
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json)
Hash identifier: Tx4dxqdGV2WABxIP7okxj+m0nUR0fUQjpOnXpYLOy94=
Subject key identifier: C0:6A:6F:80:6A:25:85:78:EA:E1:BF:82:33:B9:84:A1:5B:DC:F7:B7
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial: 0DB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
Manifest number: 0DAF
Signing time: Fri 12 Jun 2026 17:53:26 +0000
Manifest this update: Fri 12 Jun 2026 17:53:26 +0000
Manifest next update: Fri 19 Jun 2026 17:53:26 +0000
Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: rXx5PnI5hMg07m7mgRJFJH0/wa9nnKVxKMgm8ww+o3E=)
2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=)
3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3506 (0xdb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Validity
Not Before: Jun 12 17:53:26 2026 GMT
Not After : Jun 19 17:53:26 2026 GMT
Subject: CN=6a2c4796-9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:02:d4:ca:73:24:b8:ba:98:6f:65:e2:fe:
d0:0d:2c:34:87:07:9e:c6:f4:8a:f2:4b:47:51:f3:
c6:78:d5:cd:ef:ff:41:4c:65:1d:73:d0:e2:05:2c:
7c:41:3d:2a:a1:4f:d6:aa:b0:9a:43:6f:a9:89:c9:
f0:f7:58:91:bf:f8:ff:8c:01:f2:80:65:df:fe:b2:
84:a3:44:31:70:92:29:ef:7a:9f:40:9f:52:6d:39:
6b:b7:c9:d8:ff:cf:dc:cf:67:0e:e2:18:73:2f:ee:
32:e3:4f:9c:93:4f:3e:94:56:eb:aa:6f:67:f9:db:
35:50:5c:79:1c:a8:34:01:c6:56:80:36:c5:5c:63:
b8:c6:2b:a2:b0:e2:9e:51:75:49:01:d5:66:64:f0:
d8:e8:7a:a3:6d:81:ae:71:f1:4f:fc:a1:66:42:87:
da:c3:e5:a8:1a:9d:14:c2:b9:27:17:a3:b5:2d:7f:
8d:d4:d9:03:b8:f8:87:34:41:55:eb:c8:8c:18:d9:
c1:46:78:62:6c:fa:0b:a5:72:f8:15:6e:ae:36:dd:
84:a0:d3:39:cf:29:87:e4:7d:a8:96:89:3d:37:fe:
27:a0:6f:46:1a:79:47:8e:6f:7b:74:28:67:7d:07:
8e:f6:e1:64:6e:f4:7b:0a:d9:b7:da:9b:2f:54:10:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6A:6F:80:6A:25:85:78:EA:E1:BF:82:33:B9:84:A1:5B:DC:F7:B7
X509v3 Authority Key Identifier:
keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a9:54:5b:10:e1:c3:96:09:02:81:57:8f:ac:e9:cd:89:be:
6d:fc:df:af:4b:7e:27:7f:82:6f:82:c5:79:87:15:5f:25:0b:
60:97:af:94:60:dd:4f:2a:10:38:82:1d:fb:04:13:e5:0f:af:
74:46:49:0f:ab:d8:5d:b7:e4:06:c7:5d:6e:62:22:2f:8e:3b:
de:a1:35:c6:2c:a5:31:77:0d:96:89:10:36:8c:d2:4b:d6:98:
85:7c:95:15:9a:22:80:c1:0e:46:82:d0:ef:34:e3:9a:68:44:
13:ac:4d:a7:32:a2:86:3a:9c:54:22:4f:bf:99:00:5d:2e:64:
f2:43:0a:ba:57:49:a1:db:b5:0c:d1:67:91:bc:f7:e3:c0:27:
c8:37:68:ee:4a:aa:2c:0d:51:8e:31:4d:54:8a:48:be:d1:1f:
99:fd:99:b9:a0:6c:f8:58:93:9e:2c:c2:de:32:af:f0:3b:24:
dd:58:ea:55:a3:4a:10:62:27:27:0d:8e:a5:c3:36:da:a1:30:
61:f9:01:b4:a7:95:0f:17:36:ae:11:bb:7e:b8:97:29:78:28:
97:1d:10:bf:e6:2f:1a:52:fc:90:de:f3:7e:0a:5e:a7:32:e6:
72:52:27:46:ca:c7:57:be:77:5f:42:a8:a8:60:8d:c0:20:3c:
c8:2c:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:35 2026 by rpki-client