
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier: 591LDRZM1JwDcKymJOMeoEkkgm/AOurvg/MtWbQWl+s=
Subject key identifier: 7E:8A:44:97:79:7C:D0:86:B0:4E:F5:91:70:DB:74:37:12:79:9F:03
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number: 6D
Signing time: Sat 13 Jun 2026 07:57:41 +0000
Manifest this update: Sat 13 Jun 2026 07:57:40 +0000
Manifest next update: Sat 20 Jun 2026 07:57:40 +0000
Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: 7JD8sWhte8YURA8UD9nG8b0f0mxtqsTjMfyZY7NUsro=)
2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Jun 13 07:57:40 2026 GMT
Not After : Jun 20 07:57:40 2026 GMT
Subject: CN=6a2d0d75-0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:4a:0e:f9:ac:bd:45:01:bf:91:22:fe:64:
9b:4f:8b:9a:33:95:ca:7e:fd:0e:99:b4:8a:ac:8f:
a1:5a:9e:35:4a:46:0f:c2:d7:bf:91:ee:e7:62:a6:
64:83:47:34:8c:00:ca:cd:68:f5:7a:33:45:94:20:
5f:9e:db:39:94:59:a7:e4:92:42:7f:84:a7:a9:a7:
88:b0:10:04:d8:7a:1d:fd:b3:f9:81:a7:17:36:a0:
d8:27:6b:a6:87:50:61:62:ec:28:78:f7:66:a9:46:
39:1e:18:ad:0b:11:9d:8d:7e:e9:95:3e:e8:4e:1d:
2d:dd:97:b8:d2:26:cf:cc:b4:41:38:40:f8:97:05:
78:fc:77:36:40:65:80:60:14:a1:de:32:3b:ab:81:
65:f7:67:04:31:ad:2a:a2:c1:84:67:7e:02:1a:ba:
c2:ca:f0:af:8c:6d:9c:2e:c8:37:77:cb:a1:a4:df:
2c:08:fe:6b:29:54:28:94:94:fe:df:9c:10:03:86:
e3:20:b3:fe:a3:f6:a3:d8:65:02:49:bc:f1:32:92:
74:57:72:9a:90:d4:7d:ce:66:67:4b:ec:5a:25:52:
02:f1:41:04:79:6c:d9:d0:4b:07:67:f8:79:80:4b:
b2:d9:bc:a8:27:68:b8:3e:d4:37:c8:52:d1:32:64:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8A:44:97:79:7C:D0:86:B0:4E:F5:91:70:DB:74:37:12:79:9F:03
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:51:71:d7:b4:ef:2e:06:f5:c1:fd:5b:4a:66:a1:b0:2f:dd:
6a:a0:4c:29:25:8a:4f:1b:10:cf:5b:4d:93:ac:37:d5:88:94:
c9:dd:ad:6d:3b:c5:d0:46:0a:da:40:e2:29:9c:9e:17:46:0e:
e4:35:8e:05:34:22:4c:66:e5:fe:ee:2f:a0:e8:46:8a:36:8c:
09:d6:af:16:e6:7c:7e:5c:9f:e9:1d:41:36:18:d0:43:09:8e:
81:5e:33:88:fd:52:21:23:a7:3e:3c:e9:71:a1:ef:64:b6:78:
95:f3:c1:60:0f:14:ab:01:83:6a:98:2a:cf:a6:d9:64:f2:24:
ed:b5:81:64:ea:44:2b:0c:de:c8:eb:2d:f7:e5:47:3c:ea:19:
92:fb:a1:3f:16:74:34:8d:c4:0a:e7:ee:27:cf:6b:c0:7b:7f:
06:1f:16:32:04:2f:05:0c:57:3c:06:dc:25:2b:85:24:fe:06:
5e:c8:72:81:63:6d:c4:54:b8:cc:bb:24:ac:7c:6c:52:b5:87:
f3:39:51:2f:4b:5d:a9:b6:38:02:52:9b:ac:be:fc:3b:0b:3d:
22:65:ae:29:ab:8e:eb:b1:a2:3a:79:19:c5:f7:cb:84:cb:91:
6e:93:3c:0b:2a:95:76:fd:f0:42:e6:2d:34:0d:bf:be:30:72:
64:b0:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:53 2026 by rpki-client