
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json)
Hash identifier: PANIAt9nlzbkVgISDQQBFa5fRmpR+X7PLmwQA15yYG4=
Subject key identifier: 02:12:FB:05:30:85:16:07:42:EB:AC:4B:CD:9F:11:CB:0C:C2:82:01
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 09D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
Manifest number: 1AD6
Signing time: Fri 12 Jun 2026 17:12:14 +0000
Manifest this update: Fri 12 Jun 2026 17:12:14 +0000
Manifest next update: Fri 19 Jun 2026 17:12:14 +0000
Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: z87s0sO+ypXa8jrMz/cQhhsqIzY+kn/FrHIf1I1izSc=)
2: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: 7tv/5D9HntchiRfctALMuiuXJj9zM35Uyt8wDbjn1wE=)
3: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: xbADL7cJr+2vRtqNmInV63ZP0c0h+KFlCiFFTFNf4Uk=)
4: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: eIWV2PVAmeguQkSyB8K0knff+OjMcoKXdZxZHafjh0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: Jun 12 17:12:14 2026 GMT
Not After : Jun 19 17:12:14 2026 GMT
Subject: CN=6a2c3dee-cfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:42:7f:dd:52:e7:55:10:71:fc:32:86:72:
4c:2d:cc:b4:33:93:63:b0:7e:fe:72:5b:a9:48:e4:
f3:0a:9b:40:5c:1f:f8:23:40:4c:e4:1a:4d:b9:a1:
15:66:80:44:1b:39:f9:71:9a:0f:bd:97:57:be:a6:
d6:5e:42:2d:df:b3:e6:10:ca:6e:c3:21:ee:e1:56:
f1:f9:e8:5f:70:2d:0f:44:bb:de:85:b3:18:62:59:
ac:0a:50:dc:62:62:02:10:68:a6:89:c8:53:11:8c:
14:f6:73:5b:c5:c2:90:42:17:7e:d3:21:2b:0d:23:
38:8d:99:93:64:d0:10:71:25:35:88:18:81:64:e8:
1d:25:15:0f:5a:33:c4:f8:9d:00:e4:4b:68:f1:14:
b2:a6:34:8f:da:23:a8:3c:f5:6a:34:51:e2:5c:47:
d2:36:2b:32:32:59:1b:d5:d9:72:83:54:31:de:fe:
7d:2a:dd:01:db:c6:4a:af:c4:82:cb:cd:4f:60:d8:
bb:1a:e6:17:8a:7b:cb:55:4b:da:7f:bf:18:6e:46:
68:65:fe:21:b4:db:eb:6a:d7:2e:cf:32:8b:42:8c:
96:4d:f4:85:29:86:6f:f3:f0:76:12:bf:81:80:c0:
3c:ff:31:09:7f:04:ed:5a:a4:57:8f:d3:9e:db:67:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:12:FB:05:30:85:16:07:42:EB:AC:4B:CD:9F:11:CB:0C:C2:82:01
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:0e:23:e3:75:66:d7:88:c4:fd:21:76:a4:28:f8:22:6c:
8d:ee:96:48:94:84:9d:ab:96:f4:39:2a:4a:cc:7f:14:e2:bf:
63:36:9d:1c:42:cf:bf:8b:f3:dc:c4:42:dc:d7:77:37:96:e8:
a6:00:66:bd:66:48:8a:df:d1:b5:94:87:10:ac:13:3b:4d:16:
ed:f8:a2:9d:ea:5f:8b:97:2f:e6:f8:1a:8c:d0:70:94:07:0a:
8c:97:e1:f3:c9:6e:c7:e3:e7:ba:f3:4b:a9:05:08:08:17:c3:
7f:53:3f:37:67:92:6a:75:eb:13:39:1f:c0:68:1c:aa:48:7f:
06:f1:95:ed:81:58:c6:ad:de:2e:1e:ef:76:ef:b9:af:c3:bc:
dc:5b:e8:b2:64:3d:97:2b:80:a9:cb:6a:3b:1e:b9:25:e8:46:
24:b8:e4:da:80:92:a5:df:ee:2a:55:59:a6:65:a6:6e:9c:73:
ec:b6:ed:6b:6a:69:24:61:c3:2d:83:44:11:be:6d:a7:d1:a6:
74:8d:dc:2c:c4:f1:ab:cb:d4:af:3e:96:a3:c7:a2:88:4c:14:
fb:ae:2e:a0:05:0b:16:f1:99:32:f3:18:06:d3:18:c8:6b:64:
ed:fb:8c:11:7f:08:4b:87:03:84:80:42:6b:66:e6:4a:69:1c:
4f:24:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:27 2026 by rpki-client