
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier: GqNf87oOQYCEWGEg4kx+HPcdOn+MCmSRyyvl1rvrnWs=
Subject key identifier: 36:20:B3:DD:8B:15:19:84:61:13:A0:58:BC:DD:1A:32:09:BF:35:06
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number: 019D
Signing time: Sat 13 Jun 2026 04:16:34 +0000
Manifest this update: Sat 13 Jun 2026 04:16:33 +0000
Manifest next update: Sat 20 Jun 2026 04:16:33 +0000
Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: nWZcPeWgD83gF1NrQZmaUkEdbanU+n1weFIDwSIrrIw=)
2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=)
3: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=)
4: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: Jun 13 04:16:33 2026 GMT
Not After : Jun 20 04:16:33 2026 GMT
Subject: CN=6a2cd9a2-7f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:76:fd:7b:84:49:d7:ab:ad:5c:1b:e1:8e:
b0:e8:83:4d:d8:67:e7:18:9e:d6:8d:68:bb:d1:73:
1e:00:93:8d:4f:46:0e:9a:73:fe:c6:a7:22:3b:2b:
e8:fb:1c:eb:87:12:e7:21:b6:c1:af:c0:42:4d:60:
94:9c:3d:32:82:ff:d1:cc:ab:f9:f6:9d:27:57:cf:
b8:fe:af:23:1e:06:60:1d:0f:f1:de:72:3d:8c:00:
e8:e7:30:e7:e3:9b:43:bf:02:23:61:91:43:a7:c4:
46:24:f6:2c:28:31:4c:70:fc:56:35:62:6c:40:cb:
8c:cc:b0:16:2d:d4:06:00:12:cd:86:ae:f9:ca:8d:
94:8f:3e:1a:33:6f:74:3d:29:9b:ba:66:24:35:2b:
94:ab:b5:c8:7b:56:b9:62:60:b6:4e:48:42:1a:a4:
ef:4c:54:54:17:cb:54:ca:2e:30:af:15:e3:15:39:
33:35:61:c9:9d:d8:97:8e:41:c9:b7:fb:e5:b0:84:
c0:36:e2:92:54:b9:07:72:73:81:a0:f3:42:af:1e:
24:26:bb:82:9e:1c:c1:76:e8:7a:26:df:58:e3:0b:
02:8d:59:88:69:37:07:d4:79:21:9a:44:ff:26:da:
dc:8d:47:36:58:f9:56:c0:8d:dc:0f:8f:7f:b1:4e:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:B3:DD:8B:15:19:84:61:13:A0:58:BC:DD:1A:32:09:BF:35:06
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:12:79:a2:33:73:c6:e0:b2:3e:de:db:a2:51:76:c0:b2:0c:
a5:e6:db:37:46:fc:30:a9:d9:ae:e8:3d:a7:cb:3a:21:24:e9:
b1:eb:ed:00:49:b4:e4:0e:a2:ed:3e:c2:90:31:2b:83:2e:e5:
05:5b:10:f6:17:82:1f:b5:d8:d0:8e:4b:d0:da:5e:7b:00:bf:
26:7f:df:ef:1f:ab:e9:d8:b8:b5:5b:75:7f:ae:08:a2:53:ef:
d8:6f:94:c4:1c:a3:f9:9f:5f:b6:69:ff:99:a5:7d:31:70:04:
df:41:21:16:85:8c:b1:c3:9e:ce:de:c4:6b:3a:bb:a2:5d:85:
5a:dc:ce:34:78:51:5b:4e:2e:04:38:e3:51:36:a0:e5:11:f4:
40:5e:87:d2:0f:f7:48:8c:f6:5f:35:33:05:f8:b7:50:4f:93:
68:7c:1c:c5:85:a7:c3:55:8e:c2:8f:0b:a2:f2:fc:44:ca:52:
78:23:91:dc:0f:de:e9:b0:96:b0:e0:d1:6a:c9:c1:f9:6e:5b:
75:cd:96:94:97:43:55:42:bc:9e:33:3c:e0:4e:aa:45:ee:25:
fd:54:da:96:2b:d7:46:41:e0:fe:54:92:18:c2:41:a1:31:23:
b6:42:c3:13:ec:d1:fb:85:1f:f9:ee:e2:d5:13:61:c3:d4:c3:
cb:81:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:29 2026 by rpki-client