
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier: qZC9HEK0egEjqIiSRIHyCp9lUlYs6v4JfPPPvy4Dfjg=
Subject key identifier: 64:5E:6F:46:EE:12:90:F3:9B:DB:3C:EB:BB:6C:3D:C5:13:FD:F6:42
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial: 0634
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number: 05D3
Signing time: Fri 12 Jun 2026 16:17:01 +0000
Manifest this update: Fri 12 Jun 2026 16:17:00 +0000
Manifest next update: Fri 19 Jun 2026 16:17:00 +0000
Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: ANHchT4SSPOMwT6l5v4PhrIPJBeNgATcBgGKqY4jD2Q=)
2: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
3: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
4: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
5: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Validity
Not Before: Jun 12 16:17:00 2026 GMT
Not After : Jun 19 16:17:00 2026 GMT
Subject: CN=6a2c30fd-4351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:6c:9b:d6:48:12:99:6f:f7:d4:ff:f9:97:
f4:da:51:ec:f3:f7:96:7a:1e:79:1e:10:ec:b1:ac:
c1:85:b8:07:a6:17:4e:9d:b8:6a:5f:6c:2e:43:9a:
c0:b8:e0:84:91:71:cf:7b:fb:b2:ea:51:a4:1a:6f:
39:ea:50:52:48:78:fe:ca:d5:66:54:c8:9a:88:78:
fb:b5:de:53:e0:30:8a:97:86:e6:04:cf:fd:12:47:
3f:5a:be:d4:73:ac:31:83:51:bf:78:6e:98:b0:c9:
ee:2f:38:cb:20:34:54:f1:5e:6d:22:71:e2:c5:9d:
73:fa:c7:a9:a6:d2:ee:3d:ba:11:53:23:91:89:93:
c1:95:59:80:e3:42:29:e9:48:9b:34:9b:d8:71:c9:
58:53:03:4f:3c:7d:30:19:b5:0e:fa:4d:12:dd:da:
69:aa:43:0a:42:3d:a2:fb:42:7d:ad:95:26:89:36:
2b:41:8d:14:f3:58:98:46:76:72:7a:72:2f:1d:49:
29:30:6f:4d:e3:42:25:89:9b:a8:ef:dd:4e:5c:6a:
20:d2:49:05:23:37:97:fb:86:4c:a6:21:75:20:23:
27:cf:67:3e:bb:7c:b9:d8:cf:85:40:ae:5f:ca:0c:
51:fc:3c:4f:c0:91:a6:e1:89:e4:e5:d3:3f:dd:d0:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:6F:46:EE:12:90:F3:9B:DB:3C:EB:BB:6C:3D:C5:13:FD:F6:42
X509v3 Authority Key Identifier:
keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:09:fc:14:54:ac:46:37:e0:02:4b:42:48:8c:33:2f:90:
40:9c:da:cc:8e:a4:5f:39:05:f2:8b:1d:7e:d7:80:1f:76:75:
1c:30:88:af:b3:ea:d2:e4:54:1a:c7:bb:0b:c7:ff:01:8d:37:
27:c0:aa:07:6e:2c:88:32:99:d1:51:b2:63:6e:1d:cf:c0:ba:
31:ed:50:79:d5:8c:0c:7d:95:75:34:49:b3:f2:9f:13:5b:85:
8e:26:49:f5:0d:87:9e:7c:34:a3:79:9b:2a:3a:87:5d:b2:a2:
5b:66:97:05:96:0a:9d:00:22:bd:a7:29:c4:20:85:a2:41:ec:
e3:53:ce:b6:8d:d4:35:bf:ed:56:2c:aa:98:8c:7a:8d:56:2a:
be:57:a1:8f:44:0b:93:81:7b:f6:fc:00:bd:8b:4a:bb:c3:77:
f0:20:bc:8f:4b:b8:ca:c0:05:48:ab:7b:12:26:20:00:08:b0:
58:f9:cb:09:2e:d4:33:92:ec:4b:da:ef:9c:f7:67:f7:a3:9d:
fb:7d:58:42:cf:b7:f0:95:da:cf:c9:3a:e8:91:e0:fc:40:dc:
3e:a2:45:65:29:77:f4:72:bc:51:e5:3f:f4:f7:bd:8f:56:1c:
00:fd:46:5f:e3:6f:c9:88:84:e4:02:e8:21:db:d7:ff:a6:47:
fc:00:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:23 2026 by rpki-client