
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json)
Hash identifier: Yqaulroqzs2N71zlUtfPstjTWHv4qLeVgJbrIUmcP3Q=
Subject key identifier: D8:66:ED:D0:EB:F6:2B:CA:39:42:54:94:FC:22:F3:4B:55:BB:12:F5
Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
Manifest number: 026D
Signing time: Sat 13 Jun 2026 02:04:48 +0000
Manifest this update: Sat 13 Jun 2026 02:04:48 +0000
Manifest next update: Sat 20 Jun 2026 02:04:48 +0000
Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: eexyfldQjVXpV1acnYwjuwZWzq0KLxIkBdJpV3drAJ8=)
2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: ylQZgSxpoYGOK3QMYk3CFuQ9Ou8gBsooYQ9v1rokCT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B
Validity
Not Before: Jun 13 02:04:48 2026 GMT
Not After : Jun 20 02:04:48 2026 GMT
Subject: CN=6a2cbac0-d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:53:46:d2:e7:37:1e:55:1b:eb:ce:1c:0a:
72:4b:65:28:1f:b3:10:10:47:7d:da:05:3a:7e:25:
ad:df:14:79:9b:13:83:12:f9:70:3b:26:23:a6:cc:
af:da:18:a3:8e:e4:f6:b2:6e:ab:ff:21:64:e9:3f:
b7:b4:88:88:53:7f:9d:a3:ac:09:47:e6:55:ee:91:
ee:4b:a5:8c:cd:0b:bb:7b:50:03:6c:d5:40:be:82:
33:8b:1c:17:3f:1a:c2:0c:ac:2f:f6:a4:b6:4e:5e:
33:5a:b2:e3:fa:c2:73:09:96:9c:8a:81:4e:fd:7c:
a0:15:5a:cf:0a:f4:a8:dc:76:de:12:e5:a7:d2:b9:
0f:0e:d6:5b:25:1a:8c:40:42:d7:d0:bc:0e:1f:f3:
43:10:52:7d:f0:c6:74:5f:62:ba:81:b8:e0:56:e9:
2e:52:ec:6f:b7:24:55:10:b5:fa:6f:65:d8:42:c5:
91:ff:ce:e0:d8:25:1c:99:6b:bf:a4:23:65:0f:6c:
e7:0e:6f:3b:97:fe:24:ed:2c:55:a8:75:72:59:5d:
da:fa:76:f3:d8:c9:1e:32:d5:de:93:73:4f:c6:06:
78:32:be:08:df:e0:aa:c9:f0:d4:c5:c5:25:93:cc:
de:49:b0:f1:0d:49:77:ed:c1:45:b7:a6:72:44:2d:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:ED:D0:EB:F6:2B:CA:39:42:54:94:FC:22:F3:4B:55:BB:12:F5
X509v3 Authority Key Identifier:
keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bd:1b:23:70:af:85:93:52:c3:22:42:f0:29:aa:1e:10:fc:
96:69:44:61:0c:42:38:a5:e0:04:41:3d:cb:8c:c9:45:c3:10:
fe:e2:04:a5:40:7e:6b:e0:ec:a7:1f:dc:7b:29:fc:1f:8c:7b:
e0:c9:08:b3:8f:a4:63:19:0a:f1:e3:63:9e:ab:32:b9:b8:7c:
71:3f:48:22:82:16:d3:45:95:3c:6f:d3:05:28:98:7a:04:c2:
1f:be:1f:65:09:42:76:24:b4:7e:3a:dd:0f:19:f2:e8:40:7e:
81:b6:37:e7:47:54:22:86:69:3b:99:e2:5e:bb:29:59:94:2e:
98:92:2f:81:52:34:7e:e6:2b:a7:08:80:db:67:e3:dd:7b:1b:
bf:20:a1:a5:16:3c:a6:ac:7a:cf:d1:d6:b0:29:ec:fa:50:ae:
ea:16:51:6f:f2:6b:e4:65:50:b2:21:1f:4b:1d:a6:c2:52:3c:
26:a2:14:7c:2e:1a:4d:63:c8:b7:0c:e5:51:da:30:60:60:77:
a3:0e:0d:a6:4a:df:3a:b4:3f:fd:2a:fa:2a:03:97:fa:78:4d:
07:6a:2c:7c:6e:fa:18:7b:d6:46:05:d4:8a:d6:bb:ab:aa:ea:
65:57:1e:2c:1e:94:76:3f:fe:ad:81:22:01:46:f2:fa:66:29:
dc:4f:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:57 2026 by rpki-client