
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json)
Hash identifier: EGjgMRZefWY2+kVP1UUviwVUGAOBIUxFoSJS9kyv36A=
Subject key identifier: 9A:0F:8F:A1:B8:0D:4B:00:83:BD:4B:E3:2C:36:5B:62:57:B5:4E:10
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
Manifest number: CE
Signing time: Thu 11 Jun 2026 09:05:14 +0000
Manifest this update: Thu 11 Jun 2026 09:05:13 +0000
Manifest next update: Thu 18 Jun 2026 09:05:13 +0000
Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: /uovevNI2mKRoT2ueK/0oUV6XQEzr55SDGnksbPeNQw=)
2: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: KPvqeYEjrP3rW7z9OSGAJVN9ZK2zCwOeNm8vtT/hE1E=)
3: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: GMRoxaiJwQd4I9blwc313RSuAiLyK99JqZt/L1LzUaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Validity
Not Before: Jun 11 09:05:13 2026 GMT
Not After : Jun 18 09:05:13 2026 GMT
Subject: CN=6a2a7a49-0a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:b6:99:3b:00:6c:3f:cf:05:25:86:94:fa:
b4:58:b7:e3:af:29:90:c7:4e:bd:71:68:fc:c4:ce:
b4:07:fa:a9:07:01:df:b4:03:56:39:c7:f0:9f:8f:
29:84:1c:dd:cc:37:f4:36:9c:9c:1b:91:66:4f:d4:
12:21:e7:dd:5d:12:7f:be:e4:9b:4e:a9:52:36:85:
04:06:67:b5:84:49:1f:87:87:36:c2:27:9a:d9:f1:
09:82:7e:03:de:40:d3:58:c5:40:b9:e0:48:99:7f:
ec:1d:93:9a:83:d3:10:e3:a9:ad:47:a9:da:47:c1:
20:d0:b5:70:5c:5a:07:8b:fa:b6:f9:92:97:57:a5:
9a:4f:e0:0f:7b:5b:8e:54:a0:6f:d4:90:fa:49:70:
8f:39:ed:a9:6c:68:4a:83:44:d6:62:a2:ff:b8:f7:
0b:9b:41:f8:03:4c:d3:a7:e2:01:88:2e:dc:89:ab:
1e:93:bc:6c:8d:8f:1c:14:19:da:6c:bb:53:42:c2:
5d:5d:55:96:30:3d:13:c3:28:78:a7:52:32:9c:20:
26:47:9f:0c:b9:af:b7:7a:0f:7f:cd:40:d6:76:69:
3d:8a:1e:f2:fb:32:67:5b:cd:fb:e6:e4:86:64:78:
32:2b:92:c4:d9:47:f0:d5:3d:14:dd:dd:96:34:bd:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0F:8F:A1:B8:0D:4B:00:83:BD:4B:E3:2C:36:5B:62:57:B5:4E:10
X509v3 Authority Key Identifier:
keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:b3:34:59:c0:17:53:22:6c:f4:88:b6:75:55:95:97:82:80:
c7:f1:28:40:15:6c:73:d3:06:9a:56:63:fd:85:9b:d9:e4:ce:
de:8f:2d:4b:3e:49:7e:90:52:0d:cd:9c:29:86:15:cd:cc:ef:
da:b5:10:3e:de:f2:11:d5:9b:43:b4:dd:c7:aa:d0:07:49:7a:
de:d9:90:33:7d:35:d3:87:41:f8:47:50:77:8b:f9:ab:80:4b:
b5:9d:96:b9:1b:78:88:92:4e:d5:4d:1a:de:fb:87:ca:7e:66:
9b:65:ed:ce:dd:32:0d:ff:05:87:b7:d0:1a:35:23:b0:71:ed:
34:f1:b1:45:0b:4a:db:58:eb:b4:62:c6:22:40:cd:de:0e:5b:
d0:f0:7d:92:30:cd:20:88:d1:a4:45:4e:38:95:d5:6f:32:15:
cd:86:f6:c9:85:92:84:ab:c1:7b:a0:8f:04:6f:ab:f6:bc:7b:
9b:31:ee:48:0c:48:7d:28:6b:32:ab:e7:97:e7:9e:45:e9:07:
8b:c0:3d:e9:60:df:5e:a2:12:ad:9a:99:ed:14:af:d1:25:47:
56:01:7b:bb:36:66:cf:7e:aa:5e:e0:59:c1:79:ee:5f:d5:9d:
12:5e:e7:18:4c:be:cc:1a:b7:18:e3:ff:ce:b9:71:3f:9a:4d:
01:f9:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:07 2026 by rpki-client