
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json)
Hash identifier: OWXrcM2pg36Gh4qmKU7O3iyrjWHXnZEssFH9Eyr/0W8=
Subject key identifier: 98:05:3F:1E:C5:AC:37:B8:DB:6B:DC:5D:99:4A:25:94:80:D5:67:BB
Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
Manifest number: 01F0
Signing time: Sat 13 Jun 2026 03:27:45 +0000
Manifest this update: Sat 13 Jun 2026 03:27:44 +0000
Manifest next update: Sat 20 Jun 2026 03:27:44 +0000
Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: C3P6kUL8SjRcweE6QqxOWU9HGIPluh831F9LdCAGT6o=)
2: 27A66CC4335811F18709AA0FCA833773.roa (hash: pPUHKA5s9wq04L2qfb/B2EY59WS05X4PfzFkdep1N34=)
3: E5196DA6335811F1BC79FB1BCA833773.roa (hash: vyYp7IA/5MNA4gMbec/CoUCTSiktnAR4FwpLUhRjRvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Validity
Not Before: Jun 13 03:27:44 2026 GMT
Not After : Jun 20 03:27:44 2026 GMT
Subject: CN=6a2cce31-f2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:8c:81:3d:c7:03:74:32:5a:72:ba:b7:08:
8b:50:67:7d:58:e7:d5:12:96:2e:a5:69:32:db:bb:
bb:56:a4:63:8f:a7:fb:a7:fa:7d:3d:64:e8:0a:20:
40:98:35:9f:e2:20:78:51:1f:c2:71:03:4d:54:73:
cd:e7:37:ab:e4:eb:17:25:5a:11:c5:97:bc:46:3e:
72:95:79:6a:6d:8b:69:71:7d:65:ab:fb:f3:64:8f:
6b:d4:d7:cf:97:fb:03:4a:95:ab:1a:f8:1c:4d:80:
9c:48:56:ae:82:d1:79:d4:44:91:4f:d1:bf:5d:d7:
73:7c:5a:94:11:a5:07:ff:76:f5:47:04:aa:9f:03:
52:29:53:8f:7c:9a:01:aa:81:ed:c4:21:37:fc:59:
ac:5a:78:c2:88:ba:0a:48:5d:23:5f:c5:5b:53:c7:
cc:9c:a8:2f:87:b7:bd:fb:06:2c:00:c6:f2:b4:12:
60:6e:6c:07:1b:51:25:fb:5d:60:fe:37:48:e0:42:
f3:4e:6c:b8:c2:a9:d9:e4:b3:02:bb:b5:09:b6:4d:
b5:69:46:71:32:d6:3f:4d:34:3f:c2:61:50:3d:d1:
5e:16:a7:0f:58:57:19:e5:1d:c0:29:1c:de:56:a9:
77:a4:d7:23:f6:72:0f:41:ae:24:f4:0a:83:f2:17:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:3F:1E:C5:AC:37:B8:DB:6B:DC:5D:99:4A:25:94:80:D5:67:BB
X509v3 Authority Key Identifier:
keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:79:62:5b:d3:ca:fd:a4:2c:be:2f:4a:aa:e8:ed:95:1d:
83:7f:16:86:ec:e3:c3:f9:9a:10:af:9c:7b:f5:79:08:f5:42:
39:bc:9a:94:6d:bb:19:46:37:2a:79:f3:88:49:a0:92:3e:5f:
a4:77:53:94:fe:a9:70:a3:cf:5d:3b:0e:18:aa:08:85:f0:0c:
7c:a5:12:be:1d:83:8e:60:c6:04:de:95:00:47:dd:d0:af:32:
e7:3d:eb:58:e3:43:2e:a6:34:18:c1:6d:7a:fb:ae:5a:e1:91:
30:a3:25:43:78:a2:42:11:90:55:9d:a9:1a:f2:d6:54:18:39:
33:8d:26:3f:70:cb:6c:6b:ae:e5:81:68:02:04:9e:80:00:2a:
fd:51:07:ce:c6:3b:d9:84:64:ce:5a:54:d2:6f:d8:d1:cf:1e:
86:8e:cf:0a:f0:1e:66:a1:21:3c:71:f7:d1:57:47:1c:ac:5b:
c2:50:f1:e4:08:24:16:7d:4c:f5:17:90:85:02:a8:1e:e5:00:
59:8c:d9:ee:4e:a4:ca:1a:00:a7:13:2f:31:a2:03:fa:81:e6:
8f:ac:b9:5d:09:6b:1d:13:39:05:a7:15:28:c8:c0:2a:79:d3:
3e:ff:a0:88:84:08:15:1a:e9:35:6a:c0:8b:fb:77:bf:52:17:
f4:8a:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:11:37 2026 by rpki-client