
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json)
Hash identifier: jmyOjxhfXCWbG+9MKBko41c25oxFbnxYfoA6AYMqedA=
Subject key identifier: 40:CE:F0:52:C2:E1:CC:98:E7:BF:AD:4F:1F:53:19:45:4C:FC:C6:9F
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial: 046E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
Manifest number: 0465
Signing time: Sat 13 Jun 2026 00:10:36 +0000
Manifest this update: Sat 13 Jun 2026 00:10:35 +0000
Manifest next update: Sat 20 Jun 2026 00:10:35 +0000
Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: W2KWsIqP8GDFYfjJYQGgh6XC9JNzsZ/v6l7/evyGK+w=)
2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Validity
Not Before: Jun 13 00:10:35 2026 GMT
Not After : Jun 20 00:10:35 2026 GMT
Subject: CN=6a2c9ffb-7999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:81:77:b6:17:26:90:b1:da:33:9e:e1:da:
ea:7d:d9:c3:58:93:d9:2b:e1:79:31:72:53:20:2d:
7e:6f:9e:6e:1c:31:91:31:e5:57:d0:59:85:66:b9:
cd:43:44:f7:c5:77:af:9b:ba:af:c9:25:52:22:57:
d2:97:38:bb:f7:ff:63:8d:4a:b1:96:81:8e:fd:e3:
8c:3c:80:a9:0b:14:94:43:ea:53:10:a9:6e:14:a9:
55:dc:0b:44:5b:44:17:98:76:94:8a:0c:5c:a4:2a:
49:a8:96:06:10:a4:c9:7d:22:f1:e5:af:52:e4:1f:
04:6b:23:11:83:8d:ab:f3:f1:92:31:bb:b2:ff:78:
6d:61:55:3f:1c:e6:3e:74:a3:22:19:25:15:a3:c6:
f3:e0:95:e9:7d:f5:22:a4:49:6d:6b:f4:cb:44:e9:
14:2b:a0:4e:50:97:93:e8:20:b2:73:4f:d6:64:51:
89:91:b9:80:ed:db:26:c1:fc:9b:ac:f3:29:0b:ce:
1b:ad:25:5c:e5:00:a4:32:03:bb:c7:fb:a3:61:47:
cd:ae:42:a6:e6:e0:45:dd:ba:60:0b:d8:c9:78:3f:
c1:2c:8d:95:55:11:f4:7c:10:c8:aa:51:81:bf:17:
75:0c:b2:d6:03:36:a0:bc:ff:4e:a8:d3:58:a2:00:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:F0:52:C2:E1:CC:98:E7:BF:AD:4F:1F:53:19:45:4C:FC:C6:9F
X509v3 Authority Key Identifier:
keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:11:c1:59:59:cd:90:ca:ac:51:d9:b3:56:85:8c:64:13:43:
5d:04:c2:3f:40:06:7d:95:fe:d0:d3:f5:c1:94:17:24:8d:43:
49:47:b9:b1:5f:64:76:4d:a3:2b:bb:f0:9c:84:32:c9:7c:bf:
fd:b0:50:39:a3:cb:be:b4:d4:76:83:3f:e3:4c:55:89:3f:8c:
d8:76:c7:80:85:ee:33:66:43:2d:be:22:e9:c7:1e:c4:77:e4:
17:d0:86:aa:3a:ab:ae:cb:b7:1b:e8:f5:2e:c5:fa:04:83:7b:
af:ec:55:18:9f:a6:4e:78:87:b4:78:be:90:b5:b4:02:32:e6:
6c:27:f8:92:8b:51:07:a3:73:17:23:1e:27:f4:1d:e7:ef:e3:
2f:01:69:fd:93:01:9f:3b:bc:95:a1:60:4e:51:af:ba:69:f5:
f8:24:c4:ae:76:db:3d:09:6a:8c:6f:50:92:fa:9e:b7:a1:03:
f4:d1:e5:f9:8b:75:b9:ce:bf:5a:62:06:a1:95:d2:6e:30:92:
95:72:0e:61:c8:a2:8a:c1:d4:4b:83:cf:19:c2:27:2a:b4:ca:
34:31:35:fb:fe:8f:ab:3b:a4:10:2f:3d:17:0f:bb:93:7c:e4:
94:62:9a:40:51:ed:7a:a5:d8:98:72:39:66:0b:38:88:77:69:
9f:2d:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:49 2026 by rpki-client