
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier: h9fCDUmfgUe+H02ufPPdzesTDgjnFMAm6v7BlgNwEWk=
Subject key identifier: E8:B2:56:F3:AE:7C:06:E1:02:2B:68:CC:23:C2:5F:8D:6A:6B:C3:CC
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number: 013D
Signing time: Sat 13 Jun 2026 05:28:23 +0000
Manifest this update: Sat 13 Jun 2026 05:28:22 +0000
Manifest next update: Sat 20 Jun 2026 05:28:22 +0000
Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: Y5xUaDNIg5GmQhe2yL9Na0Egqkl/Jo3CmPu/c2n0FEg=)
2: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: am92Gr0MD4Jd5/4EoBAS/UqJDGiw/kv6GtuALWW7PUU=)
3: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: feWCSr9eRlRlJ3Q0tbYJyvoDzByu6lr0VTjjRj/M/Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Validity
Not Before: Jun 13 05:28:22 2026 GMT
Not After : Jun 20 05:28:22 2026 GMT
Subject: CN=6a2cea77-ea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:39:9e:b9:91:82:a0:39:56:6f:03:5f:23:
e9:ba:6e:75:da:fe:8b:e1:65:6f:0d:ba:b8:20:c6:
f9:12:6a:9f:c1:f6:5a:96:c7:8a:e3:54:af:ce:db:
e1:d3:db:f7:c8:6c:13:62:99:ab:a9:df:a7:3a:0c:
e6:d7:de:b9:25:6d:bb:58:fa:35:a3:26:5e:57:62:
dc:48:03:7c:93:45:75:83:08:78:90:14:af:3b:c0:
6a:02:47:82:32:04:3c:5e:10:09:ef:ca:56:20:2b:
67:79:89:9e:ae:d6:8c:f0:51:be:04:dc:de:25:4c:
bf:d8:1d:75:0d:86:04:2b:4f:fc:45:46:27:ae:4b:
84:04:2b:fc:34:58:67:01:eb:91:ca:19:0a:43:d7:
d1:5a:e6:d5:51:c4:23:99:e1:3a:54:9b:cf:c4:2f:
fd:9f:52:3a:03:6f:2d:aa:46:32:b8:d7:d2:fc:ed:
ac:1a:99:c7:ec:7f:72:d3:ac:21:43:27:53:ff:a1:
82:72:d7:34:a5:d5:7b:16:13:ab:ea:d0:ec:2f:5a:
74:f1:f2:08:db:ca:f8:5c:a8:fb:74:90:6c:8a:c8:
be:f9:ae:a8:d8:2a:f5:eb:46:4e:ba:9c:39:5c:a9:
a4:cb:ec:b1:a9:2b:77:3f:1e:57:77:e7:c4:fa:58:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:56:F3:AE:7C:06:E1:02:2B:68:CC:23:C2:5F:8D:6A:6B:C3:CC
X509v3 Authority Key Identifier:
keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:a1:cf:0b:49:98:a8:29:b8:c3:2e:d6:b0:41:ff:91:e0:
df:87:85:5b:17:27:33:08:a2:9d:c8:90:66:1e:f9:e4:07:70:
5a:6c:c8:2b:2d:00:b0:e3:1b:3d:ce:88:d4:38:14:ad:f8:7a:
b1:38:91:00:6a:9d:9e:9e:c3:98:57:67:59:be:06:c9:88:e6:
a0:a8:bb:1c:22:78:1a:14:39:65:fa:cd:d8:fb:9b:f2:fc:b5:
3f:35:41:2b:01:d8:3f:cc:66:53:44:96:9b:d9:dc:aa:24:52:
40:2c:2a:f1:37:8b:d5:f9:cd:17:77:d8:15:ed:7c:a4:70:b9:
63:1c:c2:e8:f0:67:6c:20:3b:dd:c5:f3:ea:60:6d:11:f7:3f:
81:51:12:62:1a:5a:a8:26:ae:26:41:0b:d5:b1:6e:9a:18:b5:
1e:92:58:be:80:ed:54:ea:e7:2b:e6:c2:d0:05:b6:fd:b0:ee:
eb:df:27:f3:d7:1c:6a:9e:b5:1b:3c:30:32:1d:d0:4d:a3:f7:
aa:f1:13:1c:2f:af:46:f4:f3:a4:37:47:bb:26:b8:e1:75:78:
51:03:05:72:5a:0d:6e:8d:52:d8:d7:a8:95:09:bc:50:d0:d6:
79:43:48:9c:26:c2:20:ba:9e:00:db:a3:61:9f:49:07:17:0d:
66:39:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:10 2026 by rpki-client