
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier: n+MCfxUQPr911r204I6/b3zGJm+h/bgD2Z8TX9ALY+o=
Subject key identifier: E8:D0:8B:58:A0:B5:A2:55:93:38:00:B0:B1:7E:AD:78:58:13:97:DD
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 069B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number: 0688
Signing time: Fri 12 Jun 2026 22:36:15 +0000
Manifest this update: Fri 12 Jun 2026 22:36:14 +0000
Manifest next update: Fri 19 Jun 2026 22:36:14 +0000
Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: VU7cm8LCLEoFxJfRhbLsFZYCmrBVSzN52AVtjpsjjCk=)
2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1691 (0x69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Jun 12 22:36:14 2026 GMT
Not After : Jun 19 22:36:14 2026 GMT
Subject: CN=6a2c89df-bfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:ce:b3:b2:f0:d2:59:68:7b:d3:0e:4d:2c:
4a:ba:d7:37:75:54:9c:4c:12:2d:19:6a:6b:e9:07:
3f:f2:8e:a6:0f:5a:3b:38:8a:cc:23:d6:3b:97:b3:
e3:ed:6e:13:62:34:35:29:86:d2:e6:cf:2a:63:5b:
4e:90:ea:4d:a5:9e:79:ab:75:0e:8d:78:d8:67:52:
58:46:31:17:e3:03:42:21:6d:9f:85:a9:c2:17:93:
39:15:14:65:b8:e9:89:16:5c:30:d1:4a:d0:fe:68:
78:5b:ac:90:db:19:cd:50:31:ea:a9:e5:89:b8:61:
4a:89:d9:fd:fa:74:1c:0f:85:10:c5:1d:24:de:5a:
21:6f:f9:8f:73:c5:47:de:b6:b6:6d:61:c4:d4:fa:
09:a9:38:a4:80:74:6b:a6:1b:28:47:eb:cd:b7:53:
a3:47:96:f6:ba:04:2f:d3:53:2b:82:2d:c0:79:4d:
54:c3:2e:02:e7:a0:ed:90:35:04:8f:51:16:c5:60:
3a:86:8f:47:4c:86:57:e0:c1:35:5c:a5:19:83:88:
24:85:fb:56:c4:ae:49:83:24:d5:0f:ee:dc:c1:f3:
b2:97:69:3e:1d:5f:3d:bd:35:e8:ff:f9:9f:67:be:
d0:39:70:55:e5:cd:82:a2:d7:9e:51:dc:fb:1b:8a:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:8B:58:A0:B5:A2:55:93:38:00:B0:B1:7E:AD:78:58:13:97:DD
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f0:85:cf:8d:98:e8:bc:06:1d:80:13:a6:ab:53:62:13:2c:
59:55:91:e0:15:ca:a9:13:10:23:97:96:20:9f:7f:71:fc:40:
6c:55:33:f4:57:3e:e8:57:51:d0:3d:96:e1:58:b4:d3:04:62:
9d:90:e0:52:06:47:fd:35:e9:4c:64:0b:ee:5b:3c:1e:27:db:
20:54:6f:d1:2a:e6:68:c9:fd:18:64:21:3f:1b:95:88:df:3f:
82:a2:6c:73:7e:12:db:01:80:b7:44:58:55:49:95:b7:4c:58:
ce:7e:d3:cd:9f:70:3c:a6:81:0e:a2:e2:e4:ee:d5:86:d6:19:
80:48:fa:9a:d1:89:91:f2:ef:96:51:69:eb:8f:76:a7:d7:67:
e2:0f:0d:65:6f:54:9f:26:df:35:bc:75:c1:e9:3f:bc:75:b2:
99:f1:f8:b1:e8:61:5c:37:92:33:56:ad:b5:4d:4a:0e:bb:00:
07:68:81:a6:52:ce:bb:fa:17:5d:99:64:9c:cf:a9:48:4b:02:
fa:aa:1c:aa:e6:e7:3a:23:ea:2c:d4:96:aa:22:e5:56:2e:8c:
75:e9:77:e4:d0:59:1f:0c:ee:46:34:d0:30:a1:9b:15:de:e8:
dc:d3:d9:90:9d:0a:35:2f:e8:65:71:b4:22:6e:08:17:eb:d1:
d6:48:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:16 2026 by rpki-client