
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json)
Hash identifier: X0Z5YGlnTIXRl3HY736fDJSFG7X8Bw93fXtdZayGA+E=
Subject key identifier: 0C:5A:9A:80:D7:9C:61:CE:B3:32:00:35:80:D5:FB:CE:E2:53:9D:2E
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
Manifest number: 06DF
Signing time: Sat 13 Jun 2026 00:05:52 +0000
Manifest this update: Sat 13 Jun 2026 00:05:52 +0000
Manifest next update: Sat 20 Jun 2026 00:05:52 +0000
Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: aAWR1wp05Pc3UQtYzwutW84KPlxNqPabo1kh+CD+Y9Y=)
2: C7492CAEFB5D11F0B51531C0496F56BC.roa (hash: Cu6/ZN4pLVVwgFBXhJX48sJtoPNZuRZAmRy+tg9HKHM=)
3: D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (hash: Wx61e/Tv8ZK5H7v83kwm5JdbJjGGNDdnnszpCWgUdM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Jun 13 00:05:52 2026 GMT
Not After : Jun 20 00:05:52 2026 GMT
Subject: CN=6a2c9ee0-ab21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:91:92:60:54:91:85:12:de:f7:2c:70:f8:
8e:bd:2c:cf:b2:f9:62:89:5f:09:ec:43:40:85:d3:
77:4e:ae:9c:e9:ba:d7:a2:2e:e9:4d:74:b9:e7:2a:
6c:28:33:f3:b4:9e:4f:6d:94:55:4b:79:fa:ac:d4:
d9:e6:4b:05:45:fe:22:ca:37:13:25:76:a7:aa:1e:
83:c9:3a:27:44:3d:5a:17:19:33:5f:9f:4f:4d:f2:
f1:52:c6:ef:81:9c:82:6d:aa:e4:9a:80:52:7b:28:
8b:3d:3e:27:38:98:ec:1b:fd:a9:39:ad:2e:31:94:
06:ff:46:f5:67:29:47:bc:7d:53:93:82:0d:92:54:
d6:22:3a:9d:38:bb:79:43:9b:f2:9c:d3:bb:bf:bb:
20:0c:12:79:5c:b1:25:cc:64:a0:c4:de:ec:5c:5f:
57:f7:8f:00:22:27:36:3d:e0:f9:9b:52:16:b9:74:
a3:20:ee:f6:e2:f1:84:49:ae:85:4d:77:be:09:02:
48:44:3b:b8:12:81:19:82:60:46:cc:7b:3a:37:6e:
81:a6:7e:c9:bb:27:d1:b9:0a:32:9b:7b:ca:06:fd:
ef:59:cb:35:df:ae:03:13:e8:1c:cf:c5:ee:0d:45:
2f:97:3c:4a:f2:86:48:4a:40:be:8c:f1:25:8f:f7:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:9A:80:D7:9C:61:CE:B3:32:00:35:80:D5:FB:CE:E2:53:9D:2E
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1a:13:9e:54:c7:b9:ab:e7:be:8d:45:f8:94:5d:61:a8:2e:
a0:bf:48:da:b2:ff:f7:99:c6:98:ec:46:4c:45:0e:df:1a:a8:
74:4f:59:a5:0d:38:db:a6:de:3e:54:28:0f:09:cb:60:9b:e0:
c9:47:89:20:ca:ca:04:bb:1a:40:6d:eb:35:c3:5d:d0:23:d7:
e7:be:86:7f:63:ce:ee:b2:f7:40:16:3c:01:58:9f:ef:a5:e6:
12:86:4f:70:57:d0:c1:33:07:e3:e6:c2:20:ce:54:ae:2e:63:
fc:0d:fd:25:43:b8:f1:0f:2a:1c:0c:5c:90:a1:55:58:b6:c2:
cd:1d:30:7f:e4:f3:cc:d6:8d:05:35:c8:8f:fb:85:bc:ed:2a:
69:83:78:1e:6e:75:ae:c3:82:f5:60:2e:24:76:83:65:2a:42:
30:68:23:d2:83:2e:1c:74:88:41:fc:17:4a:82:94:28:78:c7:
17:7e:03:7f:ea:bc:70:61:63:75:d1:24:ed:32:19:e0:80:cc:
86:8f:bc:92:fc:10:26:01:bf:fa:04:d8:fc:65:89:45:c6:fc:
e6:2a:f5:6e:98:fa:e6:79:c7:4e:78:90:59:50:20:c8:e7:0a:
1f:23:16:35:6c:59:cf:eb:93:3a:44:c8:e1:78:3d:e5:a8:22:
0a:70:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:19 2026 by rpki-client