
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier: YewSZFS/4LWu34D8cUvJr829RlTvS2lWrMD0VX6Fbzg=
Subject key identifier: A0:87:43:0E:62:91:36:68:6B:C9:B6:9E:BB:38:24:D2:FC:B0:10:43
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number: 0210
Signing time: Sat 13 Jun 2026 03:31:51 +0000
Manifest this update: Sat 13 Jun 2026 03:31:51 +0000
Manifest next update: Sat 20 Jun 2026 03:31:51 +0000
Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: 5r0E3ztzJtElBbdkfKFgNG6biP6/ujSm3B0YYFTAe8g=)
2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: 6PnVAS1g7LHhPhFEbNomaCcQC2sh7domCqwSzK4ikhg=)
3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: NAyqjXxHew3fTgSiTUVKkUKTCbweGmMoTZZqsBbKNGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Validity
Not Before: Jun 13 03:31:51 2026 GMT
Not After : Jun 20 03:31:51 2026 GMT
Subject: CN=6a2ccf27-940c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:07:69:cd:c0:19:11:6a:e6:7a:a3:65:9a:
8b:0d:53:73:25:ce:39:a7:d3:42:0a:bf:bf:61:6c:
52:f4:73:9b:74:81:41:05:10:f5:57:eb:79:1f:cd:
f1:01:83:70:eb:91:82:92:a5:b1:d8:bf:a9:c3:b6:
cb:97:cb:43:28:27:ee:e6:f4:1e:6b:87:f1:31:6f:
fa:f1:96:72:3a:11:fa:0c:33:92:27:a0:bd:5b:e8:
5e:15:54:df:0f:13:ef:14:7b:9b:06:62:4e:f3:0a:
3a:e5:3a:8f:bc:01:39:31:11:96:e2:44:c7:0a:fe:
ba:2d:d7:d9:65:3e:93:fa:13:c3:1c:83:ec:7c:f1:
a5:c5:3f:d6:95:1f:87:a2:3e:dd:f9:85:46:d3:47:
52:3c:be:8f:16:63:f0:67:0b:2f:c0:ba:88:a8:aa:
9d:78:f8:62:af:23:32:1f:ef:6f:60:81:ab:5b:50:
50:de:a4:be:1f:75:61:ea:9e:ab:6c:1f:b4:0d:d1:
fa:49:d8:b9:ec:c1:65:cb:66:46:c1:ea:ca:33:2d:
cf:8f:7e:94:f3:a6:75:48:5f:f8:ca:7c:d7:24:63:
e6:f6:fa:7c:12:99:07:6e:26:3b:33:59:68:7b:ef:
96:06:10:82:ac:17:06:c1:60:bf:79:46:5e:5c:30:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:43:0E:62:91:36:68:6B:C9:B6:9E:BB:38:24:D2:FC:B0:10:43
X509v3 Authority Key Identifier:
keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4d:2e:98:b7:f7:65:dd:b0:04:e9:9d:cc:a6:06:58:08:82:
5b:84:7a:53:8d:60:e3:74:fe:ed:71:41:86:1f:4d:95:bd:ed:
b2:25:ee:a7:45:b8:22:67:6e:1e:db:c3:5e:ce:7d:c2:3f:8e:
bd:80:f3:88:c1:91:b5:77:57:78:15:9b:b4:4e:6a:53:b4:c8:
15:4d:8d:9c:a2:11:54:ce:db:85:db:ea:26:7d:4c:bb:15:5d:
d3:2c:74:ac:48:5b:10:4c:7f:72:d1:5f:df:06:10:36:4a:e3:
1c:5f:3a:f5:7f:13:dc:c2:95:b5:30:61:63:24:bd:03:d9:1a:
f6:3b:45:9b:b1:c2:8d:38:0a:c6:90:7a:55:e2:b1:be:86:96:
54:7e:0f:d5:f0:46:56:55:de:6f:2a:cd:c6:88:29:77:22:a5:
64:09:cc:f9:4f:6c:1d:b3:99:c9:db:aa:04:88:a4:03:88:51:
e8:66:d7:78:14:5f:50:93:d4:25:53:1d:3a:8f:40:03:f4:e1:
6b:9c:6a:3d:3f:1e:d7:ef:5e:43:c6:c1:f9:78:2c:5f:df:c8:
26:cd:f5:8c:c3:d4:36:3a:94:f9:45:52:fa:a0:eb:ea:e4:21:
2c:09:ee:7b:b7:cd:bf:a2:8b:ae:93:3c:63:47:8c:77:05:59:
30:95:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:14:42 2026 by rpki-client