
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json)
Hash identifier: 0BbBWa0cnEXDkAZyIHhNJzhmTaywLCY7ilB5lKENvMw=
Subject key identifier: C1:4F:DC:30:70:99:92:29:12:69:25:16:95:74:AF:50:4C:AB:FE:4C
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial: 08C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
Manifest number: 08A7
Signing time: Fri 12 Jun 2026 20:36:25 +0000
Manifest this update: Fri 12 Jun 2026 20:36:24 +0000
Manifest next update: Fri 19 Jun 2026 20:36:24 +0000
Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: Ky+jHqzIgwgEBrpc+UyrQY/5QkCMPdM7ivITPxZodv0=)
2: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=)
3: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Validity
Not Before: Jun 12 20:36:24 2026 GMT
Not After : Jun 19 20:36:24 2026 GMT
Subject: CN=6a2c6dc8-777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:1c:62:e8:48:2c:db:f7:d7:10:b3:cd:de:
54:6d:ac:2d:3c:81:1e:b7:7f:3f:3e:52:c3:a5:b0:
a6:27:35:5f:37:b5:8a:7c:a7:e4:5b:19:92:56:8c:
cb:fc:b3:ff:e8:a2:d5:89:19:3e:a4:0c:45:77:72:
4c:46:10:4d:a0:36:f8:55:c6:8d:7a:20:71:f6:b5:
5c:80:23:9a:4f:9c:5a:47:d1:45:b9:91:83:99:cc:
33:42:68:dc:53:17:b5:7b:dc:2d:06:be:51:80:e7:
6a:67:8b:bc:0e:c5:e0:e6:2f:ea:e0:57:03:e5:74:
77:a2:fc:b3:d3:5b:2b:86:59:ef:df:09:16:f9:ab:
f2:b4:46:9e:ed:8e:97:c0:3c:92:56:67:20:6c:9a:
c5:9f:52:9d:12:78:ea:24:33:8d:bb:93:b8:b5:0e:
21:4e:58:5a:17:00:e5:0f:60:f6:8f:b5:b5:e2:cd:
a3:37:bc:05:5c:7b:b5:c9:96:33:8a:ef:53:57:4c:
6e:bc:95:90:12:f7:06:9e:a8:61:a1:4d:cc:5a:b4:
8c:c2:19:da:19:3d:9b:06:89:eb:a5:47:b6:17:98:
18:d9:70:d9:de:c3:13:ad:a9:3d:cd:65:e9:6d:91:
73:79:fa:c1:63:3d:79:5a:b2:0c:ef:4a:07:3b:85:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:DC:30:70:99:92:29:12:69:25:16:95:74:AF:50:4C:AB:FE:4C
X509v3 Authority Key Identifier:
keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:27:95:66:4b:38:3f:48:d2:0e:70:28:c2:17:8d:9d:23:fd:
92:19:63:c1:c8:00:a8:48:5b:c1:8e:91:65:ce:35:8c:80:6f:
46:f7:68:a0:d2:62:c0:9a:17:68:38:87:29:34:a2:83:7b:0b:
e8:4e:9b:6f:8e:8d:d1:b3:91:1f:fb:3d:b2:a5:53:f2:9f:cd:
9b:e6:a6:00:bd:5d:6e:75:40:2d:c2:43:90:f4:d7:f7:19:b6:
41:01:64:e5:ad:ac:ad:fb:4d:6d:fb:fc:22:e7:9b:e6:67:74:
5b:89:f3:0e:a1:0a:8a:8f:56:65:d2:28:c0:60:e4:de:12:fc:
9d:9d:e0:01:9b:84:f0:4e:92:34:69:48:a0:2c:45:8a:7c:d8:
16:49:97:aa:ea:7e:a8:97:d9:3d:4e:21:66:ce:9a:69:9f:a9:
3c:7b:b3:0f:b4:13:c6:52:47:2e:df:8a:d8:bf:a9:a5:0d:c7:
83:74:e2:df:40:10:4f:ce:c3:95:42:31:e7:03:06:27:70:1f:
ea:c7:0c:79:57:22:93:7f:8f:db:60:00:86:e3:56:98:71:f6:
e7:ed:57:22:c0:df:ff:c6:39:0f:c9:a7:92:b8:1a:9b:a8:78:
c5:f5:2e:7f:91:94:01:5d:e1:e5:a9:9c:93:11:1f:7f:48:28:
a4:db:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:40 2026 by rpki-client