
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier: v0yYVQj5EuNUs9cPfDOti25kcKF5WKzjoqphVK+2re4=
Subject key identifier: AF:76:19:D6:5E:12:18:B1:62:58:C4:DF:87:97:4F:33:8C:62:18:50
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number: CB
Signing time: Fri 12 Jun 2026 20:26:52 +0000
Manifest this update: Fri 12 Jun 2026 20:26:52 +0000
Manifest next update: Fri 19 Jun 2026 20:26:52 +0000
Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: pq2J7BKE/2SQs36R8ry8bXnjJHRaRwF6IJXiP0J1Pgw=)
2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: NPJSodbwWKPxaxqcL20NVvStl+UOM4gI9IHpj1XGIKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Validity
Not Before: Jun 12 20:26:52 2026 GMT
Not After : Jun 19 20:26:52 2026 GMT
Subject: CN=6a2c6b8c-8b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:25:51:e8:6c:a9:2a:c2:f7:ad:8b:4d:25:
ac:67:1b:26:82:36:b6:da:61:26:70:6c:fe:ae:f9:
6f:96:37:5b:8d:0f:a9:36:df:0a:fc:c4:d6:b9:42:
d8:7f:69:7e:d5:d6:7f:90:d3:fc:e4:f7:06:6d:52:
57:fd:cf:da:8c:17:34:ce:a3:7e:0a:66:9a:d2:97:
a7:40:b8:a7:6d:6c:35:32:5b:68:ce:99:7b:da:83:
3a:9b:79:e0:52:ee:83:f4:55:92:e9:45:78:3f:90:
66:33:09:99:72:84:50:a3:6a:c1:f1:71:51:0a:6d:
df:34:15:99:1b:ab:ea:22:18:eb:8a:e5:59:2a:db:
f1:e7:51:cf:d3:61:60:32:e8:75:98:4d:53:93:ae:
c2:f3:60:e9:c8:e1:46:0d:74:c4:7b:ef:f4:2f:ac:
58:76:03:af:32:47:f9:f2:79:68:2f:98:a9:67:a2:
ab:64:00:eb:8a:28:54:0d:89:ac:7a:d8:0f:79:91:
6e:6f:8e:d1:64:1d:67:f1:22:3c:32:c5:89:c2:53:
15:fb:33:f6:16:5a:59:b9:28:28:3e:5b:eb:81:62:
91:4d:0b:c9:de:a4:28:59:a5:26:2f:d7:39:87:9f:
f3:5f:f4:ef:13:41:03:0a:87:01:5c:55:17:3d:ca:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:76:19:D6:5E:12:18:B1:62:58:C4:DF:87:97:4F:33:8C:62:18:50
X509v3 Authority Key Identifier:
keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:39:08:93:da:6f:91:33:00:5c:e4:1b:a3:b7:56:de:fa:56:
f2:f1:65:13:a2:cd:c6:dc:a1:8f:42:a4:92:26:26:22:da:a9:
61:76:ea:b8:df:2c:32:14:9d:3b:67:ca:be:2f:5f:56:46:96:
ef:73:82:b0:47:09:d1:e4:b9:9b:4e:1f:6c:90:82:ea:00:77:
bf:8b:19:06:c1:c7:39:6d:a3:b1:c4:38:96:33:84:7f:0b:06:
9b:ef:88:99:7c:ce:a9:63:39:45:c9:0d:2f:11:bb:f8:a6:ef:
1a:82:eb:20:27:43:90:3b:3e:57:7b:fa:3d:ed:4d:cc:db:ae:
f6:db:33:69:46:2e:95:93:97:ee:71:7c:84:d4:e3:e6:ab:a7:
10:7b:70:e9:93:69:07:cb:be:87:27:b4:73:0c:05:95:d7:19:
57:61:3d:3a:60:75:d0:86:0a:df:77:6e:ce:43:8f:e5:4c:f6:
70:b0:4b:43:58:fe:d1:8d:24:7e:33:b4:a7:8f:40:d3:4d:06:
fa:99:5d:af:22:28:13:51:75:11:23:78:b1:9c:d3:b2:5d:e3:
f6:5e:a3:26:ca:7b:eb:9b:7e:67:7e:0b:e9:ba:95:19:51:e5:
21:36:29:d2:c0:09:05:44:99:37:53:15:6c:be:01:5d:87:d1:
df:ae:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:26 2026 by rpki-client