
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier: +dOPti7KnN45ooFu+UxKA4H/S0YFx0V2ldcvT9Rd1kw=
Subject key identifier: 3B:40:1C:6E:C8:C3:15:D8:B8:9E:BD:E7:6E:78:6D:C2:EB:70:5C:E0
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number: 01F9
Signing time: Sat 13 Jun 2026 03:14:54 +0000
Manifest this update: Sat 13 Jun 2026 03:14:54 +0000
Manifest next update: Sat 20 Jun 2026 03:14:54 +0000
Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: F13jsP2ZbhwesE8ozJcCl+bDI1xNrsUgkcMFHeBdnkM=)
2: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=)
3: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Validity
Not Before: Jun 13 03:14:54 2026 GMT
Not After : Jun 20 03:14:54 2026 GMT
Subject: CN=6a2ccb2e-6b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:54:8b:e2:a4:f0:52:78:93:39:da:77:63:
87:7e:c2:f4:46:83:fe:b3:c0:96:83:f4:44:ea:20:
ce:16:3c:c6:a3:20:78:8d:b9:c2:95:07:22:64:8a:
7b:dc:90:4b:76:7a:a6:69:4c:6d:89:57:69:ec:a7:
63:28:c0:ec:cd:10:79:29:f3:8e:bf:f2:d3:6f:c5:
3a:2d:eb:39:0e:40:26:db:ef:68:cc:33:92:59:d0:
58:8b:34:ae:50:7a:85:29:f8:d6:80:fc:bb:7b:cf:
32:b1:0b:bc:fd:f9:0b:97:65:85:ee:09:33:0e:e4:
20:f2:dd:55:42:d1:5b:db:61:b6:71:85:9b:86:60:
63:55:3e:28:c3:31:79:bf:1d:4e:2b:99:88:82:38:
7c:ca:16:e3:5f:f5:15:2d:23:5c:f0:4c:c0:aa:68:
97:c7:bb:09:01:c2:a7:25:13:29:cb:53:e3:28:4e:
20:81:44:75:31:d9:ca:f2:fa:b7:9f:be:75:28:78:
f1:e6:97:1b:28:49:80:94:db:fe:20:9e:18:89:d8:
38:16:34:39:1f:ce:4c:d0:71:6e:00:0a:35:34:9c:
a4:9c:53:27:99:81:01:2f:17:65:8f:29:f7:95:1d:
63:8d:f7:41:26:0e:e8:90:96:dc:3c:45:ca:13:8d:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:1C:6E:C8:C3:15:D8:B8:9E:BD:E7:6E:78:6D:C2:EB:70:5C:E0
X509v3 Authority Key Identifier:
keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:dc:06:09:22:80:df:3d:5f:3c:46:bf:9b:cc:9a:64:53:77:
c3:84:18:ec:8b:70:58:7a:fc:4f:a3:f5:9b:9d:46:d6:84:3c:
dc:06:23:58:e2:e8:64:d4:fd:b7:10:a1:17:7e:2d:0f:2d:f8:
cc:98:c9:36:58:42:60:5b:3a:28:0e:3d:71:0b:84:3b:1c:8d:
f6:8f:5c:8c:61:98:60:9a:da:ba:d2:c8:67:d9:44:7e:e4:bb:
68:5e:ad:a1:f8:8a:cc:80:3b:0a:86:95:27:ac:50:95:46:bf:
4b:1e:39:88:5a:9c:92:fd:ae:cf:d1:9f:29:c2:7e:03:7d:ff:
35:58:b0:75:a9:77:f6:e4:fa:3d:03:30:97:47:c1:ba:25:a1:
a6:34:5a:8e:01:f5:33:42:55:f5:8c:5a:d9:73:82:fa:51:c9:
fe:d8:87:a8:c3:09:7a:f3:b9:95:5e:a9:f2:a6:ef:39:86:e2:
26:86:31:ad:8f:11:df:87:a9:b8:69:7b:95:25:69:a0:53:d5:
a8:da:45:ff:70:b8:a6:a2:7e:7b:6f:cb:27:76:bf:40:c1:92:
00:52:5b:83:29:d1:1f:17:0a:14:0a:92:a6:af:a6:3b:47:4e:
1a:16:87:5f:5b:0b:aa:65:1e:fd:54:c5:8f:9f:a5:ad:a5:48:
1b:79:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:16 2026 by rpki-client