
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json)
Hash identifier: 3sTOyFZsgA4Qy881FHKGJbKJHiyDPBkaYdZp/FuPbWE=
Subject key identifier: EE:90:C7:E8:9F:C3:A8:23:BB:0C:47:EF:84:7F:39:A4:F6:B0:A7:09
Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Certificate serial: 093D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
Manifest number: 0AED
Signing time: Fri 12 Jun 2026 20:14:40 +0000
Manifest this update: Fri 12 Jun 2026 20:14:39 +0000
Manifest next update: Fri 19 Jun 2026 20:14:39 +0000
Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: ovNsTt2OUw2iWuPT0gywCDmHJiB+FF+m9biiEOyfHLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365 (0x93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Validity
Not Before: Jun 12 20:14:39 2026 GMT
Not After : Jun 19 20:14:39 2026 GMT
Subject: CN=6a2c68b0-8cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:07:61:05:d4:96:a5:0b:8c:66:b0:a3:72:
f3:8b:07:bb:06:ed:d8:16:f7:bd:46:a0:43:ad:55:
b1:0e:42:29:46:9a:f1:4b:b0:24:89:3b:23:d0:87:
ae:cf:92:e3:3e:43:e2:07:ec:73:fd:dc:fe:f5:1a:
5b:b7:3d:26:93:be:bd:3a:c4:cc:c3:7e:7a:f7:72:
c5:11:fa:21:20:31:1c:66:90:c0:11:14:72:71:db:
06:be:8b:9f:52:fb:18:03:58:99:94:9b:ae:c4:6a:
cd:db:1e:6f:bc:a3:30:5f:f2:97:b6:e1:02:68:bc:
dd:cb:6b:86:9c:54:d0:10:bb:08:02:bd:88:27:b3:
93:b1:0a:c9:b4:90:78:14:56:80:1b:49:33:c6:ab:
9d:96:60:44:82:bd:a0:79:3b:98:4d:3f:ee:41:f6:
c8:58:be:13:bf:c4:06:20:cc:7f:6b:44:a7:f8:b7:
58:22:98:df:fd:d7:dd:41:d5:a9:47:53:f5:f1:4d:
3f:b4:11:89:3b:a6:f5:fb:03:25:a1:34:d2:cd:32:
58:87:e0:8a:67:01:1a:78:e7:32:1f:a4:ee:81:ba:
be:6d:7b:b5:a6:28:f8:07:f4:e9:f8:4f:51:67:1d:
cc:70:b2:e0:b8:e7:a4:7a:df:1e:52:fb:1a:4e:84:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:C7:E8:9F:C3:A8:23:BB:0C:47:EF:84:7F:39:A4:F6:B0:A7:09
X509v3 Authority Key Identifier:
keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:0f:32:39:01:39:91:10:6e:d4:c2:90:e5:47:d2:c5:c2:
95:ca:0c:81:c6:42:98:65:14:fb:6f:46:bb:ef:ab:99:e1:a6:
11:53:2d:60:19:cf:f2:ff:23:c9:f6:3a:3b:16:50:89:a6:a3:
01:d2:85:71:db:c5:ed:3c:e6:33:87:60:0d:36:89:80:11:c4:
75:c9:64:8a:77:66:d6:02:54:82:26:f8:34:1d:33:47:d9:27:
46:6c:90:74:ed:5e:de:7d:8b:e2:40:83:44:86:e6:1e:71:8a:
99:b2:9e:bc:4c:ac:12:27:b1:54:c7:12:8d:43:26:5a:db:2c:
ff:f7:4c:19:ac:3a:e5:47:c4:f8:62:79:c1:54:9d:2b:78:0f:
d2:61:70:f4:c1:83:ab:64:9a:02:db:39:a4:59:1b:1e:9c:87:
8e:eb:d2:96:bc:e2:b7:e8:ba:10:b6:84:a9:92:71:73:51:9c:
e0:e8:7f:a2:33:ec:d4:2b:fc:26:73:c5:07:a6:49:84:96:fa:
ec:ae:f3:01:35:21:86:56:54:da:48:eb:93:9e:fc:22:b9:c0:
ac:db:08:28:65:78:43:0f:86:6d:d7:db:72:d5:00:f0:8c:4f:
dc:53:19:aa:15:c3:4a:5b:00:41:2e:56:63:66:40:9f:68:4b:
80:a4:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:27 2026 by rpki-client