:af:bf:9e:dc:d7:c6:
a8:cd:9b:c3:1a:2e:81:1c:8f:f1:09:77:49:76:1c:eb:b4:65:
0b:13:9c:b8:c2:00:c0:a1:d5:36:0b:75:e1:53:5b:86:7b:bb:
c3:17:3b:80:38:ae:2e:19:6d:71:04:6a:52:f2:15:a0:c2:00:
79:02:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:38 2026 by rpki-client