
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
File: axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json)
Hash identifier: DNvpVORWTXNNYq2kqkjyqGxwsI/KZuf24ePsXI+hBa8=
Subject key identifier: D6:5B:86:BA:A7:E2:95:DB:56:14:98:F4:C6:02:1C:B6:7B:00:02:8C
Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47
Certificate issuer: /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
Manifest number: 82
Signing time: Thu 11 Jun 2026 09:56:15 +0000
Manifest this update: Thu 11 Jun 2026 09:56:15 +0000
Manifest next update: Thu 18 Jun 2026 09:56:15 +0000
Files and hashes: 1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: tym95NmU3z35RRb3bUTzDFkf74ItWjWLh7xO36BulS4=)
2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: gEDKwshdmBsC3CB4+s8rKksc9ZXswjsTOQAKy74q070=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl
rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
Validity
Not Before: Jun 11 09:56:15 2026 GMT
Not After : Jun 18 09:56:15 2026 GMT
Subject: CN=6a2a863f-0447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:05:7f:ef:91:a7:e8:ec:f0:7b:74:b4:94:fb:
06:48:62:e9:57:57:4c:66:f9:0c:84:43:39:91:d1:
a4:4c:4c:d1:9a:d0:ec:25:f4:5c:60:49:91:a5:1f:
52:34:86:90:07:67:33:44:cc:a9:04:da:70:53:94:
f1:17:68:87:5e:00:e8:f2:b7:78:ad:7e:f3:db:81:
70:f8:a0:45:d0:a5:a3:a5:66:28:00:91:57:d6:42:
a2:f2:88:4f:06:60:24:e2:25:36:97:9b:c1:20:af:
e0:52:8a:93:45:ae:6c:35:7f:bd:5f:f4:3d:1e:5f:
01:c0:dc:1e:bb:b7:26:6e:c7:e5:66:e5:b7:58:d8:
f7:6e:52:79:d4:30:64:ed:56:60:7a:5a:12:c3:45:
9e:89:24:d4:69:fb:35:85:53:d8:13:4d:20:9d:29:
b1:d4:de:47:03:03:f4:77:3c:b2:02:61:82:e1:89:
49:49:ad:0c:3e:e7:bd:ea:06:ef:02:6b:c7:b8:1b:
c8:0b:9a:5a:00:c8:63:e4:df:ba:50:a3:9e:79:31:
a4:bb:fe:77:46:ea:bf:01:0f:d1:0a:0a:b5:46:e6:
51:ed:8a:25:23:ce:80:bb:5c:bb:51:75:0d:87:3e:
9b:1b:7d:50:93:d4:50:46:07:97:70:da:fc:61:07:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5B:86:BA:A7:E2:95:DB:56:14:98:F4:C6:02:1C:B6:7B:00:02:8C
X509v3 Authority Key Identifier:
keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:12:4a:37:55:9c:58:59:a8:7d:2f:03:87:d8:84:90:5e:
86:4f:77:1b:25:30:77:2a:37:3a:4d:f9:43:15:5b:ac:3b:2e:
b9:f8:ca:ca:46:93:0f:ad:1d:e7:ee:3f:ff:4d:19:27:e8:e1:
58:e6:67:ac:f0:00:a6:4f:9f:d3:86:c1:9f:91:07:4c:fc:ea:
16:22:59:f0:77:08:82:af:9b:79:a9:da:29:29:07:f7:55:36:
34:19:0a:47:71:f5:50:60:58:13:de:5d:d7:bf:6d:0a:41:27:
e9:81:52:53:39:55:b5:f6:6e:81:f5:05:72:e0:43:5d:6a:60:
d4:65:ad:ce:f1:67:c2:12:ad:cf:fa:c7:ef:ef:3f:4d:c3:36:
a6:2c:d7:a9:64:7a:ce:a5:7d:6e:b0:b7:bd:8a:0d:16:e7:26:
f2:68:6e:96:cd:56:21:53:41:b1:e6:98:44:69:6f:73:62:23:
16:70:b8:6a:d9:47:35:eb:1a:48:6c:1f:5c:5a:ac:6a:b2:b2:
22:c8:c0:d1:c9:37:37:77:91:75:b7:27:03:ff:25:07:3e:53:
fb:19:a2:1b:55:90:75:15:46:8d:ca:98:b5:d2:80:22:56:23:
67:07:b3:da:16:00:f7:6c:5f:1a:b1:33:11:54:c4:f7:83:89:
a1:d4:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:46 2026 by rpki-client