
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
File: tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json)
Hash identifier: enMunAOtIQ1QlMBG396s43vsez7lpNh3zCI4qFN3Jok=
Subject key identifier: 62:77:C8:B5:70:4A:52:E4:E0:65:C4:19:D5:D7:69:69:2C:9F:92:1D
Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
Certificate issuer: /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
Manifest number: D2
Signing time: Sat 13 Jun 2026 06:49:20 +0000
Manifest this update: Sat 13 Jun 2026 06:49:20 +0000
Manifest next update: Sat 20 Jun 2026 06:49:20 +0000
Files and hashes: 1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: Kk3umMgdTbMukYFQdz5eVWWptyxce6YOsyFLmvblh6s=)
2: D470A60E294511F0B1412377C4F9AE02.roa (hash: GSkbxwT7s713aepzAHb1asdunZV2hHHIcFkvDpvvdJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Validity
Not Before: Jun 13 06:49:20 2026 GMT
Not After : Jun 20 06:49:20 2026 GMT
Subject: CN=6a2cfd70-0369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:98:cd:77:76:9f:12:50:74:9b:b3:47:1d:
a8:40:e0:ee:65:f1:f3:70:8a:63:75:9e:fa:92:70:
be:8c:b6:9d:a2:a3:35:5f:bf:68:e9:c4:e5:f8:e7:
01:8b:28:a4:47:43:0e:1e:eb:4e:9d:91:79:10:75:
9e:59:41:33:ad:d0:a6:1f:e0:d5:e5:f3:5c:50:91:
3b:46:6d:28:df:f6:05:5c:d2:76:bb:ca:d2:fc:af:
5c:b5:1e:00:b0:12:2f:21:83:40:df:9b:d6:e4:54:
e7:f3:cb:c9:02:e7:0e:ed:91:cc:50:52:e6:12:64:
7e:77:36:14:39:56:29:d2:21:c3:7f:b4:59:c2:0e:
29:40:36:aa:c9:6b:26:c6:56:47:79:3f:a6:e9:a9:
95:55:85:06:6b:ec:e2:62:79:ca:eb:fd:73:1e:2b:
9f:56:7e:8e:4e:3e:9c:16:7b:c8:1b:e8:bb:0d:ec:
a9:e0:1f:ed:37:43:e3:e7:36:33:3a:17:bc:de:ca:
d4:e4:ce:ef:85:b6:87:b8:e2:f5:a5:14:f8:df:ba:
72:cb:75:7d:94:97:4a:46:bc:72:a3:aa:f0:a9:68:
fc:76:6e:00:8d:f7:70:d5:a3:9c:d2:18:97:ba:41:
62:ec:ed:61:b9:8a:c0:a7:11:dd:56:c3:e4:a0:30:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:C8:B5:70:4A:52:E4:E0:65:C4:19:D5:D7:69:69:2C:9F:92:1D
X509v3 Authority Key Identifier:
keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a3:a7:a9:52:10:62:13:27:34:60:2b:6c:86:1a:7f:60:05:
a1:7a:b4:a2:18:d9:37:07:70:f4:73:11:53:5a:bb:8c:f2:71:
29:cd:5b:ce:ab:18:21:94:61:7e:cf:9d:2d:f2:fe:cd:14:8a:
a1:ac:7e:30:ea:6b:c0:a4:00:ad:46:21:50:cd:e8:e6:a8:11:
00:8b:84:04:d2:37:3c:4a:13:af:4b:c3:f6:3a:11:7b:54:7c:
e9:4a:2c:ea:34:0a:b1:ff:3e:ec:fc:a9:0d:13:04:40:0c:9d:
6b:bf:8c:30:59:b6:b7:bd:c1:41:be:b4:2d:4e:87:77:d9:c1:
29:93:87:21:56:49:5b:29:e9:f7:85:ea:cb:00:42:3a:aa:2a:
8c:b9:5b:b3:cb:01:6a:80:d3:40:ce:54:74:d1:bb:40:ad:7b:
e2:62:29:f7:4f:19:f8:d5:31:85:d3:66:fc:9d:a5:36:d0:55:
e5:80:f2:4b:4f:17:1b:14:5a:0c:9f:2b:c1:d1:36:61:bf:71:
cb:0e:de:32:1f:a1:b8:51:2b:f2:98:b6:44:af:10:04:79:ba:
4a:0d:91:46:cf:ff:7a:52:aa:e1:5c:8b:05:e1:4f:39:d1:b3:
3d:ce:07:ff:d5:da:5b:3c:0d:4e:13:6c:f5:d5:e3:a3:f1:23:
84:1a:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:45 2026 by rpki-client