
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json)
Hash identifier: lapjX3fXIR1BQaCmLx4ub2OOD88dM/x190avzs1qnnQ=
Subject key identifier: A0:C6:D4:14:B0:02:1F:E2:9A:29:C2:44:D3:C7:54:17:02:9A:96:3E
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
Manifest number: 6B
Signing time: Thu 11 Jun 2026 10:12:04 +0000
Manifest this update: Thu 11 Jun 2026 10:12:04 +0000
Manifest next update: Thu 18 Jun 2026 10:12:04 +0000
Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: mWTczrXv17SfnIRisbiHZNmbQDD7Deqk0HsDICTRfY0=)
2: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: MKqJq2FumoKTrTwmyrH8ChMilgYTt/EL/h7r2rH2ApY=)
3: 0853E998C45711F080167D38C4F9AE02.roa (hash: q06BkXWxrAKL8dfnFJAQ0hKBleWRtfFz0FU/k9ATOTo=)
4: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: 77Ti4coJG6upOfWGSXiHZBgxkM1mBFKcvk6A/BW0GOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Validity
Not Before: Jun 11 10:12:04 2026 GMT
Not After : Jun 18 10:12:04 2026 GMT
Subject: CN=6a2a89f4-ff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:9e:b1:90:49:39:85:12:14:33:43:27:01:
2d:bf:8b:db:04:9a:52:58:54:3e:31:ae:11:0a:85:
6d:d1:44:b0:3b:e7:e0:55:72:fe:65:bc:6d:bb:d7:
f5:2a:60:ef:c1:64:81:e2:d3:bc:7c:ac:76:69:d7:
70:02:fd:53:1b:94:30:34:69:28:61:d2:db:43:f0:
7d:1b:68:d5:6b:2a:65:97:d8:19:d3:4e:8b:9c:68:
59:a4:0f:8e:c2:28:05:f8:1e:87:a0:79:85:56:57:
94:9a:cf:83:db:3c:13:13:d9:67:97:99:69:32:b3:
82:5b:93:e0:8c:71:0c:5e:fd:25:c5:05:30:a3:e5:
e6:d3:5e:21:20:29:06:44:97:5c:c4:d5:75:7b:8b:
6e:51:92:06:7c:77:a4:6e:cd:1e:19:31:ad:7b:1d:
e2:4f:e6:6c:60:fa:c3:60:7c:30:a9:88:94:bb:76:
0f:52:08:22:cc:75:11:7b:cc:f4:50:1d:6a:b4:70:
77:52:e4:9c:04:d4:23:b8:7d:70:db:9c:4e:36:ef:
01:45:74:3f:3e:72:7e:22:4b:b0:2f:7d:e5:47:e5:
0f:c1:3d:48:5b:83:9b:f6:45:d6:fb:6b:ef:20:cb:
1c:e4:6d:d2:27:48:9f:ae:25:0e:df:eb:17:84:88:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:D4:14:B0:02:1F:E2:9A:29:C2:44:D3:C7:54:17:02:9A:96:3E
X509v3 Authority Key Identifier:
keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cf:a2:36:e7:0b:4e:d7:44:9b:c3:b0:ec:11:b9:bf:0d:db:
e7:cb:16:39:2c:68:1b:4a:db:2e:fc:b8:9a:bc:8e:0e:b1:af:
cc:90:84:4f:df:a9:1b:9f:33:c8:30:72:b2:42:77:ef:cf:15:
0b:ba:59:d7:92:c0:f7:bc:05:4b:51:93:3f:6a:43:2c:64:67:
3a:9c:96:5f:0e:34:e1:28:48:61:51:34:b3:5d:12:b0:82:86:
4a:4a:ea:70:96:78:29:a7:38:36:73:ef:de:62:d9:7b:11:5b:
cf:01:4b:0b:b9:d7:9d:14:f5:9b:6a:ff:27:33:9a:80:a5:e4:
18:51:d9:b5:35:51:f5:d7:04:ec:f2:52:2e:3e:ea:88:b6:fc:
25:11:a4:a2:6c:e8:3a:94:7e:01:97:c3:51:ac:23:1b:f6:8a:
2e:18:f2:c1:a9:64:75:29:d5:89:ff:0b:86:a7:11:65:c7:30:
2d:e6:5d:f0:27:e3:71:54:22:7e:3f:20:2d:cb:4a:2e:21:e7:
08:c2:5b:03:0d:7f:89:ee:e6:7c:2b:2c:a2:5b:6f:e6:e0:ab:
c2:57:05:31:5a:b4:dc:b6:eb:97:3b:16:2c:d9:42:f6:bb:b0:
e9:00:c5:cd:2c:b0:a0:f7:e9:5c:e7:0c:69:92:96:94:9d:36:
14:45:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:53 2026 by rpki-client