
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier: CKk8Th2+ZGxHTuqy1n5ciiiA3RKlUulmX73LT/pSYf8=
Subject key identifier: 8B:FB:A3:BF:3E:2D:FF:15:88:D0:1D:75:E9:DA:31:2C:23:05:2A:40
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number: 0828
Signing time: Fri 12 Jun 2026 21:06:54 +0000
Manifest this update: Fri 12 Jun 2026 21:06:54 +0000
Manifest next update: Fri 19 Jun 2026 21:06:54 +0000
Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: Jadoc42bhwAvznIyZ9oUQS9sopo4njzpbHsN7KofL+U=)
2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: C86QSzMPJfidhhZAtCALwlPi6LGTUSBetHOGRrIMSeU=)
3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: Gqr5gUPYx0CJyOxSeCXlqpQBiTSLSQ6IJMBMylryXzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Validity
Not Before: Jun 12 21:06:54 2026 GMT
Not After : Jun 19 21:06:54 2026 GMT
Subject: CN=6a2c74ee-385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:28:8a:ca:87:9e:43:3b:a6:92:d1:32:06:
44:b8:9d:8e:76:67:27:a6:a1:b7:3c:c5:5d:1d:a2:
3c:d0:c6:13:01:c1:4c:96:d5:63:db:34:25:38:50:
2e:4d:8a:cf:d6:63:36:ee:6d:70:4e:e8:05:df:30:
5d:d4:c4:89:82:a9:97:63:bc:73:9f:4c:ee:9c:2b:
c7:1e:06:6f:bd:b9:4e:0a:53:9a:13:b7:7d:ef:ac:
0b:b5:30:6b:0b:6c:ad:45:26:80:37:df:3c:9d:9b:
60:f3:d4:7a:be:4c:2d:87:62:a0:9f:5d:1f:d6:8f:
ff:e9:71:d2:d7:02:8a:78:dd:5e:c1:69:34:09:4c:
9e:1d:4f:97:05:e7:28:c4:0e:ac:f6:eb:e1:c3:ef:
51:d9:b3:0b:90:4d:de:86:e7:ba:6a:09:df:d7:67:
cd:9f:bc:18:5a:bd:cd:d9:6d:b3:12:95:f7:45:66:
b6:bb:66:72:f2:70:0b:f8:75:45:e9:8c:23:6b:1f:
70:40:3e:03:c9:65:11:8d:98:5f:34:65:62:d6:8d:
12:fc:5c:18:b3:84:b5:d8:82:4e:26:06:ba:2d:52:
5d:7b:4b:30:09:bc:64:e7:80:59:a4:7c:fe:06:2b:
2b:56:76:9f:b9:c2:78:cb:b9:0f:b5:a0:99:9a:f7:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FB:A3:BF:3E:2D:FF:15:88:D0:1D:75:E9:DA:31:2C:23:05:2A:40
X509v3 Authority Key Identifier:
keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:7d:93:45:56:89:01:02:e5:50:7c:49:9e:fa:e9:ea:fd:
5d:e8:ca:b9:e6:4f:ce:e4:55:d5:ce:39:4b:af:d3:56:f2:72:
7f:a0:b9:f4:b6:a6:bc:08:24:03:75:76:c5:74:fa:32:f2:f4:
5f:d7:39:97:f0:2d:bf:73:53:cb:68:09:24:ec:22:5a:65:f9:
74:8b:4f:4a:e3:55:ff:b7:b4:c0:c0:d8:50:41:5f:8f:a2:1a:
85:49:2a:35:16:bf:ed:d1:0c:34:79:b0:a2:b4:9a:1b:64:0a:
ec:4f:74:78:af:70:52:6b:69:ba:24:18:61:7f:ec:38:1a:0a:
8a:40:f5:ad:2a:e9:af:d8:ff:59:a1:d9:5c:d3:33:43:a8:89:
a2:2d:38:4b:85:64:d4:94:2a:1f:dd:b4:7d:0c:04:f0:67:73:
a5:bc:76:91:27:d5:a2:83:bc:c1:e0:17:e4:f7:c2:15:ef:6d:
ff:d9:77:87:f4:4d:ed:eb:e7:9c:ea:4d:bb:df:84:e1:b1:c0:
75:fb:92:b4:43:aa:3a:20:81:5f:4b:45:81:73:da:ba:b1:bb:
8f:f8:13:89:e5:01:c7:1b:fe:f1:d0:09:d1:b4:b0:3e:c0:16:
8e:4e:ed:11:a8:9c:7b:46:2b:f5:d6:fe:e2:c9:d6:95:b5:42:
89:71:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:08:32 2026 by rpki-client