
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
File: maB2Nu64AHCDMDGWpYxBvsxoj4A.mft (raw, json)
Hash identifier: 4/uF0W9JXDY8LbYkfkQ17EERV8acN61yXreEsODSP7I=
Subject key identifier: 59:E3:AA:7F:D1:3B:B5:4A:79:0E:43:BB:B9:F0:25:BC:9D:40:A7:61
Authority key identifier: 99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
Certificate issuer: /CN=A91EEC3B/serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Certificate serial: 0C9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
Manifest number: 2E96
Signing time: Fri 12 Jun 2026 16:21:05 +0000
Manifest this update: Fri 12 Jun 2026 16:21:05 +0000
Manifest next update: Fri 19 Jun 2026 16:21:05 +0000
Files and hashes: 1: maB2Nu64AHCDMDGWpYxBvsxoj4A.crl (hash: fIUK5YIOAqv+nKN98+rWwuSRsZfT5w2A/qcIyirycHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEC3B, serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Validity
Not Before: Jun 12 16:21:05 2026 GMT
Not After : Jun 19 16:21:05 2026 GMT
Subject: CN=6a2c31f1-40db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:49:8d:99:36:e4:e3:c1:dc:1e:42:bb:d3:
4f:e0:4f:3c:c4:0b:9b:02:8c:57:b0:5e:41:fd:e8:
fd:a4:9e:83:a8:ab:3e:67:2e:fc:85:22:df:9c:a4:
e0:e1:6c:00:a7:0f:79:79:8e:01:46:83:86:d3:b2:
0f:72:da:4c:48:8a:60:9c:54:2d:3a:90:33:0f:6a:
d9:63:cf:6b:0b:9a:ba:3a:f5:b8:3d:c1:54:c2:45:
fe:ba:1f:77:7f:94:16:bc:76:c9:5f:8b:70:a7:b0:
61:d3:03:bb:9a:36:75:e3:19:7f:93:ca:c8:b2:6b:
24:31:14:ca:17:aa:e9:8a:40:ba:95:ed:5f:b5:f4:
10:b3:c5:6f:7a:e8:2e:ad:6b:84:41:10:5e:1c:f0:
fc:b8:34:82:f3:3f:f5:f2:ca:05:a3:a9:f8:22:a6:
07:80:57:b8:ce:92:b1:52:f4:bb:f2:0c:9b:ba:11:
76:1a:05:87:fa:c5:5e:7a:4a:56:68:1d:3a:8b:f5:
9a:a0:28:80:89:e1:84:bd:68:38:54:99:9f:b3:09:
79:48:75:96:70:bd:4e:90:e1:86:c6:39:c0:ca:e7:
65:e3:e7:38:b3:8b:67:04:5c:72:97:17:7c:80:23:
67:ef:a2:3c:8c:2e:d9:f3:51:18:f7:c2:52:fc:70:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:AA:7F:D1:3B:B5:4A:79:0E:43:BB:B9:F0:25:BC:9D:40:A7:61
X509v3 Authority Key Identifier:
keyid:99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:3a:37:1b:e8:29:9d:af:f5:83:a9:4c:56:11:7d:c2:bf:ad:
8e:88:b2:b4:80:ef:54:ac:47:22:a2:08:5f:43:fb:fb:b4:6b:
e1:fb:0d:bc:6d:e1:5d:98:f0:f4:bc:a4:eb:ec:05:9c:5e:27:
c9:47:fe:a3:02:4a:64:8e:0d:9f:87:60:d6:6e:b6:f5:d7:0a:
f7:78:f2:ad:95:43:9d:96:79:8c:e1:d4:94:e2:f1:49:c8:82:
a3:85:cd:5c:02:4e:82:12:6b:c3:5a:fb:92:3e:66:e3:15:d0:
a2:a2:8d:fc:c6:f6:f7:92:75:82:a0:05:64:40:f0:2b:f6:d5:
20:34:42:26:58:89:d8:25:c6:fe:46:fa:74:be:41:59:58:c2:
9a:e0:9f:cf:d7:bd:1a:7f:4b:d5:f4:c2:f5:6d:6e:56:a0:dc:
2e:f9:51:f6:5f:56:a4:b7:5e:1a:d3:7b:a4:c6:45:08:a2:a0:
8b:20:93:c8:68:7b:c6:90:2e:7b:dc:39:0c:52:1d:54:48:c5:
f8:87:c2:f0:e8:bb:7c:91:f0:38:c9:8e:42:01:1c:33:ad:a0:
eb:6c:75:c3:52:35:14:7d:13:0c:8f:bf:eb:33:e1:06:15:ce:
54:e1:d6:ca:ce:d9:4b:dd:d2:6e:b9:03:3e:3a:8c:24:eb:57:
99:45:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:28 2026 by rpki-client