
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json)
Hash identifier: B3cueTkSk97C9oejadzC0tiluB07TR6opU/YTYffW1k=
Subject key identifier: 99:5E:81:92:8D:C0:BD:6B:35:EC:8B:D1:59:1E:3B:3B:33:8E:11:44
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0BFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
Manifest number: 0BE8
Signing time: Fri 12 Jun 2026 18:56:43 +0000
Manifest this update: Fri 12 Jun 2026 18:56:43 +0000
Manifest next update: Fri 19 Jun 2026 18:56:43 +0000
Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: C5fibOvLl9q7j+eYk8dtSGO5Hjo5vG+qyGGbdVnVGJY=)
2: D40428EC3D5511F18320D810A8833773.roa (hash: GiqC1fPItzwUUjM6WaOHq6c0vxZNE0S017OV+sd3TxQ=)
3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: Nnnq4X2pr12xKRIifzfba52zTnL3E4FSIZx5q2aHomI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Validity
Not Before: Jun 12 18:56:43 2026 GMT
Not After : Jun 19 18:56:43 2026 GMT
Subject: CN=6a2c566b-a583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:44:b8:6c:fd:97:ce:7f:b0:58:27:f2:f4:
c6:08:a3:02:c1:b7:34:3e:48:b7:26:eb:5b:35:e5:
2f:8b:d6:64:c6:5c:ef:1b:84:4f:3e:0a:42:5d:c4:
7f:53:21:bc:bc:82:cb:58:30:c1:7a:2d:f4:01:8d:
d9:73:c2:1c:91:4d:19:82:d2:56:60:35:01:ea:0c:
57:be:cf:d3:b2:40:34:7c:88:89:81:37:7e:5e:44:
94:b4:08:2e:de:3c:00:79:e3:ac:28:9b:b1:20:b2:
9f:17:86:92:6a:f8:c2:b1:ba:fc:da:69:eb:c2:a3:
c3:26:35:12:30:62:a4:c5:5b:83:75:20:42:69:65:
df:04:f7:da:05:87:01:c8:95:66:36:78:ed:0b:0d:
0e:44:58:bd:64:43:b1:9f:de:da:cf:f8:b9:11:e6:
a6:60:05:ff:bb:09:81:51:cb:0b:d0:f1:6f:52:5c:
0f:e1:2e:4c:17:ca:48:80:ff:a2:a0:76:02:6c:1f:
da:90:bb:21:7e:23:91:38:c1:b7:5f:ce:f4:56:89:
80:d6:00:78:a8:a5:1f:d0:a2:74:58:1e:a9:6d:6b:
c3:ed:f9:8d:a3:9f:30:af:47:a5:d3:fe:41:c9:2c:
20:e3:1d:c7:69:3d:e5:c7:1c:11:66:72:2a:dc:1e:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:81:92:8D:C0:BD:6B:35:EC:8B:D1:59:1E:3B:3B:33:8E:11:44
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ab:7b:a8:9d:d3:8a:6a:cc:e1:12:8d:c9:15:71:2c:0a:6f:
4e:60:20:eb:3a:e5:01:64:b9:9d:8f:e0:f1:22:22:29:c9:3f:
b4:08:69:36:29:15:1a:02:be:4e:d3:05:10:cc:9d:69:1a:9b:
ad:ac:1f:4c:bb:89:14:ff:f6:85:d1:60:f5:40:14:37:24:23:
2c:e2:47:54:41:37:dd:28:eb:df:f9:78:d0:14:3b:8e:0e:8e:
ad:93:ab:fe:ec:ae:07:28:f9:a9:23:fe:3a:01:36:6f:67:08:
e8:13:99:00:c9:3e:61:66:de:97:68:fd:d7:3c:3d:36:6f:08:
a2:10:3b:4e:7e:8e:e7:77:70:6e:39:8a:75:87:c5:6a:a5:f8:
e6:09:e2:67:b0:1b:55:d8:1c:11:9f:5f:19:50:b6:d4:33:9d:
6a:f9:91:f3:7f:f2:6d:1e:1e:3b:70:d6:21:7f:c4:54:1c:65:
55:af:fe:9f:31:8b:5d:e1:83:2b:e8:6c:c8:d9:3d:fd:21:89:
a0:f7:d4:84:45:61:33:86:c8:b4:8e:d3:63:94:56:5f:83:eb:
6e:28:d7:0d:1e:76:76:54:62:c0:19:a7:9d:35:d4:ef:9d:d8:
e9:58:b0:10:39:4c:6e:31:64:c4:d5:31:a8:66:9e:ae:bf:47:
a6:2d:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:37 2026 by rpki-client