
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier: S4OE4Rzhn3XvQfKEPDuPu8PbAsqAilPaEzEZwxQNPYI=
Subject key identifier: E6:19:6E:AB:E3:69:A4:2E:D2:B0:A5:BA:9D:73:45:8C:62:80:16:D0
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number: 01CB
Signing time: Sat 13 Jun 2026 03:46:07 +0000
Manifest this update: Sat 13 Jun 2026 03:46:06 +0000
Manifest next update: Sat 20 Jun 2026 03:46:06 +0000
Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: ARw0AnuObeqTHvdjnIKVYgRThVRPjKVj9E2EtUKWBvA=)
2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Validity
Not Before: Jun 13 03:46:06 2026 GMT
Not After : Jun 20 03:46:06 2026 GMT
Subject: CN=6a2cd27f-3234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:7f:b4:c2:df:6c:20:4d:2a:63:6e:87:c1:
09:47:3f:be:0f:54:a5:4f:1e:a6:d4:f2:a5:78:e1:
62:51:55:67:99:ee:f8:62:36:f0:ca:6b:af:80:a3:
97:09:29:ae:67:02:48:7e:2f:15:2c:6c:7c:76:03:
7a:d5:93:4d:1e:80:c6:2b:41:fd:aa:7f:9f:ac:8b:
41:28:7c:47:9d:44:af:eb:6d:4a:a1:ab:3b:ca:7f:
be:7f:86:d5:70:45:a0:ee:1c:9d:0a:39:6f:71:e1:
96:04:10:25:46:41:db:fa:91:dd:d1:0f:25:5d:45:
6a:8d:21:32:5b:32:0f:6a:7d:e8:3d:21:1d:fe:af:
2f:c3:a7:5f:cd:d8:69:51:99:69:d1:33:72:aa:91:
93:c2:e6:0a:7e:28:fc:67:f8:07:c9:f3:d9:35:63:
26:0d:ac:af:cc:e3:6c:46:29:64:47:46:27:b1:31:
b5:6b:75:35:73:ce:8f:ed:e0:01:02:3b:6c:3c:80:
e5:78:05:1a:02:76:15:3f:df:7f:4c:9a:63:6d:c3:
37:10:e4:75:cb:46:25:75:33:c9:7c:5b:ce:0a:14:
58:24:1e:5e:b0:6f:a0:64:26:7a:ac:bf:2a:b4:7b:
32:db:92:d3:97:f0:a6:c9:c1:19:31:28:08:c5:5d:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:6E:AB:E3:69:A4:2E:D2:B0:A5:BA:9D:73:45:8C:62:80:16:D0
X509v3 Authority Key Identifier:
keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:37:84:2b:9f:5c:29:40:d6:33:a2:f3:80:b9:fc:19:a9:f0:
e4:3f:65:b6:e4:54:38:9e:c7:06:ca:86:e8:c7:8b:b9:fc:a2:
0c:db:dd:d2:25:84:e2:01:1f:9d:74:f6:2a:1f:64:f5:f1:41:
b8:89:60:af:87:85:8c:3e:a1:05:c6:4a:40:7c:06:69:3e:7c:
35:a0:0a:f6:a3:08:07:94:15:48:4c:fb:45:cf:db:c4:c7:45:
2d:98:f8:53:35:89:b6:65:12:03:b6:fd:64:3b:5a:50:a3:de:
66:82:4b:73:29:7a:35:f3:18:6d:eb:16:12:97:18:94:85:f7:
ff:23:7d:7d:77:61:67:73:2f:9d:88:6e:0b:2a:0d:54:a2:4e:
80:18:eb:cb:c8:9d:97:07:4c:2d:45:35:cd:3e:07:29:83:d4:
d1:52:62:c8:97:b8:f6:cc:64:be:5a:9a:53:bc:0b:04:c9:f0:
b6:23:ac:81:74:f3:b8:5d:f0:dc:93:7e:b7:4c:64:41:1a:23:
5c:7b:2d:19:e4:37:83:d1:f0:89:9d:02:10:10:81:ed:6c:48:
80:4b:14:d7:e8:f4:7c:dc:3e:d2:28:1e:29:d9:ad:eb:62:46:
9b:8e:cf:6f:17:67:fb:ab:53:b3:c5:90:bd:cb:9c:e0:16:b2:
7e:2e:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:22 2026 by rpki-client