
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json)
Hash identifier: ullPM0giJv43w9MCGdjcWXKW31n+P9ifPdSAgoPix7g=
Subject key identifier: F8:C6:A8:74:D9:5A:D8:2D:CE:40:62:AE:35:3D:CB:A3:92:3B:B3:9C
Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87
Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
Manifest number: C9
Signing time: Sat 13 Jun 2026 06:55:08 +0000
Manifest this update: Sat 13 Jun 2026 06:55:08 +0000
Manifest next update: Sat 20 Jun 2026 06:55:08 +0000
Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: WGi2d0+VHdQ9FQ1zXEbcR3BNeINx2nw6TECXU/OMkh0=)
2: AE67395858D011F1B2604194A2833773.roa (hash: 0/14bImAgE2URSR4c1VW0n5tknPVytdkPxXZ0kflIto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
Validity
Not Before: Jun 13 06:55:08 2026 GMT
Not After : Jun 20 06:55:08 2026 GMT
Subject: CN=6a2cfecc-bf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:ea:93:5e:a4:e0:85:5d:61:bf:6d:81:da:
42:80:ca:2e:a4:d9:5c:08:23:42:f8:cd:14:10:a1:
a8:6c:f6:f4:fb:8b:70:5b:ac:8c:85:4b:d6:cc:0e:
2a:6d:c4:19:82:03:e7:30:eb:09:4c:5c:2d:79:cd:
e3:a4:17:db:3c:d1:df:15:9b:7f:ca:a8:54:2f:b5:
5d:bc:1d:46:62:6f:c4:17:64:f2:b3:6a:75:3f:de:
01:e7:b4:4c:56:fc:21:0c:62:b5:55:d3:a7:0c:15:
74:26:22:52:f6:14:90:97:2b:f8:88:7d:f9:28:26:
2a:f8:d1:ec:e0:a6:2b:3f:f1:b0:b5:78:de:5f:f9:
05:7a:92:78:3a:2f:74:9c:2d:8c:05:66:89:2d:5d:
c0:c3:6b:bb:08:da:d3:66:55:b9:3d:81:4f:5e:09:
f2:86:9e:1f:64:7d:6b:82:54:76:95:ca:49:61:f7:
98:bf:db:e6:16:0b:42:d1:66:93:bb:19:11:ff:a6:
97:a6:fb:ce:c4:05:9b:03:8d:cf:81:e2:a3:52:e1:
b5:e4:fc:ed:4c:cf:4c:dd:9c:fb:9d:1c:db:97:fc:
9a:11:43:e5:66:11:07:76:d0:ac:6c:e7:12:f8:f3:
e2:4b:d3:6d:69:36:b2:32:a6:d1:c5:8c:29:8e:3b:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:A8:74:D9:5A:D8:2D:CE:40:62:AE:35:3D:CB:A3:92:3B:B3:9C
X509v3 Authority Key Identifier:
keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a8:6d:d1:66:f2:50:f0:74:0b:f5:de:44:11:7f:90:b0:c7:
df:39:6c:db:e0:79:77:b0:85:40:89:e6:93:de:4f:73:89:3f:
1a:29:33:7d:44:76:bf:86:f7:53:ca:7e:05:b9:ff:80:82:70:
82:1a:23:f8:ee:b8:2e:c6:e7:33:14:88:91:1a:d6:05:02:7d:
08:90:af:fa:16:21:4f:db:5f:a4:4b:70:fa:9c:bb:7b:a7:b8:
fd:fb:1a:63:f7:10:82:27:50:bb:c9:ab:39:d7:37:a4:d8:96:
36:3f:db:0f:ec:3b:fc:79:74:3c:2a:9c:38:e8:9e:31:5d:56:
40:e2:5f:c0:cb:e8:3c:e5:db:7d:25:94:66:02:93:32:4a:da:
7c:5e:38:a9:70:66:d2:73:8e:86:fe:6f:bd:5e:59:d2:4c:ec:
ab:cf:af:aa:e5:67:14:40:49:fa:0e:8c:14:00:e3:5e:e4:bb:
d1:27:ca:91:a9:5c:21:b1:32:8c:67:0f:1b:ae:aa:6b:56:fc:
06:bb:74:18:99:7f:c4:11:36:3f:5e:fd:26:3d:b0:ab:43:a4:
02:55:08:16:89:dc:77:5a:d5:68:3d:46:0e:f2:d6:05:b0:eb:
d5:be:6b:f9:2e:e8:ec:c6:3b:2d:61:ed:b4:c7:bd:98:0a:93:
f1:e8:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:36 2026 by rpki-client