
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier: rblDMJnM21RflvpqYQbE/bkBkny41ZrlYzBxJ7jQyrQ=
Subject key identifier: E3:26:E8:46:55:B4:25:33:07:A3:4C:43:E0:74:5B:37:EC:04:A4:8D
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1F0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number: 1EE2
Signing time: Tue 16 Jun 2026 16:02:51 +0000
Manifest this update: Tue 16 Jun 2026 16:02:51 +0000
Manifest next update: Tue 23 Jun 2026 16:02:51 +0000
Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: HminScNEIdIfT1GN2zvUbTV0ozMMfCGk2l5dUU1CvNY=)
2: BD314CEA619711EE81211277C4F9AE02.roa (hash: 5im2El+XqMtWQp5XtOEvy4f/d1/1FRGNJyssOKlFrL0=)
3: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: n9OEIi5D0MMrsYRQLCAAp//0ZBA0omE88k2orZdv2K4=)
4: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: VMJkk/VVPV9Iy+puWdZ7776oUW7EEdM96gkspmEQArY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7946 (0x1f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Jun 16 16:02:51 2026 GMT
Not After : Jun 23 16:02:51 2026 GMT
Subject: CN=6a3173ab-1b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:e7:8b:46:e5:b2:c5:81:ec:a9:79:98:bd:
10:ee:84:62:39:6d:eb:99:e1:2d:03:58:b3:ba:33:
75:5d:35:a4:6f:e7:60:12:2c:df:ad:2a:44:fe:58:
54:f8:86:fb:2d:8f:1f:54:77:08:74:75:95:7b:7d:
58:6b:04:f0:c5:27:d2:10:bd:ab:3b:db:68:3d:6f:
48:c4:ea:59:1b:8a:bf:92:f5:e7:e1:30:2e:a2:55:
4f:fa:40:c5:53:af:86:0f:90:d4:0d:ba:04:1e:b4:
fd:a0:1f:1c:27:be:0c:6e:af:4c:20:71:4a:de:fb:
9f:d3:86:e1:f3:62:9a:19:fa:68:6b:01:fa:42:4d:
d5:86:55:fe:d7:a6:98:a5:15:68:97:a8:09:0a:72:
7b:d9:09:83:62:f4:8f:98:8e:f3:c6:42:7b:68:f6:
92:39:ed:2d:0c:0e:d7:b0:0d:53:84:ef:59:19:12:
a7:38:40:99:84:90:0d:17:8d:43:4c:ad:75:81:cd:
5d:6d:9c:9a:ba:22:6a:0a:86:98:90:59:d5:56:b4:
d6:7f:69:48:42:93:7f:54:f8:0b:3e:38:e0:43:7c:
f3:fc:db:ac:80:20:f1:6a:b2:3a:e8:97:92:25:d4:
ed:bf:cd:f8:3e:17:89:d4:99:ad:00:fc:06:ca:0e:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:E8:46:55:B4:25:33:07:A3:4C:43:E0:74:5B:37:EC:04:A4:8D
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:fa:38:81:df:7a:5e:33:11:63:15:82:3e:37:9f:23:84:c5:
09:98:b9:52:0c:42:e2:ff:0e:72:b3:8e:50:ee:69:37:f3:fa:
ba:4d:fa:37:f1:35:9e:47:7c:6e:c3:05:e9:d3:87:ee:3d:5f:
01:51:7b:41:23:71:8d:59:dc:1c:e5:b7:d2:0a:f3:fc:33:29:
21:da:5e:e7:05:b0:ac:73:87:51:1b:22:f7:21:c7:99:71:38:
83:d4:24:4a:0c:bc:34:d6:2d:9b:0c:6d:22:5e:92:33:b3:0c:
0a:9d:a9:28:81:9b:aa:bd:16:54:c1:12:7e:04:2d:20:0a:b0:
00:4b:59:aa:83:bc:cd:3f:a3:09:5f:49:1b:55:65:26:7d:35:
de:4f:6f:bd:3e:5c:ad:8b:bc:07:81:84:6d:7d:b6:7d:50:69:
1a:ad:0b:58:a7:22:f0:b0:e2:b4:5c:93:51:5d:89:82:49:8a:
83:45:26:3d:d0:03:89:a6:1f:a5:11:30:bd:3f:9e:93:be:97:
67:3c:6f:f0:11:82:08:f8:68:a2:d5:a3:a0:45:c8:14:89:02:
1a:2a:65:25:b0:fb:cb:d5:4f:08:0a:a6:76:99:99:3c:47:9f:
e1:5f:68:86:e0:05:9e:f7:de:3f:8f:25:9f:f3:75:13:ef:11:
ea:99:40:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:25:45 2026 by rpki-client