
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: EV0/kU940LLZ8JC5BuSYcFaSMIvuHl+KsfsF6Gc7KCk=
Subject key identifier: 68:A2:C3:CA:C5:1C:98:6C:1E:84:70:E9:0E:AC:29:0C:BC:0C:D5:4E
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 02A0
Signing time: Sat 13 Jun 2026 01:35:57 +0000
Manifest this update: Sat 13 Jun 2026 01:35:57 +0000
Manifest next update: Sat 20 Jun 2026 01:35:57 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: TpcyBk733R0nIfkeIRdd3J8a9NWNWvrlcH18RhrSyRU=)
2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: FxqrozQ9bkCu/MslnOTZBZb3Iaskzn1o9qCly1GjApI=)
3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: kCW/zIL2wkLpmG5huYuN17ehvqsC22ne+nIXeNNOpgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Jun 13 01:35:57 2026 GMT
Not After : Jun 20 01:35:57 2026 GMT
Subject: CN=6a2cb3fd-ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:61:69:56:65:b5:b1:8c:91:32:a5:92:5f:
a0:c6:47:db:c0:68:54:a5:21:7f:43:16:31:d8:9f:
fc:1c:ea:6e:91:57:b3:94:92:dc:5c:bf:9d:ec:f7:
7a:93:6d:82:ac:1f:71:f6:f2:75:25:9e:a0:0e:b6:
0e:32:17:6d:42:f8:49:0b:6e:eb:42:fc:73:fc:61:
9e:dd:23:56:08:b2:a6:1d:64:04:b6:03:78:1d:7f:
9c:bb:f4:02:dc:99:5a:94:83:9a:ff:d8:8d:b6:41:
fb:50:a1:f2:55:94:21:85:4b:bb:f3:35:46:31:d3:
62:62:34:e5:7f:21:d7:0b:d4:8c:26:09:be:d2:b2:
2b:ce:a3:ad:8b:fb:41:af:54:de:7f:87:96:b8:46:
8b:61:9b:13:65:58:44:f5:af:3e:fa:77:ba:24:3c:
24:f6:24:61:c0:5b:2b:77:b9:42:b2:75:42:de:35:
d7:64:af:55:e4:55:0d:d8:d7:98:38:7d:a8:3a:e4:
77:38:e3:0c:77:2d:18:2e:52:89:b4:cf:07:a2:a8:
d4:ae:83:b3:1d:6f:91:40:8f:e0:c9:a8:28:23:68:
85:77:48:97:59:a2:0e:62:d3:c2:a8:0e:3e:31:7c:
bd:e5:52:c0:1e:f4:44:af:f6:8f:d9:e8:b2:f5:0e:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:C3:CA:C5:1C:98:6C:1E:84:70:E9:0E:AC:29:0C:BC:0C:D5:4E
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0e:35:ad:80:86:8e:90:45:52:21:1d:ea:b1:8b:d0:13:1e:
c8:b9:5f:25:38:00:a8:80:5f:27:7f:9e:8c:33:ce:cc:4d:c1:
8e:52:70:6c:ce:2e:84:a7:93:d5:2e:40:6a:11:29:39:a2:09:
75:0e:80:55:86:38:86:b4:09:76:b1:ca:6f:af:be:95:c9:ba:
03:b1:b8:3b:5f:44:80:97:98:df:f6:a9:9d:df:e8:7f:44:91:
e8:d7:40:35:f3:78:73:fc:8c:b9:c3:7c:d8:07:89:7c:38:9d:
30:d8:37:33:b6:84:b6:99:31:75:36:1f:f0:cb:3f:e2:ad:c5:
77:e3:a2:c4:33:1d:ca:d4:3a:6e:4a:c8:fc:2a:f1:98:7f:ff:
f7:fc:e5:73:8c:42:99:a1:27:4a:a1:59:54:8c:cf:77:62:13:
c7:be:aa:31:e5:bd:cb:83:f1:fa:e6:e0:5c:18:15:b7:2f:37:
b2:7a:4a:c0:69:ed:63:d5:3a:d6:f8:32:a4:ee:fb:c3:36:b6:
12:f7:8e:03:ac:30:82:44:26:16:76:ca:12:38:2f:cb:55:b3:
5d:19:a6:ba:f6:21:aa:65:4e:96:42:28:88:fb:de:85:55:79:
5a:f3:8b:d6:87:b3:13:dc:05:7e:02:8b:d6:4c:49:84:5d:1e:
a3:bd:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:15 2026 by rpki-client