
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json)
Hash identifier: JYIqAxMw+8+WfYhsCHBed1HNx0ITjdk+U2o+yer1Jio=
Subject key identifier: 9C:97:C3:53:17:FF:AE:15:DF:AD:C0:7C:7F:2C:F9:43:C0:0A:1C:2C
Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Certificate serial: 064D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
Manifest number: 0639
Signing time: Fri 12 Jun 2026 22:48:36 +0000
Manifest this update: Fri 12 Jun 2026 22:48:36 +0000
Manifest next update: Fri 19 Jun 2026 22:48:36 +0000
Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: pfJzorff/Q3qX7u/Thh36OXTjVITg+dLQINtN1t027o=)
2: F50A884C5DDF11F197B40288B8833773.roa (hash: 9rUDU6NmwXNmelpt6cYq2BCwimYK9ztmiUJ8y08WBM4=)
3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: uYxDc2s73H33RAjSESYgkRg+fhVzlnP0WIWOn/2ko/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Validity
Not Before: Jun 12 22:48:36 2026 GMT
Not After : Jun 19 22:48:36 2026 GMT
Subject: CN=6a2c8cc4-9379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:eb:03:95:9a:9f:b9:3d:43:73:2f:86:ac:
c2:8d:18:13:c7:76:01:9e:98:41:b3:83:54:c7:75:
9c:7b:f0:0f:36:b7:34:88:ac:99:a4:f2:69:84:dc:
c8:4a:f0:b8:e5:c5:6f:36:0b:15:2c:c6:d9:af:eb:
09:b0:fe:59:bb:22:c9:1a:81:15:db:12:f4:6f:20:
8d:9c:fd:1f:dc:72:59:2c:5b:1e:bc:a5:71:4c:b8:
ad:5a:c7:1d:a6:ff:e9:12:5c:99:f5:a2:f2:a6:62:
43:ac:3d:fa:5d:db:50:29:99:a4:0b:bb:bd:3c:27:
ac:5f:b7:6b:97:df:f4:15:a5:7a:34:3c:c4:30:2c:
80:7d:16:97:b1:25:04:68:cc:2a:8a:a4:54:07:d9:
24:dc:7f:4f:8a:2d:7f:b2:b9:12:ce:17:99:00:f8:
9a:6c:d1:b0:1b:52:d0:d2:8b:3b:7a:7e:0e:a0:7a:
8a:62:c6:b3:23:8d:86:ea:3e:19:aa:f7:83:1a:a8:
97:01:cc:a4:79:14:72:69:96:2f:ba:30:5f:66:24:
05:ea:1c:fe:1b:3c:b5:20:47:8e:7a:26:87:6f:a3:
ec:6c:89:07:99:93:ce:51:50:d8:9a:a6:a0:3a:15:
dd:d2:c9:f9:6d:d5:b5:1f:72:27:a6:b7:b9:ca:bb:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:97:C3:53:17:FF:AE:15:DF:AD:C0:7C:7F:2C:F9:43:C0:0A:1C:2C
X509v3 Authority Key Identifier:
keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:dd:65:78:04:0a:8b:d1:77:5a:9a:74:9d:55:7a:48:22:b5:
c0:65:0e:09:12:a7:8c:5f:77:db:a3:d7:1f:78:18:04:85:ca:
7e:2c:d0:22:e5:43:4b:ac:83:50:41:c0:98:8e:c4:ca:7b:61:
d3:e6:59:f3:ba:49:a8:1e:1c:6b:c6:f6:a1:f8:44:82:f6:ad:
52:f1:a7:de:05:1e:25:0b:ae:55:4a:73:75:21:cc:12:5b:c0:
23:8c:cf:b6:5f:94:f6:45:17:98:40:d4:5a:da:fb:86:25:02:
db:52:84:d5:d1:c6:16:2c:03:d6:03:e3:73:87:4d:24:52:6f:
16:56:fa:44:47:86:78:73:aa:5b:b4:b4:e3:98:77:8c:50:71:
aa:50:4a:31:58:a3:49:7a:1a:78:a4:de:b7:c3:9b:c0:38:12:
38:30:4d:65:ac:b5:66:74:bf:22:62:ca:6a:aa:41:a5:65:ec:
cb:33:a8:57:50:18:25:9b:92:b4:e6:8c:a1:2b:41:b4:de:8d:
d1:30:b1:84:da:ef:da:1b:29:d1:d8:6e:7e:a5:98:85:ea:f3:
78:a3:92:18:d5:ef:b7:60:b6:e8:e2:29:00:5d:59:d0:48:6c:
cc:32:34:6c:91:47:a9:59:b5:6f:12:44:2a:39:62:07:c5:eb:
eb:e4:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:39 2026 by rpki-client