
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json)
Hash identifier: bjoqpvVRBrG4IIKeWnVuag6Ol6i8gsfL5rQ3qDzRSvo=
Subject key identifier: B7:F8:4E:F6:D2:15:82:C4:5C:D5:B5:CE:B2:2D:6D:4F:B6:3C:9F:47
Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Certificate serial: 1452
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
Manifest number: 1446
Signing time: Fri 12 Jun 2026 16:50:34 +0000
Manifest this update: Fri 12 Jun 2026 16:50:33 +0000
Manifest next update: Fri 19 Jun 2026 16:50:33 +0000
Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: Yv+Dd1wao34NIM7iPj/XOiDA1Yejvz4oT9Xj8ljUMhE=)
2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: AjTT+lsAXZJ+mpwW3X1wugvMUDDULjBU49kW3fhASOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5202 (0x1452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Validity
Not Before: Jun 12 16:50:33 2026 GMT
Not After : Jun 19 16:50:33 2026 GMT
Subject: CN=6a2c38da-f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:89:1e:53:b4:79:ef:66:d1:25:c4:5c:fc:
04:56:98:30:ff:44:21:02:73:3d:a8:46:6b:d9:e0:
d3:ae:db:e9:f8:ba:24:84:63:12:4c:cc:c2:c0:db:
a8:a4:93:8b:16:c2:aa:6d:41:60:2a:5a:dd:47:90:
34:dc:e7:a6:6e:1e:af:2f:7f:67:0b:89:00:88:a3:
2a:e9:33:a1:05:54:44:b8:a7:eb:11:68:60:67:43:
30:17:c8:05:0b:5f:36:a3:26:e7:a5:32:3c:83:31:
e6:cf:bb:a3:16:c1:bb:cb:2b:7b:af:19:35:c4:9d:
b6:4f:94:c5:12:bf:35:84:b2:3a:53:83:02:1d:8f:
29:4f:4f:3d:6a:5b:19:26:5b:07:77:6b:cf:55:6c:
78:86:cb:8c:f4:11:47:a8:ef:ad:3f:9a:8b:e3:36:
21:d5:21:57:5d:e4:41:fc:87:d7:ce:95:82:4f:ec:
d8:08:fe:37:01:d8:dc:9c:b4:66:48:3c:25:54:bd:
db:d9:9b:36:69:a0:08:ef:8e:b7:15:18:ff:36:30:
7c:2f:d9:a7:a3:a6:3e:50:83:1f:37:fa:67:bc:66:
c7:3a:e1:bc:a7:0e:df:ec:6a:4d:71:39:f7:8e:1d:
65:01:7d:c6:ae:70:56:9a:69:f9:60:0f:f0:1c:67:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:4E:F6:D2:15:82:C4:5C:D5:B5:CE:B2:2D:6D:4F:B6:3C:9F:47
X509v3 Authority Key Identifier:
keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:48:7b:8f:0e:2b:49:96:c6:96:86:14:2d:76:4a:12:02:a3:
2d:5e:c9:49:7b:26:b5:4d:3e:81:1d:ec:77:b3:eb:21:68:e1:
85:9c:2d:a7:64:95:3c:5a:eb:12:14:11:7a:31:b0:74:e9:f3:
f0:43:fe:9b:c9:1c:80:60:b5:74:c5:78:0f:04:17:84:71:06:
f9:39:03:a5:5b:b8:09:a6:5d:a6:3c:a1:50:3e:e3:ac:87:bb:
d2:83:86:88:ae:db:3e:d0:ec:d5:a6:5a:4b:86:d0:60:f2:07:
2b:43:83:d5:f3:57:fc:2f:e7:25:31:83:31:4a:6f:fa:33:e8:
03:4f:a1:18:a6:a1:23:b9:b1:8b:4e:64:0a:5b:50:e9:84:d3:
56:9d:0b:a4:de:16:89:00:58:d0:4e:16:35:0b:f5:fa:77:0c:
cf:8d:66:67:f6:b7:66:83:18:df:0b:d1:ca:21:fc:52:fa:65:
00:48:4b:57:8d:f1:a1:70:51:ef:a2:99:03:8f:f9:2e:f4:a5:
76:c6:f7:a8:4c:bf:de:16:67:74:10:f8:e6:24:4c:5e:f6:86:
36:9c:48:c3:2d:72:e1:9d:b4:7b:fb:d8:fa:0b:eb:45:7f:71:
17:c1:b4:6b:ee:21:84:2b:92:38:40:e5:80:b1:a4:7e:e5:7c:
6a:62:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:18 2026 by rpki-client