
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier: oUn8GwHpGFfw30C+OOUI9zx4XGZ9nsRP8WOo3WgcZ+M=
Subject key identifier: 91:6D:B9:2A:76:35:2F:7B:CA:66:45:EA:D5:9B:BD:2E:EB:38:9A:42
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial: 0AD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number: 0AB7
Signing time: Fri 12 Jun 2026 19:30:58 +0000
Manifest this update: Fri 12 Jun 2026 19:30:58 +0000
Manifest next update: Fri 19 Jun 2026 19:30:58 +0000
Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: xMwN3McfG5YNYTzIpDeHW3fpJ/y/nXeHGnk/+9yPKgw=)
2: 02BA60CCDADF11F08398647877D3641D.roa (hash: 1tpNHg5V2m7AJT6KzHxfBy6gB5PqDPo6eAkyeJw5XNY=)
3: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: 4cAcI5ocqsy1hZe8HsYZTbIwmQxRPKHWv8/zl5w8ZJQ=)
4: 0166B48CDADF11F08398647877D3641D.roa (hash: ZJV2dmhu0JE10nRhjUYBdcTdypFTIKq4KfcDe8/doJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Validity
Not Before: Jun 12 19:30:58 2026 GMT
Not After : Jun 19 19:30:58 2026 GMT
Subject: CN=6a2c5e72-8ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:41:c6:e1:87:61:f3:10:21:a8:38:6b:8a:
44:89:de:34:b4:70:41:c5:7e:d4:bd:f7:3a:9a:8c:
3e:0d:a0:c9:b9:6c:71:f7:0e:1b:04:3c:d3:f1:41:
21:7a:91:93:3b:38:20:dc:ed:a7:bd:9a:af:a4:c6:
2d:5e:1f:9b:75:20:73:8e:f3:d0:20:e7:89:fa:04:
83:88:58:a4:c0:6c:78:7e:78:b7:cf:dc:72:47:34:
17:1c:e8:1f:19:62:fd:da:ac:2f:22:f5:7c:db:2f:
7d:b7:ef:62:a9:19:6a:6e:e7:8a:86:a4:bf:05:54:
2c:7e:57:63:9e:1f:78:c5:2a:36:49:6a:af:ad:e2:
fd:37:8a:6c:1d:3d:03:99:3a:e5:ec:bb:d5:87:df:
86:0e:f4:3f:33:43:eb:a6:c2:93:ed:f9:2a:55:a4:
06:42:6f:f9:fd:b5:4f:ff:7f:87:f7:5b:45:72:ba:
96:2b:97:7a:c5:ce:20:db:7a:24:76:94:ba:47:d0:
1c:ff:c1:d5:b5:65:04:49:0d:0e:02:ee:8e:e7:31:
4e:70:d6:62:4c:30:75:a6:80:ef:e5:0b:8a:b2:24:
00:83:6c:47:dd:da:7c:41:5c:38:6c:a0:c0:e1:b7:
a1:80:8a:d9:c8:a3:3e:82:e2:02:b5:1d:6b:c0:32:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:B9:2A:76:35:2F:7B:CA:66:45:EA:D5:9B:BD:2E:EB:38:9A:42
X509v3 Authority Key Identifier:
keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:cd:18:85:4b:e0:56:5c:11:43:37:b5:31:17:99:c8:66:ed:
0b:95:2d:44:f1:00:e0:b2:06:11:2e:52:f9:67:ad:67:b5:08:
58:7f:1e:26:17:a3:56:ee:02:ce:a6:0f:be:43:4a:60:3e:b3:
8d:3a:e2:e1:5a:f5:80:c8:42:80:23:27:95:7d:41:7d:c6:54:
1d:80:57:71:cf:9e:31:5a:6e:09:38:d7:da:a3:15:83:9b:8c:
e0:24:70:6c:2e:1e:da:81:10:41:52:0d:23:19:ef:d1:59:6e:
44:a3:54:55:06:6f:63:46:f1:b6:40:e4:b7:ba:b4:f0:92:22:
4a:3b:d9:6a:fd:47:58:7d:bf:b2:76:f3:3e:d0:7f:ac:53:ea:
bc:5f:77:92:76:cc:35:91:22:f1:91:de:6f:cd:7b:1e:71:1a:
46:b3:c5:da:63:b2:ee:75:b7:6d:7c:86:c0:6d:33:37:0a:8b:
2a:5e:9d:68:8f:84:db:7b:44:42:88:68:66:a7:3d:23:d7:35:
9e:f2:81:16:89:2b:11:47:b8:4c:7c:62:f0:3f:fa:4b:b3:11:
a4:72:46:8f:ac:92:98:d4:a8:d1:48:65:60:7e:91:ef:b9:e6:
1c:b2:14:10:4e:d0:a0:8c:3e:d5:c3:57:55:a7:9e:32:ba:68:
52:19:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:32 2026 by rpki-client