
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json)
Hash identifier: IXQaan11yBcX7xe+LWCFuQ4+j7l7POnLdp8EGJOnzIw=
Subject key identifier: 7E:4A:37:61:52:67:62:68:18:94:A9:39:7D:D0:2D:C4:AE:FF:8D:F6
Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
Manifest number: 0213
Signing time: Sat 13 Jun 2026 03:00:47 +0000
Manifest this update: Sat 13 Jun 2026 03:00:46 +0000
Manifest next update: Sat 20 Jun 2026 03:00:46 +0000
Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: H7fGX5eJ7uU+vKdwDONDpwxyZ6ukoKUYduu9hA14vbk=)
2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=)
3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=)
4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Validity
Not Before: Jun 13 03:00:46 2026 GMT
Not After : Jun 20 03:00:46 2026 GMT
Subject: CN=6a2cc7df-145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:0e:d7:56:03:54:ae:2e:2e:93:16:7b:7b:
1d:b1:ab:7e:7f:f3:6b:a5:49:56:4d:c7:e7:c4:9b:
d6:ff:be:44:c4:36:54:fe:43:33:27:e2:2a:3d:b2:
78:3a:b3:6b:16:4f:f6:90:c1:81:8a:fd:53:8c:3c:
b2:10:4b:37:c2:10:34:8f:24:3a:6e:ea:7f:15:73:
d4:54:07:cc:45:65:02:c2:09:36:c1:00:7d:c1:ad:
0d:1b:58:d6:b0:86:7f:c5:59:e1:e9:2d:60:6a:fd:
cb:ab:a6:14:01:9e:5c:45:af:4d:75:34:46:98:84:
12:73:aa:5f:90:6b:4d:77:0c:15:f1:7b:fa:c6:b5:
60:fb:34:f8:99:4f:a9:d3:b4:58:72:92:ff:e4:74:
0e:42:c5:0d:55:48:89:41:6b:3c:66:9c:50:3d:c8:
36:b6:80:74:2a:af:7f:81:ce:fe:83:f4:71:e7:06:
86:fa:46:89:9c:ad:ee:9f:ff:ba:a4:85:57:38:30:
bd:07:19:85:ba:aa:ed:e7:64:88:dc:62:e2:f8:cf:
05:92:c6:23:b3:78:13:f2:8c:0d:77:29:b5:36:25:
b0:25:d7:25:4c:99:e6:e5:c1:11:1b:ef:36:c8:5f:
e8:55:fe:44:2b:20:2a:f8:0f:00:e5:fe:83:20:54:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:37:61:52:67:62:68:18:94:A9:39:7D:D0:2D:C4:AE:FF:8D:F6
X509v3 Authority Key Identifier:
keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:e1:5f:16:65:71:60:d0:cb:28:51:80:20:4c:82:94:59:79:
27:44:dc:f0:8a:1e:2b:4f:05:0e:ad:e4:20:f9:76:9c:85:95:
ef:58:bc:09:98:6d:e0:87:a9:0f:00:39:a7:b3:d1:37:44:d8:
f9:3c:08:be:9d:de:46:48:85:ac:0c:04:4f:9c:15:7d:bf:48:
66:d6:fe:2a:f6:27:b4:dc:94:f9:9a:33:d9:6c:fc:43:41:1a:
62:6c:4d:82:c4:28:66:c6:a4:0c:b7:ba:46:0d:e3:a4:55:4f:
97:dd:a5:b1:f2:bd:7d:9e:1a:1f:97:91:50:24:8a:91:d6:ba:
5e:bb:6b:5b:b8:e6:35:49:aa:0c:c5:ed:3f:15:37:a9:8d:d3:
c5:ce:6f:df:0b:a3:72:5d:62:68:b9:16:99:98:c9:dd:4d:94:
eb:53:da:75:d7:e8:d3:82:70:e1:63:05:69:ec:5a:4b:15:d2:
b7:f2:bb:02:bc:40:f7:49:68:0b:b6:32:f9:4b:80:b6:3b:8e:
04:02:06:b1:fa:f2:6b:ba:d9:64:f0:37:51:75:dc:bb:73:d5:
e0:44:c3:c9:9b:91:2b:74:06:69:f1:7a:98:dd:f7:02:f6:02:
5e:0a:1b:f8:68:f5:9f:33:d8:2e:70:8b:a3:af:41:94:da:03:
44:e2:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:17 2026 by rpki-client