
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier: sWjLxCOSLsN18ZxNQM5tnYlvhrywl4YJLhDDtYXFbpg=
Subject key identifier: 62:3C:CB:E3:35:DD:D4:59:E0:82:AB:18:4C:2E:F2:3D:AC:B4:30:01
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 07B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number: 07A2
Signing time: Fri 12 Jun 2026 21:31:04 +0000
Manifest this update: Fri 12 Jun 2026 21:31:03 +0000
Manifest next update: Fri 19 Jun 2026 21:31:03 +0000
Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: 00MVoFM0TwNUmDXQjhhfSLYVVuXPj7eS6NyIbEzQISU=)
2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=)
3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 0ZFS32PgzMKmbFO0ZX4LyKpm9Pennvy2xmUXIm988gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Jun 12 21:31:03 2026 GMT
Not After : Jun 19 21:31:03 2026 GMT
Subject: CN=6a2c7a97-732d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:7f:29:25:df:ff:26:50:20:47:bf:8e:6c:
54:87:8a:24:dc:f8:e6:70:06:8a:ce:f9:d7:c8:50:
da:c9:6f:f8:77:df:e5:70:67:d6:f7:54:aa:9a:b4:
49:d3:75:4a:ed:bb:b4:30:8f:f5:e9:ab:93:c4:30:
2e:e0:ae:86:b2:09:2d:26:04:ba:17:01:d7:53:70:
46:05:cc:7f:8b:d8:0b:0f:34:30:80:0d:b7:3a:f3:
41:b3:c6:f0:cf:a6:21:bb:cf:90:2c:4c:e7:c4:3d:
46:54:39:6e:5e:07:c1:a1:b3:e1:87:d6:fa:34:b9:
84:0a:77:a0:05:93:f6:ea:75:d9:0e:6d:e0:30:fc:
34:2a:cd:66:6a:fc:49:db:d9:d7:d5:2e:60:61:f0:
25:0d:47:77:58:e9:9d:ca:4b:7c:cd:01:59:37:c5:
95:3c:6f:4e:2f:03:4c:7b:93:04:a8:dc:81:c0:16:
28:6f:5f:73:d7:60:dc:4e:79:d4:cb:79:a9:a5:fa:
48:f3:f3:e2:5e:cb:ea:c6:72:57:b6:66:52:67:53:
ea:92:9b:bb:39:15:c6:f7:5d:48:77:e3:f0:52:20:
a4:12:62:22:b8:51:01:da:9a:59:11:f0:a2:f0:fd:
49:9a:05:c1:ef:b3:ec:4a:83:ff:d0:97:46:78:4f:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:CB:E3:35:DD:D4:59:E0:82:AB:18:4C:2E:F2:3D:AC:B4:30:01
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:4a:be:99:d7:02:42:ed:0f:a5:04:89:8d:88:78:98:c9:ae:
17:a4:ea:eb:1e:11:3a:df:ae:e1:ba:62:83:45:0a:89:ab:e2:
af:70:d7:4b:de:d8:e4:a8:43:72:2f:a9:b7:9d:89:8e:46:05:
60:e5:28:27:9c:ca:b3:bd:6c:70:bd:7b:9a:5d:de:69:c2:75:
85:05:9e:ed:3c:01:9c:fe:ed:dd:7d:30:e4:c7:a1:a7:fa:5a:
b1:d5:8d:f8:b8:15:c3:8d:b2:9c:fd:39:e1:30:9d:e5:52:8b:
04:a0:bc:ac:f0:74:1d:d0:25:47:c1:d6:c1:d5:cc:7f:3c:96:
92:27:94:3e:40:7a:9e:b0:b0:27:f3:e8:4e:8e:84:90:d9:97:
59:a4:07:95:2c:c7:1e:15:76:39:ce:59:0d:5d:e3:eb:8f:10:
66:bc:f7:71:7d:93:28:48:ca:77:db:0e:83:83:67:99:c6:7b:
4c:dc:d7:ea:b1:2b:ab:94:ea:20:90:f3:53:86:52:54:d1:55:
d3:ab:c3:0f:d1:ef:b5:d6:6a:53:18:f6:21:d1:cc:90:04:06:
84:3b:99:11:d0:b9:02:54:d6:bd:0d:91:1e:76:e6:8e:e4:60:
df:de:e1:ae:f1:2c:cf:4b:60:06:d7:bb:4c:83:28:cd:2a:d3:
ac:56:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:35:57 2026 by rpki-client