
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier: MHaZhURO0IJRn1DUZy8rERmNLbIDNQhCt22LUmGn6wE=
Subject key identifier: 6D:D2:77:35:5D:A8:9E:A2:17:62:87:09:A5:86:0E:62:CA:CC:B5:D4
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number: 0255
Signing time: Sat 13 Jun 2026 02:26:45 +0000
Manifest this update: Sat 13 Jun 2026 02:26:44 +0000
Manifest next update: Sat 20 Jun 2026 02:26:44 +0000
Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: dCfp7Ws39d5LEiBPA8J+TKG7CObKP/2WGTYCxrHaw+8=)
2: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: 4mVa0DqBaCflYNU9bhCT5eYUo2wiGhZvFPJW9PpsrbY=)
3: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: vqGdVaaDYf6gNLNH5VIBJ2NRjMzmVVMM9ASsA3cNz2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Validity
Not Before: Jun 13 02:26:44 2026 GMT
Not After : Jun 20 02:26:44 2026 GMT
Subject: CN=6a2cbfe5-a0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:9d:b8:d2:29:12:2f:5a:4f:38:27:b4:d0:
17:98:a1:88:31:ca:f2:62:16:52:38:80:7a:ae:a9:
97:05:4c:99:a9:27:5c:0c:26:10:60:27:eb:79:08:
fb:13:4d:20:48:df:96:e3:d5:ee:9d:95:81:88:6c:
0a:51:c2:98:ec:4e:fb:93:2f:5a:89:bb:02:71:76:
ba:35:91:09:a3:6a:f1:d8:6c:56:c1:04:e5:b3:ec:
83:af:eb:ce:98:e7:1d:c0:2a:a0:1f:28:eb:c0:dd:
02:c0:12:35:f8:49:c6:2c:f6:9d:8c:c4:b6:ae:fe:
ab:b8:6a:47:80:20:0a:72:8c:60:2a:23:b6:48:2e:
ed:9f:86:05:40:29:5f:31:35:7a:96:b8:e2:d1:ae:
4e:76:2e:05:98:09:fa:33:0d:a8:1c:78:1c:14:9e:
20:28:cd:5f:9b:d4:01:65:b9:5d:14:df:d1:18:9a:
a6:6f:3f:d4:01:92:3b:17:38:3c:28:ad:3f:21:4e:
a4:f0:f0:8e:15:7a:09:75:85:c6:e2:bf:e9:9d:11:
89:bf:13:ee:3e:0f:c8:51:f2:fc:c9:25:3a:3d:f7:
ba:19:f3:99:53:47:ca:01:f5:f2:42:01:38:62:00:
ce:ea:76:2f:52:be:d0:4e:5c:04:6e:ab:43:d6:8e:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:77:35:5D:A8:9E:A2:17:62:87:09:A5:86:0E:62:CA:CC:B5:D4
X509v3 Authority Key Identifier:
keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:35:2d:e8:27:98:b4:70:3b:db:07:ea:cd:cf:53:9a:65:ec:
61:99:f7:28:70:6f:18:66:82:fd:c9:37:5d:d0:e3:99:dc:aa:
ff:4c:65:a2:dc:98:46:01:48:f8:66:ee:d3:a2:47:f2:ef:c2:
9e:0a:23:61:92:9c:94:c6:99:a7:d2:ae:14:95:a1:53:69:f0:
19:1c:7a:71:22:76:61:1b:72:00:39:6c:79:08:8b:54:48:18:
cc:b0:f4:bd:ef:fa:f7:ec:88:0d:b8:cb:de:c5:16:74:06:5f:
47:13:48:41:a6:f8:07:26:62:65:c4:be:87:65:03:80:e2:eb:
ad:eb:69:14:d1:9d:5d:c9:ef:76:eb:6b:c3:e3:33:0a:c7:bd:
d2:1a:4e:a6:cc:51:d1:1b:88:e2:79:1f:a7:32:24:d1:72:02:
92:6e:2e:23:d0:ba:c7:25:ec:aa:96:c1:95:ef:7f:25:f6:72:
84:42:e8:e3:8b:21:76:3b:10:75:ec:37:75:5b:b4:48:3b:24:
bf:45:09:d7:ae:1c:87:6c:ed:5a:e1:eb:a7:78:14:9f:d3:c3:
68:2d:6f:90:e9:9b:b3:15:af:b0:3a:f5:ee:bd:0e:b0:79:39:
76:ae:aa:d8:47:a1:4f:11:ca:f1:9a:ba:17:e2:6e:d6:2e:07:
20:99:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:02 2026 by rpki-client