
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: smVjxR4yRT7nNGzLltj40FAWjclyBW6aWzUtEyaEKG4=
Subject key identifier: 65:AC:06:79:ED:16:67:D9:72:11:7F:7F:93:86:C1:A4:FB:14:01:9C
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 022D
Signing time: Sat 13 Jun 2026 02:43:50 +0000
Manifest this update: Sat 13 Jun 2026 02:43:49 +0000
Manifest next update: Sat 20 Jun 2026 02:43:49 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: BZo3zsJjjsCZOxF+huH+SXCU/PxYXA/FsChpzNTkO8M=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: YPR3t0pxNxAAfmPwqIL7jliMlrBzhQ9gLXu93RnHlOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Validity
Not Before: Jun 13 02:43:49 2026 GMT
Not After : Jun 20 02:43:49 2026 GMT
Subject: CN=6a2cc3e6-76a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:42:b4:f0:ea:d7:84:1c:ef:80:aa:ea:e3:
be:5f:a9:21:3c:17:e2:83:cb:91:c9:8a:92:4c:2c:
eb:0e:fc:d5:a3:ab:5d:8b:0a:21:17:98:81:40:cc:
8b:c8:a1:fd:82:a7:88:b6:a8:20:52:05:91:ba:5f:
b0:5e:48:fd:80:02:df:26:0b:bb:b0:b8:f3:d1:be:
59:c4:71:06:91:e8:17:4d:97:ce:cd:a0:9f:b3:b4:
06:a6:f3:9e:32:6c:9b:ff:6c:08:c8:ec:fb:06:e5:
e2:d3:44:ff:43:c8:4c:e8:9e:91:3b:7d:87:96:20:
ba:38:e8:65:41:0b:b1:2b:1b:36:54:e8:52:de:da:
1e:3e:8e:5d:6b:a2:51:28:71:54:a7:d4:76:e8:79:
f7:eb:a8:f2:b0:c9:96:fe:28:49:24:ae:3a:13:1b:
9f:8c:25:67:41:11:60:63:89:ce:52:3e:06:ad:3c:
1f:8c:b5:3b:24:c3:70:5e:d4:2c:bc:bf:78:d1:8e:
ed:cb:fc:5a:1d:4e:0f:67:31:35:34:b1:1d:f9:ba:
52:c3:be:e7:dd:a4:13:f5:1d:76:66:61:94:ca:86:
15:ca:20:ae:ad:f8:b3:09:cf:43:bf:97:5d:1e:13:
1d:1f:96:94:fd:22:46:37:ed:4d:b7:63:55:91:21:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AC:06:79:ED:16:67:D9:72:11:7F:7F:93:86:C1:A4:FB:14:01:9C
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:3e:c8:81:61:ea:02:d2:0c:f4:b5:8e:d1:42:a7:d6:ee:a8:
f6:86:13:39:2a:05:0e:bb:f9:a4:34:16:dd:1c:c1:d5:17:73:
b6:4a:e8:3e:8f:f4:a5:2c:ec:ca:92:b3:a2:aa:72:56:ba:8c:
16:df:2f:7a:36:5f:76:b2:5c:ed:5e:cc:1a:a5:0e:5d:7e:d7:
88:37:72:0b:ab:b9:45:1b:9b:42:aa:a0:3e:24:55:dc:4c:72:
55:6b:c2:39:5b:02:1c:bd:84:36:c2:2b:62:b0:3b:65:1b:6b:
77:ee:bc:ec:9f:ca:29:e0:69:39:e9:33:e3:b5:04:7d:41:ea:
26:c6:e9:f3:19:bc:aa:a5:1e:01:1c:a1:bd:88:6b:da:57:11:
cc:9f:20:f9:8e:81:ea:8b:b3:e0:49:80:c7:49:12:c4:1e:37:
6c:69:5b:a1:73:b3:a0:32:fc:3c:7c:bc:ad:b2:ec:9f:7c:ab:
13:79:27:91:4e:c8:d8:74:40:56:17:6f:9b:b2:76:5a:7e:24:
79:19:53:37:fc:bf:c7:13:81:a9:cc:52:e9:ad:c6:2d:5c:f5:
ad:5a:87:24:38:fb:0f:d3:78:44:1f:0b:1c:a2:6b:33:fa:29:
18:56:f8:fa:fc:fd:39:be:08:fd:c5:8e:c1:e1:4f:a7:e3:0e:
c3:b4:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:12 2026 by rpki-client