
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json)
Hash identifier: zJr1UXce/LAsYsCDOV0prD+Bj0OVBqv4lJT6jBxKZn4=
Subject key identifier: F6:B2:69:48:55:DE:6A:DB:7D:89:8A:30:AF:4B:AC:3D:B3:F8:9B:A9
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial: 0E02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
Manifest number: 0DE6
Signing time: Fri 12 Jun 2026 17:50:19 +0000
Manifest this update: Fri 12 Jun 2026 17:50:19 +0000
Manifest next update: Fri 19 Jun 2026 17:50:19 +0000
Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: e9+YSB2Zog2p3og5vfrCjuEcGHdAnbxB5l+znZL3c2g=)
2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: /XXsn5P+CzGOi6w4JWRUAkj1a3bzJJfkjs3Rtf98gFg=)
3: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: CG6vYgZ1e3/8dZN64pHrnStSPG3URxAwT0J40lVEYis=)
4: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Validity
Not Before: Jun 12 17:50:19 2026 GMT
Not After : Jun 19 17:50:19 2026 GMT
Subject: CN=6a2c46db-d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:68:3d:7a:8c:a5:b2:6f:19:24:0c:d9:15:
99:1e:84:1b:e7:db:8e:32:f8:b8:b5:4b:5c:36:aa:
c0:78:61:84:c5:96:01:88:28:a3:0a:3a:3f:42:ed:
54:c7:00:89:2d:23:5d:8d:5c:a7:cf:d7:c2:42:6c:
aa:06:d7:12:64:b3:5c:d4:13:ff:b8:21:3f:8f:ce:
6b:a7:77:96:c9:a1:9c:27:1f:1c:cf:1c:d0:8a:ab:
f5:2a:1d:2b:5a:d5:05:a0:cc:4b:b1:1c:18:18:68:
46:b3:ef:0b:3f:99:04:f1:74:03:ec:de:11:26:40:
4e:d3:dd:30:68:df:2a:34:d9:7d:d0:01:2e:b2:9e:
d3:0a:7d:d4:90:50:03:ff:e2:53:20:ea:29:32:7e:
49:50:8d:e7:f7:09:46:35:a4:af:23:28:d8:cb:eb:
5b:c9:b0:89:57:3b:a1:46:bb:4c:97:e3:4a:9e:57:
bc:2e:20:38:e8:c8:60:ce:dd:c6:c4:86:63:e4:fe:
67:2a:a0:59:79:05:29:70:f8:6c:69:c0:a8:35:dd:
c0:ba:d2:cb:68:b4:b2:e3:c2:0c:86:f4:55:da:1c:
49:48:e3:6e:3b:b4:93:a6:bb:04:a5:58:20:d2:54:
58:ae:44:65:4e:42:10:7b:8a:ce:51:f1:ab:52:20:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B2:69:48:55:DE:6A:DB:7D:89:8A:30:AF:4B:AC:3D:B3:F8:9B:A9
X509v3 Authority Key Identifier:
keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:f6:e6:2f:e6:47:c7:00:df:f5:13:b8:51:2b:bb:90:ee:52:
82:8f:6b:7e:32:36:2b:ab:e8:a0:a0:c7:e7:67:84:e0:19:3b:
59:6d:b5:22:90:2c:21:cb:4f:0d:bb:5d:e3:c4:9e:f1:bb:aa:
c3:dc:fe:57:e2:35:da:69:a6:eb:1c:9a:0d:f5:9d:02:46:01:
86:d0:07:a1:7c:db:ea:86:df:47:bb:1b:eb:ff:ad:26:da:bd:
53:2f:d8:ad:82:23:e0:8c:d2:d0:ca:46:99:43:7c:ee:72:ca:
50:ca:e5:3f:81:f4:08:32:d4:80:c3:27:69:30:39:56:08:3e:
49:25:36:da:ac:1a:78:33:c6:76:42:64:25:99:3e:7d:db:b2:
b4:8b:12:65:fd:8c:aa:a4:14:08:eb:26:23:81:dd:61:aa:d2:
ff:40:c1:58:20:93:45:cf:4a:05:47:15:bb:e7:28:92:be:28:
26:fe:18:6c:f0:50:3b:17:3a:72:42:1d:7d:e2:08:dd:a8:8e:
84:ee:7f:bb:ff:19:64:fd:e6:c3:dc:4b:b1:7f:c5:cb:39:e9:
c1:e0:21:fa:3d:a6:40:36:c2:d9:ae:76:fb:cc:23:a6:84:7a:
4c:44:bb:01:72:a2:18:d4:1b:03:83:d9:58:89:e6:d8:e5:5d:
bb:1b:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:58 2026 by rpki-client