
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier: pSI+CVWHzYOkzOR/Ik7EGF+ewwAFOhu6I3RJsKvMOH8=
Subject key identifier: CA:E8:D9:E7:7D:13:18:0E:4B:FB:FD:46:9F:9A:24:C9:B4:6F:1E:56
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number: 08F0
Signing time: Fri 12 Jun 2026 20:22:25 +0000
Manifest this update: Fri 12 Jun 2026 20:22:24 +0000
Manifest next update: Fri 19 Jun 2026 20:22:24 +0000
Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: B3S2G4YNTsWZz/fbUTQYUVaAwTRLdlitTRhWimw792I=)
2: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: cE48WGS9kboOii2J8VTr2sUZ9DzkZ2EoWEhl3gouzMU=)
3: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: y0ZDNF6cJnenBSxzNT9Zg+guSF3PdEPjBHywfaHzzjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Validity
Not Before: Jun 12 20:22:24 2026 GMT
Not After : Jun 19 20:22:24 2026 GMT
Subject: CN=6a2c6a81-6f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:eb:31:6f:6f:12:24:28:d7:bc:de:09:b1:
f5:24:7c:ff:f4:30:6c:09:0b:3c:a6:25:fd:09:e5:
38:cc:b6:43:9a:8f:04:30:7a:e4:cc:b6:47:2b:48:
11:3c:6a:e1:23:37:43:6b:46:0b:18:db:1b:4d:24:
db:80:c2:28:db:7f:cc:3d:1e:0a:83:30:16:1e:8a:
cd:52:11:12:cb:62:c3:5d:a7:07:4d:38:05:b8:25:
49:1d:23:c2:43:aa:b5:3f:4b:fd:b8:b1:52:6f:01:
bc:d4:14:17:83:ad:02:3a:21:8f:48:a7:3f:ac:24:
61:70:49:20:ad:a5:75:c8:2e:9c:3c:6e:2a:0e:e7:
fc:67:88:b9:9b:7e:e9:3d:78:d5:20:1f:a2:de:d6:
20:99:66:fc:f0:ce:94:02:32:ef:62:ab:6b:6c:e9:
e2:93:c8:c7:cd:15:0e:9f:76:b1:d3:a7:f6:93:e6:
0d:aa:50:c4:58:f6:14:94:d2:ef:79:a9:17:04:9f:
12:f0:b6:8f:2d:73:2e:a3:97:cf:0f:cc:c5:7e:aa:
37:f3:34:06:f8:5a:d5:b0:ba:85:d1:3b:a3:dc:e4:
4e:44:e3:35:2c:c8:f4:1f:43:08:11:be:e6:32:b6:
70:50:c4:29:31:17:b1:d6:65:ce:87:9f:fc:bc:d0:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:D9:E7:7D:13:18:0E:4B:FB:FD:46:9F:9A:24:C9:B4:6F:1E:56
X509v3 Authority Key Identifier:
keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d1:69:e8:e9:d8:4d:33:73:e6:46:c4:32:7e:c5:cf:7b:1e:
56:01:6f:06:1f:8b:7a:b4:a7:89:b0:3d:27:51:72:95:69:2a:
d2:88:54:51:bc:4b:b3:6b:a1:20:02:df:6d:f4:10:9c:ed:c4:
0b:b8:15:a7:50:56:18:0e:7a:3a:0f:c7:83:1b:28:0d:57:ea:
63:ac:c2:e6:fc:50:45:53:f9:f4:11:9b:fa:b6:b9:fb:47:80:
9c:eb:13:89:8c:c1:ab:bb:a8:95:9d:8a:1e:01:07:12:dc:f9:
d4:42:7e:24:6a:21:86:f6:51:7b:f1:4f:86:85:3e:f9:71:5c:
72:0c:d1:9f:23:27:19:dd:cf:82:71:f3:15:c3:f1:a4:a8:04:
bd:30:f3:be:74:66:6f:c5:6c:37:b0:84:ee:d6:3f:16:61:2a:
05:c1:5d:2c:72:0e:09:61:2a:4c:5b:32:ac:09:80:65:b2:39:
c1:a9:30:39:b0:4f:6c:1a:68:b9:cc:73:29:7d:bc:d7:f0:5f:
2d:80:93:eb:76:13:ed:08:27:8e:9c:43:47:56:59:f9:e6:4c:
49:32:a9:e5:98:1f:85:d5:fc:de:62:72:07:32:98:bc:5c:33:
66:44:5c:90:dd:aa:bb:72:11:14:33:3f:13:24:9d:c6:fc:f4:
ef:4c:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:44 2026 by rpki-client