
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier: xdP/9Gu1AyvnAzd4EtMkcKkvngU3BPDgdzERA9g6QQQ=
Subject key identifier: 55:A5:7C:99:CC:25:B4:35:DA:6D:7C:4D:3E:94:CD:76:49:CC:80:AF
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 094A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number: 08ED
Signing time: Fri 12 Jun 2026 20:30:15 +0000
Manifest this update: Fri 12 Jun 2026 20:30:15 +0000
Manifest next update: Fri 19 Jun 2026 20:30:15 +0000
Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: Qs/pjuUzKALRNeRwuTda5Hv4majVtZSokiTq3NPHMMQ=)
2: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
5: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
6: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
7: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
8: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Jun 12 20:30:15 2026 GMT
Not After : Jun 19 20:30:15 2026 GMT
Subject: CN=6a2c6c57-9f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:42:84:5d:07:20:84:6f:fd:4e:14:9c:c1:
e2:9a:dd:7c:e9:b1:f7:d0:f9:85:a6:1f:11:0b:67:
6f:54:4e:42:5d:84:5a:04:6a:5c:0e:d3:3a:c5:a6:
46:e7:be:e3:ca:e7:b2:5f:47:70:b8:45:ab:c5:6c:
03:f1:64:2b:00:89:88:c7:71:8e:b1:61:7a:b2:ce:
a7:7a:43:2f:00:6a:64:a2:13:a7:f1:bc:c4:af:21:
2e:7d:48:60:1b:0c:5c:3f:da:ff:9d:ac:45:57:e0:
57:e8:3b:0f:64:90:74:68:e9:ae:f5:9a:35:ce:62:
28:e4:92:fa:4e:d6:70:4f:48:2c:b8:b3:3f:af:01:
86:4f:91:11:ab:5a:cc:2c:4e:2a:94:f4:41:39:0f:
3b:ab:e4:a3:38:b6:6f:70:0d:bf:b4:29:d5:27:33:
21:dd:dd:a9:79:c9:6d:f1:20:43:98:28:8f:8f:61:
e3:0d:6a:93:33:55:85:5d:dd:5c:2e:d7:ac:07:33:
86:7a:64:29:a1:67:b8:dc:51:cf:1d:17:ac:10:5b:
fe:b2:85:2a:05:46:15:57:b7:43:2a:12:4d:36:0f:
a3:95:89:ef:b2:82:ef:9e:94:1a:f1:2a:04:aa:7c:
cd:36:39:bb:78:ff:31:cb:35:41:d7:41:ea:a7:1d:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:7C:99:CC:25:B4:35:DA:6D:7C:4D:3E:94:CD:76:49:CC:80:AF
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:33:ac:08:5a:d4:88:b3:6c:eb:be:f3:ef:6b:9f:7d:d8:ef:
35:ae:8a:23:88:19:d9:9a:e3:71:31:3e:1b:b1:ab:08:f9:2e:
c3:d7:43:74:7c:45:5a:b3:54:b5:02:fc:d5:88:f9:2a:e2:a7:
a8:67:96:76:51:5f:95:23:e3:35:71:0d:d2:6a:23:50:ac:a9:
74:37:99:12:d9:c6:df:81:45:67:d8:6b:46:e2:13:46:04:f3:
73:48:36:54:d5:a8:0e:9b:96:f8:f1:6c:6b:47:68:82:10:52:
19:64:11:bf:80:0e:71:71:27:25:28:8a:0f:93:f2:75:a9:4a:
3a:fa:62:62:21:89:a1:f8:79:32:9b:29:08:16:2c:f1:62:cc:
cf:e7:43:7f:b8:3b:b7:03:75:5c:13:d7:b7:35:5e:d4:64:50:
b3:b6:f7:43:10:d5:e4:85:20:7b:d9:9a:dc:8a:10:2f:0c:36:
93:08:76:80:74:25:e3:05:5d:73:b2:f1:3e:00:40:97:60:f1:
76:e9:a6:22:87:18:9f:0b:10:c5:d2:d2:37:d8:2d:58:ce:43:
7d:a8:ad:1b:c3:3e:c7:c6:be:8e:15:82:66:d2:cc:c9:71:ff:
a2:56:74:2f:e3:2c:7d:d9:70:9a:fd:ca:0a:ab:91:db:24:63:
0e:3a:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:36 2026 by rpki-client