
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json)
Hash identifier: pgvaA8AIFh/7syj3fqJx6zc7mjID5hDGCXbVVj36vlE=
Subject key identifier: F2:E2:04:FA:81:F7:4B:76:95:6A:B5:7A:C5:A5:D0:67:63:AF:CB:C4
Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
Manifest number: 3F
Signing time: Sat 13 Jun 2026 08:36:51 +0000
Manifest this update: Sat 13 Jun 2026 08:36:50 +0000
Manifest next update: Sat 20 Jun 2026 08:36:50 +0000
Files and hashes: 1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: IPPoAPToGzCuuh/1M+wgndkjYMaSTFlPq/OUwR2dYAk=)
2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Validity
Not Before: Jun 13 08:36:50 2026 GMT
Not After : Jun 20 08:36:50 2026 GMT
Subject: CN=6a2d16a3-e37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:30:d3:ea:8c:ec:32:4b:66:7a:1c:54:51:d9:
76:c4:46:b6:74:fe:ac:0a:ce:66:9e:7b:6d:7a:be:
f7:98:ef:f5:12:a7:ca:46:4e:55:ed:4d:c6:b2:4f:
fa:7b:5b:6e:fc:5f:4e:6e:d7:e9:9b:08:a9:72:dd:
c1:3a:c2:a9:cb:21:99:50:dc:d5:93:5a:99:5f:26:
a7:20:24:77:e0:c5:e7:71:7d:a7:34:9c:b0:df:18:
ff:1a:e7:b6:92:95:c3:2b:a9:18:09:7d:45:d6:cf:
9e:13:b0:63:85:d2:30:0a:8b:39:05:21:7e:99:c0:
5d:55:d7:6b:18:41:5d:15:59:0a:a5:f9:6d:10:d6:
4e:22:c1:06:28:f4:e9:f6:65:97:ba:46:31:f6:29:
61:bf:f6:2c:c2:bd:b4:3b:2d:57:6b:71:96:17:ca:
73:07:8c:55:09:81:84:70:b6:53:ff:d3:ef:c4:ac:
79:ce:ea:b7:22:0b:99:de:21:ee:ec:17:0b:e4:11:
19:50:50:c0:f2:d7:43:d8:b4:22:90:66:6f:68:b9:
1f:33:87:43:ce:78:e2:03:90:de:db:26:09:b6:45:
8c:da:3c:3c:5d:c0:4d:73:7e:89:b0:52:e0:f9:6c:
aa:cf:44:46:f3:56:2f:72:7c:82:af:d1:d5:c1:29:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:04:FA:81:F7:4B:76:95:6A:B5:7A:C5:A5:D0:67:63:AF:CB:C4
X509v3 Authority Key Identifier:
keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4e:ae:98:d2:9c:40:be:2e:d5:30:35:97:f6:4d:5b:fa:e6:
80:a9:4e:37:3f:3e:a7:7e:9b:b1:61:40:26:3a:36:44:94:aa:
8f:a5:3e:03:af:53:83:86:50:c5:9e:0c:04:33:97:ac:87:a3:
9e:6e:b5:d6:a3:b5:54:f6:36:c4:46:dc:8b:0f:2f:20:43:df:
f4:71:02:fc:8a:b3:77:ad:0a:16:8f:ce:0b:d5:2d:67:9b:28:
5e:6c:4a:b1:8c:0e:5c:9c:67:8c:46:c8:8b:5c:f6:d6:73:1a:
3b:a9:fe:c8:0d:bc:da:c8:b1:44:f0:cf:17:ac:f2:74:fd:82:
d3:58:5c:c6:43:3f:df:2b:32:9a:c9:80:a4:f9:08:a4:29:9e:
e6:c6:29:23:b9:e7:4a:0e:76:c8:27:59:39:46:82:3b:c5:59:
42:1a:d3:82:c7:29:94:09:5b:90:85:2f:b5:ac:fb:55:f8:96:
94:a2:be:db:e3:0d:82:c1:4a:42:11:97:62:93:d5:6d:44:6d:
a8:ac:1e:27:cb:a2:64:96:37:58:58:18:3e:d3:63:81:87:99:
6e:5e:e0:af:be:34:7c:f9:4e:53:c7:e2:b1:f0:bf:70:b3:ab:
96:5a:8a:bb:b8:72:64:82:c3:eb:49:ac:85:a6:9d:27:17:ca:
db:61:e2:87
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NkM0MzExMC8GA1UEBRMoRDJDNDY3QkMzQzYyNkJDNUU2QUUxQjJBNEQyMzU3MTFE
ODE5Q0FFNDAeFw0yNjA2MTMwODM2NTBaFw0yNjA2MjAwODM2NTBaMBgxFjAUBgNV
BAMTDTZhMmQxNmEzLWUzN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDxMNPqjOwyS2Z6HFRR2XbERrZ0/qwKzmaee216vveY7/USp8pGTlXtTcayT/p7
W278X05u1+mbCKly3cE6wqnLIZlQ3NWTWplfJqcgJHfgxedxfac0nLDfGP8a57aS
lcMrqRgJfUXWz54TsGOF0jAKizkFIX6ZwF1V12sYQV0VWQql+W0Q1k4iwQYo9On2
ZZe6RjH2KWG/9izCvbQ7LVdrcZYXynMHjFUJgYRwtlP/0+/ErHnO6rciC5neIe7s
FwvkERlQUMDy10PYtCKQZm9ouR8zh0POeOIDkN7bJgm2RYzaPDxdwE1zfomwUuD5
bKrPREbzVi9yfIKv0dXBKe/NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8uIE+oH3
S3aVarV6xaXQZ2Ovy8QwHwYDVR0jBBgwFoAU0sRnvDxia8XmrhsqTSNXEdgZyuQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzQzL0M4MDlCOEYwMTA4
NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThYbXJoc3FUU05YRWRnWnl1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMHNSbnZEeGlhOFhtcmhzcVRTTlhFZGdaeXVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2
QzQzL0M4MDlCOEYwMTA4NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThY
bXJoc3FUU05YRWRnWnl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCMTq6Y0pxAvi7VMDWX9k1b+uaAqU43Pz6nfpuxYUAmOjZElKqPpT4Dr1ODhlDF
ngwEM5esh6OebrXWo7VU9jbERtyLDy8gQ9/0cQL8irN3rQoWj84L1S1nmyhebEqx
jA5cnGeMRsiLXPbWcxo7qf7IDbzayLFE8M8XrPJ0/YLTWFzGQz/fKzKayYCk+Qik
KZ7mxikjuedKDnbIJ1k5RoI7xVlCGtOCxymUCVuQhS+1rPtV+JaUor7b4w2CwUpC
EZdik9VtRG2orB4ny6JkljdYWBg+02OBh5luXuCvvjR8+U5Tx+Kx8L9ws6uWWoq7
uHJkgsPrSayFpp0nF8rbYeKH
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:06 2026 by rpki-client