
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json)
Hash identifier: NL7IrnQ4MGchAHCfubgQJxBNLuUQ3FwLHqrzZ/70pAU=
Subject key identifier: 9F:92:30:C3:18:DA:6D:03:E4:89:D8:BF:33:48:74:5A:34:D1:B1:6F
Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42
Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942
Certificate serial: 0CE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
Manifest number: 0CD4
Signing time: Fri 12 Jun 2026 18:26:03 +0000
Manifest this update: Fri 12 Jun 2026 18:26:03 +0000
Manifest next update: Fri 19 Jun 2026 18:26:03 +0000
Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: a4Fi3dfzqUeFJoZAdDN4pf2krFJ7UuKVyoXfKasgaYQ=)
2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl
rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3296 (0xce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942
Validity
Not Before: Jun 12 18:26:03 2026 GMT
Not After : Jun 19 18:26:03 2026 GMT
Subject: CN=6a2c4f3b-6e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:21:ef:6c:aa:f1:7e:e2:c5:7a:51:55:69:
2f:20:c8:58:0d:ea:58:83:c3:f8:b5:46:11:ec:61:
df:e0:de:cc:5b:da:ac:cf:47:62:b1:6d:c4:78:26:
3d:bf:b0:2d:28:31:ca:db:f5:df:20:bc:c3:50:dc:
34:87:5c:0b:4d:ea:ff:d7:05:c4:63:a4:5d:89:41:
5b:53:9e:fb:fd:c8:b2:91:87:b0:b9:9f:8f:e3:32:
ae:40:f8:0f:1e:78:1f:f0:50:bc:47:6c:42:73:e1:
95:39:cb:2b:b2:93:68:81:2b:4a:0e:54:a3:ec:63:
88:49:67:e0:1f:1f:b6:2d:60:99:ff:83:8f:22:d8:
04:f8:53:47:bb:5d:ad:bd:56:89:74:5a:cc:c1:84:
40:82:e5:b7:1b:8d:7b:1b:63:31:74:09:77:60:33:
d4:2b:2e:0e:eb:2b:dc:5f:af:c0:ba:c7:38:d6:99:
f2:42:6d:d9:4d:4e:64:16:f7:18:fb:1d:9a:3e:4a:
20:7b:af:09:44:0c:e9:2a:e1:bf:04:f5:a1:db:fe:
11:cf:3d:06:e9:8e:e8:a2:b0:83:05:73:4f:bc:a0:
f4:93:b1:42:62:27:8c:a1:2d:49:2a:9f:f5:80:79:
8a:7c:39:9f:c5:e2:6c:8c:c5:f4:7b:1a:62:98:0e:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:30:C3:18:DA:6D:03:E4:89:D8:BF:33:48:74:5A:34:D1:B1:6F
X509v3 Authority Key Identifier:
keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:5a:1d:b8:3e:b6:11:9c:1c:9a:08:7a:73:33:96:22:94:c0:
9c:5e:ae:f1:30:be:11:7d:48:66:8f:c8:d8:ed:18:70:16:56:
0d:7b:09:4c:74:89:c4:df:7b:95:9d:6b:c0:7e:12:d3:24:67:
ce:2b:16:08:b0:ea:82:8b:45:9d:92:87:03:1c:77:12:e1:1d:
a8:00:51:27:b2:62:b0:62:33:67:19:82:8b:ef:1b:f5:25:75:
cb:34:5d:8f:90:eb:69:06:3c:09:36:73:62:fb:1a:f4:16:fe:
73:7c:76:c3:7d:a1:88:76:76:39:66:68:68:b4:96:ff:3e:3f:
60:a4:7c:e6:a0:43:bb:7e:cf:cb:ac:cf:72:67:e5:49:7a:59:
e4:ed:c2:51:20:bf:93:48:31:a7:db:ae:f0:4c:33:e1:ed:82:
f1:ae:75:77:df:0f:62:2c:d9:4f:1b:7f:82:5e:fd:f0:41:38:
f4:10:32:33:b3:52:00:f6:68:3a:2d:f7:7b:a9:e6:49:2c:96:
f2:22:5a:8e:74:41:19:09:42:30:57:03:0b:eb:ce:c6:4b:3d:
e9:71:e1:0e:d5:53:e3:18:e0:58:d5:9a:87:c4:d7:fc:8e:24:
f7:c1:20:0a:7c:bd:9f:1f:7a:7e:99:8a:d3:5c:06:a8:d2:e2:
da:16:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:27:47 2026 by rpki-client