
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json)
Hash identifier: hgYNSoGT9azCz45XlIsghg8Ci7IWDJDnkJFJqyTnc+o=
Subject key identifier: 00:4D:08:89:53:28:5B:60:8C:00:82:5F:D1:C5:7E:62:DA:B9:D5:38
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial: 3550
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
Manifest number: 354F
Signing time: Fri 12 Jun 2026 14:32:20 +0000
Manifest this update: Fri 12 Jun 2026 14:32:19 +0000
Manifest next update: Fri 19 Jun 2026 14:32:19 +0000
Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: uxxe7eX8xaI0mRCHLpfXG51udMWSrqjoqeZPTtQLO3s=)
2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13648 (0x3550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Validity
Not Before: Jun 12 14:32:19 2026 GMT
Not After : Jun 19 14:32:19 2026 GMT
Subject: CN=6a2c1873-46e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:9b:b7:65:64:19:06:4d:50:62:83:13:ed:
69:98:49:42:fd:55:d7:ac:50:4c:b0:96:a5:ba:c3:
41:72:49:ad:f3:c8:03:82:20:a0:3f:2a:d9:20:e2:
6e:06:54:f2:75:ea:9c:75:b8:e0:47:ef:c0:e7:29:
46:26:d5:8a:7e:57:54:90:11:e6:2a:09:ef:71:a6:
31:41:6e:99:4f:73:38:d9:b9:1f:b6:12:ed:71:62:
61:66:ac:fd:7e:3a:3d:47:f2:7b:fa:85:bd:fb:17:
9e:32:10:14:be:06:ed:d9:4b:17:10:f7:f4:69:e6:
b3:d4:7d:99:39:83:34:02:2f:51:ee:65:b7:83:ba:
6d:73:0c:34:b2:d3:05:4d:1f:73:ec:e4:fb:17:7c:
0f:6b:f6:6b:7c:70:41:63:7d:92:65:8f:df:13:c8:
7f:d0:4b:f0:1e:af:f9:e7:e0:31:74:29:65:7f:2a:
73:d5:97:d1:e8:d6:8c:b4:08:48:dd:0c:6f:b5:1f:
48:48:35:9a:81:15:66:ac:99:6c:65:96:4d:87:a7:
d1:1c:bf:89:b3:c1:34:89:c6:87:c9:c6:d2:b5:df:
1d:5c:36:87:ac:8c:f2:d0:d5:ee:66:ff:51:bd:39:
ec:32:90:14:0f:69:8a:8a:58:d5:9f:0c:1e:16:eb:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4D:08:89:53:28:5B:60:8C:00:82:5F:D1:C5:7E:62:DA:B9:D5:38
X509v3 Authority Key Identifier:
keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:23:7a:8c:19:16:80:89:65:69:92:cd:2f:0d:dd:68:9e:6f:
02:14:2d:bd:52:33:87:55:bc:00:63:2b:8a:9a:77:c5:5a:bd:
96:4b:73:51:f8:a5:7d:36:78:9d:1e:aa:5c:f0:0a:a6:e4:7d:
83:5e:1f:69:39:1a:ec:fb:5c:21:9f:c9:80:8e:62:56:6d:0c:
94:66:ff:b3:8e:53:93:80:bb:c8:b1:a1:db:66:4e:cd:91:7f:
7a:3c:94:f5:d7:ae:c0:22:a5:b5:81:fa:b0:82:df:3b:d5:f9:
73:11:c3:d5:95:3c:f0:f0:78:82:f0:19:2b:b3:e4:be:be:b5:
e5:fd:0c:a2:79:f8:21:79:cb:0a:ca:ef:2e:29:98:c9:15:31:
2d:01:73:9b:27:1d:b1:c5:58:c5:23:36:77:57:c4:0d:43:3c:
1e:9d:36:1f:43:d5:e4:f1:88:c6:1a:89:f3:ce:98:f8:31:bc:
ad:f9:ed:cc:c1:c4:e4:7a:84:2b:ec:fe:87:44:c8:a3:e1:34:
4c:25:1c:6e:5b:2c:04:c3:a5:ae:a7:57:ee:1b:bd:1c:0e:35:
6c:ea:6e:ec:48:72:fa:fe:d5:94:78:e9:e2:77:8e:33:8a:48:
8c:86:f6:67:3c:74:e7:21:58:16:0a:a6:b7:be:97:7a:45:8d:
c3:98:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:32 2026 by rpki-client