
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json)
Hash identifier: vOhDbq+k7V404ILj8uGqFH71xVZ5STnj63wFSSY3hdc=
Subject key identifier: 80:95:63:4F:22:99:B7:B0:60:87:E8:4D:19:0D:A5:FF:FC:91:3A:7D
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial: 0BC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
Manifest number: 0BB9
Signing time: Fri 12 Jun 2026 19:04:46 +0000
Manifest this update: Fri 12 Jun 2026 19:04:46 +0000
Manifest next update: Fri 19 Jun 2026 19:04:46 +0000
Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: Lx/mTN3RAonPdheUD6HcXDM/5bi+qP55EwWpOyFqUNc=)
2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3017 (0xbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Validity
Not Before: Jun 12 19:04:46 2026 GMT
Not After : Jun 19 19:04:46 2026 GMT
Subject: CN=6a2c584e-43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:3a:76:2b:d3:e8:d0:38:fe:2d:97:2a:34:
cb:0a:11:4a:06:35:4c:53:e3:86:1e:af:97:33:e3:
04:3c:1b:12:a8:d4:69:73:01:22:03:41:50:1a:69:
11:33:7b:d1:d7:99:23:e2:4e:d5:b5:4c:cc:66:44:
3f:c5:bd:ce:6a:c5:40:ff:02:9e:c7:bb:c9:10:99:
9c:30:19:7d:b9:20:8d:8b:55:13:c5:6d:c2:93:30:
1f:43:a9:01:cf:62:d8:30:3c:3b:bf:03:8d:8b:0e:
e9:17:35:96:49:bb:e6:00:58:03:10:23:39:4e:f4:
c4:65:b3:1a:90:31:19:f2:a5:ef:86:86:65:51:90:
f9:b3:d8:9b:21:00:39:75:3b:95:ba:ac:c7:44:a0:
ed:c4:b8:ee:b3:88:d8:8f:37:7a:29:c8:ec:7f:d9:
02:91:e7:29:66:11:01:68:a3:c3:2f:fe:60:5e:94:
8c:e5:d6:2a:ab:ff:a2:90:a1:5b:ea:ec:46:ea:2e:
e6:3a:e9:7a:75:2c:71:bf:c0:8d:c7:f4:55:f4:f5:
38:d8:00:9a:ae:5b:2d:4f:e8:ca:2d:ba:b0:9b:6c:
43:01:6c:42:26:99:39:4f:40:96:b9:80:54:57:aa:
8e:58:17:dd:1e:af:e7:8a:50:2f:ef:6d:94:a3:94:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:63:4F:22:99:B7:B0:60:87:E8:4D:19:0D:A5:FF:FC:91:3A:7D
X509v3 Authority Key Identifier:
keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:21:45:2c:c2:9f:b5:55:e1:e3:1a:c1:19:c6:ba:3e:d7:33:
00:58:b0:e8:51:ee:40:86:66:72:18:56:e1:14:40:eb:b0:b4:
f5:8d:37:60:a1:75:5b:c4:db:c8:ae:44:51:dc:41:3e:17:f8:
90:4f:41:94:3e:7f:db:a6:4e:12:b5:63:58:c9:0f:00:f9:b6:
21:8b:be:91:f5:67:32:30:ff:c4:37:85:f2:c5:2c:f0:3f:70:
25:f2:de:39:ed:d2:22:07:0c:87:62:a2:8e:b6:44:80:88:30:
04:65:a9:40:a2:ed:44:45:5b:4b:71:f7:70:b8:2a:a6:fe:ac:
f7:8a:9a:2e:c2:c6:b7:ad:04:24:3d:c2:3d:d2:9b:79:96:1b:
dc:63:50:cb:32:1b:78:9c:c6:27:c2:8f:cb:66:44:3a:4b:b5:
81:f7:b3:41:0f:23:bb:43:0f:3d:9b:55:99:48:bb:64:ff:65:
5f:b1:aa:ba:46:8f:ed:e0:e3:6e:d7:19:a8:5e:b1:08:9b:13:
3f:64:5e:a0:d2:ab:0b:5a:85:74:cb:a5:68:b9:a3:0d:62:08:
a3:27:0b:ff:da:cc:d2:3e:16:b6:8b:8c:b4:bf:ce:3a:bd:50:
17:18:ce:d4:6d:4f:8b:aa:87:8a:0a:19:c4:7c:75:c7:c9:7a:
df:61:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:35 2026 by rpki-client