
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier: qwPZTZYbBXhCnnExKYGH3m7eNGLsQQ4g27FKlXCS9Zs=
Subject key identifier: 64:71:57:AA:47:C1:28:6F:BB:4E:B5:B9:33:49:E0:42:BE:31:FB:86
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial: 0858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number: 0850
Signing time: Fri 12 Jun 2026 20:55:56 +0000
Manifest this update: Fri 12 Jun 2026 20:55:56 +0000
Manifest next update: Fri 19 Jun 2026 20:55:56 +0000
Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: MG/Lumd+i9UdzzS9uo08Rf2/vrhStbC68v49+otNo78=)
2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: HLXn0y5saMGZHdBI1Bh2ImWIk/Xfj9Kl57imAxrALWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Validity
Not Before: Jun 12 20:55:56 2026 GMT
Not After : Jun 19 20:55:56 2026 GMT
Subject: CN=6a2c725c-75f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:0c:e6:31:6f:da:4e:fd:84:f0:37:8e:2c:
52:0e:7d:53:08:1d:d5:9a:71:9d:6b:7d:c2:bd:6d:
91:ee:4c:ac:f3:3f:e9:b0:52:9f:69:40:00:28:81:
8d:10:0d:bf:80:0d:15:dc:48:03:3c:ff:d5:58:2e:
7d:bb:36:3a:44:bd:03:ff:a7:45:33:2d:b8:36:26:
51:23:5f:75:e0:2b:66:76:86:1b:ab:43:5e:ac:22:
26:bf:5f:45:bd:75:95:8d:b4:ea:3d:c3:c5:d1:a7:
4f:56:3a:b4:12:7f:8c:51:1d:73:2e:1f:0b:92:0e:
8c:55:25:a8:52:8a:c3:88:5e:1f:bd:5e:b0:4c:20:
b5:39:ce:09:1a:5f:7e:51:0d:1b:06:53:37:ea:eb:
9e:f9:e0:9b:57:ad:8f:63:8a:de:73:65:94:72:77:
b2:03:3c:d2:8f:fe:48:28:42:1b:7d:ba:50:20:09:
cf:4b:25:74:7c:af:93:88:1e:65:0b:9b:a2:a8:61:
74:73:fb:8e:94:e0:be:2a:5b:f1:c2:db:83:50:12:
8f:6f:53:fd:32:f9:4f:fe:43:27:d4:64:7d:cd:d8:
2b:89:9a:d2:57:bc:a2:0f:ee:d7:05:71:c8:9a:02:
a1:4e:32:05:65:d4:dc:84:f7:84:0d:2d:a2:45:ce:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:57:AA:47:C1:28:6F:BB:4E:B5:B9:33:49:E0:42:BE:31:FB:86
X509v3 Authority Key Identifier:
keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:86:ad:29:fc:bf:82:1b:54:71:ca:37:4e:09:3b:53:07:
ee:ba:65:cb:9c:87:71:69:ad:c1:d0:90:0a:cd:d9:4c:3c:16:
b2:4c:db:af:66:9a:88:10:a6:dd:67:89:1d:8f:e6:ac:7d:2e:
0f:b1:83:14:45:43:d1:f3:94:ab:77:0a:60:78:b6:93:27:3c:
33:15:9c:2d:d0:e7:5b:d9:9c:20:04:b0:85:c7:72:81:2e:6e:
0f:75:6c:ce:68:b5:34:88:ea:c3:16:80:bb:be:4a:07:0b:50:
73:39:23:4e:fb:e7:a6:87:53:90:7e:fb:b8:c3:fc:a2:49:86:
c1:66:57:95:5e:2f:13:25:4a:9a:d8:15:53:c7:ec:bf:8d:ca:
1f:86:98:45:de:f0:38:c0:d9:18:3b:49:2a:1a:8c:23:60:11:
99:7b:ca:2b:ea:b3:3b:af:e6:a8:a4:b7:ef:85:cc:12:3b:d2:
7e:fe:c9:bb:e9:a2:98:0b:d2:93:a6:59:3d:45:5f:81:db:1e:
99:10:d4:d6:f7:b4:1e:a4:39:02:e3:35:c4:4e:0e:56:78:d0:
52:a3:98:b9:1f:9a:3d:b5:6d:57:79:36:31:3c:48:ff:73:82:
c1:19:16:b3:31:a2:26:b3:72:56:61:6b:e9:5d:1a:40:9d:d6:
50:ba:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:41 2026 by rpki-client