
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier: 9MakfAf6jjr4aS2lTOeVvqBFiCbqUCH9xm50jUbdNc0=
Subject key identifier: CA:DE:7C:1A:10:24:55:80:1F:F8:7E:FE:19:2B:C7:D1:82:9A:C4:DA
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 096E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number: 0950
Signing time: Fri 12 Jun 2026 20:10:39 +0000
Manifest this update: Fri 12 Jun 2026 20:10:39 +0000
Manifest next update: Fri 19 Jun 2026 20:10:39 +0000
Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: DgH9MM9mYZwUWKBCcrn4GKgwIVLGhgJ0on09qv2vbpA=)
2: 6B8789A63FA011F1B60E4CC5BB833773.roa (hash: eUeT9MfyQplwOYsEvB1DK9Ul4fMRh4BuNuH+20Gy/0Q=)
3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: J5TlVE9TaJMgIGEY3wJEZY2JAbPuoZdGlfLWjr6sNVQ=)
4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: S1YQDpfRZfYWxWzS0yYZYUtJLVH3RsmKcbHcWJLLIjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Jun 12 20:10:39 2026 GMT
Not After : Jun 19 20:10:39 2026 GMT
Subject: CN=6a2c67bf-18e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:42:6b:74:ee:d2:57:d1:06:75:2b:99:cb:
21:5c:d1:d0:ac:c4:64:ba:b0:93:89:19:be:1b:b1:
bd:77:ca:cc:56:e2:72:0b:83:dc:1e:11:94:45:3c:
a2:55:5d:70:4c:b2:11:62:65:df:7f:c9:3c:61:e1:
d9:57:a5:9d:42:52:0e:2a:bc:93:88:95:ff:7c:6b:
95:f9:0a:af:ac:2e:76:cc:ed:01:8b:bc:9f:f7:57:
bf:23:a6:68:12:eb:95:14:57:e0:5f:88:e5:9c:7e:
e6:97:81:c8:68:0e:15:19:d6:c8:b5:d5:a5:02:a2:
84:38:24:2e:54:11:87:d8:1b:84:3a:16:f4:f5:bf:
cc:cb:74:93:4d:ab:89:18:4b:45:53:35:e3:63:c6:
84:92:41:f6:c2:ef:1c:81:5d:b2:f8:17:e3:70:aa:
87:fb:c6:c9:23:28:ab:a8:6b:96:06:e2:0b:23:b2:
f8:b8:17:95:8d:96:db:51:d5:8c:02:d6:43:02:1f:
37:89:87:e2:7c:93:7a:57:f9:5b:f1:4c:17:6d:ad:
36:f5:cd:92:2f:e5:7c:97:b7:00:55:e2:db:95:dd:
1f:7b:c3:e2:71:1c:7d:49:8f:40:a6:66:3b:e6:8d:
97:5b:ff:8d:96:dd:b3:e3:52:7f:aa:c0:bd:dc:59:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DE:7C:1A:10:24:55:80:1F:F8:7E:FE:19:2B:C7:D1:82:9A:C4:DA
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:02:70:18:47:8b:30:ec:ee:a7:46:ed:05:c9:9b:35:bc:
33:d5:14:7a:56:0d:8e:14:0f:f3:62:a4:83:38:46:90:81:c8:
50:9e:a5:21:b4:0d:52:62:66:6b:a6:cd:e8:1a:c9:49:f8:2b:
87:46:6f:04:5c:09:f4:4e:d5:f3:86:8e:55:b4:ef:3f:43:99:
1e:04:de:28:36:2b:c3:b2:d8:4a:ba:58:d8:55:a8:19:fe:99:
03:c8:59:6d:3e:59:8b:66:12:68:9b:9f:6f:e0:f6:b9:88:c8:
21:16:8c:86:8b:be:7f:bd:d2:f7:dd:ee:19:2a:3c:e7:76:91:
3c:c5:5b:42:90:fa:fb:8c:64:b1:8c:c5:37:c0:63:38:55:b9:
ff:4a:15:9e:50:1d:94:0b:3c:7d:83:af:d7:ba:fe:cb:e0:1d:
b7:96:e6:84:9a:62:d6:ae:8c:b9:90:4a:10:65:7a:3c:d7:6c:
49:7f:b9:d8:65:ca:9b:f7:e9:7b:e9:ae:b0:26:97:97:18:51:
ae:62:bb:eb:02:b8:1d:ab:34:e6:ea:40:f3:71:54:f1:ad:52:
a9:00:9d:47:78:1f:f6:f6:0c:15:b2:43:62:7a:21:bb:6f:f8:
29:a9:da:d5:7d:29:9a:a7:a8:b1:4f:0b:69:50:f4:3c:21:1a:
64:12:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:51 2026 by rpki-client