
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier: TeWQAy1or5G9J6vV9b8GwycGjoyTwa7djpi+KMAVFRw=
Subject key identifier: 40:16:25:7C:02:B2:18:E0:CE:5A:87:B5:58:CA:77:F3:F6:0F:C8:A9
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number: 8C
Signing time: Sat 13 Jun 2026 07:19:53 +0000
Manifest this update: Sat 13 Jun 2026 07:19:52 +0000
Manifest next update: Sat 20 Jun 2026 07:19:52 +0000
Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: EvjG9Dp9WGpbgxogQmlUciRPEAoNaEdopZidQeOrMJE=)
2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Validity
Not Before: Jun 13 07:19:52 2026 GMT
Not After : Jun 20 07:19:52 2026 GMT
Subject: CN=6a2d0499-9cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:35:0a:c7:5f:9a:af:65:ed:81:5d:8c:74:
7f:68:1e:21:36:9d:7a:ec:b5:49:96:fc:d5:fe:55:
9c:ad:27:5d:0a:64:fd:11:14:96:94:b0:64:fa:30:
03:95:06:89:2a:2e:75:d1:17:04:c6:47:a1:a7:d0:
b7:dd:2d:53:0c:35:48:48:1d:7f:08:70:4e:87:11:
6e:7c:83:8a:52:c3:41:c1:cc:61:6b:fc:cf:37:7c:
fe:ee:93:07:fe:38:58:fd:a7:67:67:9c:c0:3e:01:
75:f2:7d:fb:dd:25:7f:4f:fd:da:7b:a7:ba:e3:dd:
2b:5e:c6:b2:c7:8e:2b:41:00:bf:94:16:4f:e5:6a:
3c:75:43:bb:0e:a0:ce:1e:31:9c:c0:34:0c:04:c3:
ba:46:68:85:a7:05:1a:50:dd:d0:69:ec:82:76:8b:
de:1c:7d:d0:06:f0:aa:60:bc:ff:ba:e8:2b:37:3c:
46:23:d2:a4:db:61:24:76:fc:5c:aa:f2:a6:47:a0:
3f:b7:13:f4:dc:98:f5:21:ff:79:7b:8e:11:c9:b8:
01:0a:86:14:e9:9e:8a:83:39:5c:39:84:d7:7a:9e:
2e:d8:e2:31:42:2e:87:6b:5c:6d:41:b8:16:12:21:
34:42:76:75:99:a9:02:12:42:13:6b:61:24:65:62:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:25:7C:02:B2:18:E0:CE:5A:87:B5:58:CA:77:F3:F6:0F:C8:A9
X509v3 Authority Key Identifier:
keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:16:97:0b:7b:1e:2f:be:27:74:5e:fd:35:a6:c7:b2:6c:3d:
5f:c4:7f:b6:56:64:46:f3:c8:8e:23:2b:bd:11:75:ab:79:2e:
b9:59:b1:31:9c:06:28:cb:75:53:06:ed:40:c6:a4:e0:53:d4:
fb:e8:93:38:df:9e:d2:39:c9:08:f5:fa:89:56:0a:6d:9a:9f:
fe:4e:d9:77:1a:c8:04:87:dd:52:fd:8c:6f:80:94:34:42:e3:
74:b4:3d:3a:82:26:4e:19:50:07:f3:3a:0b:d3:15:1a:9b:0c:
34:47:96:73:33:ff:e4:c9:b7:41:57:67:ac:bb:a2:f3:dd:cd:
ed:ef:06:79:59:fe:fa:f1:3a:e5:5b:da:58:f6:af:25:d6:ea:
3e:62:f7:ea:db:02:e3:c0:54:c8:0a:b6:18:d2:0d:45:0a:cd:
2a:33:b6:81:b2:00:08:62:9d:e4:de:fe:4b:27:61:37:d3:a1:
40:07:f3:bb:1c:fc:af:90:e4:57:94:cf:76:12:8b:3b:a6:96:
05:d8:b9:5b:7e:ad:25:59:7b:0f:43:60:b7:b8:5a:24:8e:74:
00:49:21:43:98:7c:d6:e0:d0:84:90:11:a3:01:ab:66:76:c9:
5d:84:7e:b5:f2:cf:d8:1a:a8:b2:82:88:aa:3d:02:63:e4:83:
6a:57:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:33:33 2026 by rpki-client