
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json)
Hash identifier: y/AIxhUDQjdQmyTRvZTVfObaPF8rPni1DVWe7bw3WpE=
Subject key identifier: 5C:C0:A7:34:37:D1:1E:64:F0:7B:47:47:10:5E:AD:04:AF:24:DF:89
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
Manifest number: C7
Signing time: Sat 13 Jun 2026 06:58:15 +0000
Manifest this update: Sat 13 Jun 2026 06:58:15 +0000
Manifest next update: Sat 20 Jun 2026 06:58:15 +0000
Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: TqgP+w2Jmu+vFXffPD/5FZ7v3VWfNbA+2mB3vdRvQzs=)
2: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=)
3: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Validity
Not Before: Jun 13 06:58:15 2026 GMT
Not After : Jun 20 06:58:15 2026 GMT
Subject: CN=6a2cff87-2879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:4c:4c:c7:18:a0:1d:c7:a3:ab:aa:65:7e:
ed:0f:7d:a0:79:87:3d:84:0d:25:f8:b1:5b:d3:b9:
fe:a7:50:b3:41:db:2f:6b:e7:77:15:0c:c4:46:c2:
53:39:ce:30:f3:fb:ce:15:da:1e:ee:ed:e5:9a:a6:
17:ae:0e:98:dd:b3:ca:b9:f1:16:46:3e:f3:12:71:
65:60:fc:44:11:43:be:a5:3c:d0:84:32:98:3f:93:
84:a2:3a:40:2f:b0:6f:bf:8e:b3:8a:89:b0:35:8c:
39:42:bf:74:d1:0e:d4:5d:0b:65:25:ae:4e:5a:40:
eb:6c:f6:ef:e8:a7:bd:42:49:1c:4d:f6:59:5e:24:
5f:2b:5a:d8:c0:32:7e:08:a5:ed:36:39:cb:88:22:
86:92:38:25:ab:fa:80:e2:c5:8d:0d:5c:39:e3:53:
01:91:81:4f:b1:f4:8e:6c:99:ef:b5:c3:e3:80:a0:
11:c6:ba:85:98:cd:a4:f0:6f:f4:a0:82:d5:9e:e4:
99:5a:5f:de:ce:16:45:1c:39:01:8f:33:34:b6:49:
97:76:0f:7a:1d:4d:be:21:1c:ec:ad:fe:36:56:90:
f4:72:92:67:c2:56:d2:83:6d:64:24:d4:3c:72:0e:
ca:3c:cd:7c:31:e5:f0:dc:8b:44:e9:9b:85:52:89:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:A7:34:37:D1:1E:64:F0:7B:47:47:10:5E:AD:04:AF:24:DF:89
X509v3 Authority Key Identifier:
keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:2e:67:ea:16:3a:17:ae:91:09:b0:66:06:86:50:db:e2:
0b:c1:c9:33:e0:23:31:71:69:af:7f:19:75:a5:82:28:e8:38:
b2:32:25:ae:2b:f1:2d:49:41:27:08:13:64:ea:32:b1:75:c5:
d6:a9:fd:8c:68:98:dc:42:f6:b3:0d:cb:28:70:b8:fe:ee:33:
ad:f5:c1:81:4e:69:bb:b6:ac:e0:c6:36:12:f6:f3:31:bb:a4:
9f:a5:07:c5:9d:23:25:13:7b:06:92:a3:0b:11:88:98:ca:61:
f5:33:1d:27:27:e1:ab:f5:0e:b1:bc:7e:f0:c2:a4:9b:71:82:
8c:fd:77:ba:db:16:7e:af:df:7c:2c:e7:05:83:91:94:6a:8a:
c0:54:fc:c5:ba:4c:f5:4a:91:53:e4:f4:5f:5f:f0:57:3e:fb:
88:1d:e3:ea:87:b0:d2:44:c6:d1:3e:d0:2f:9c:43:4a:d1:94:
7a:f8:0a:98:0e:fd:8b:91:67:0d:06:d9:c9:fc:7b:98:9c:09:
57:6c:0a:c3:ab:58:c7:92:49:de:87:e2:e4:a6:79:3d:20:83:
e4:23:67:2d:80:01:75:9e:30:df:ba:37:cf:c8:a0:e5:9d:99:
1a:fc:76:0c:9a:32:01:0c:56:70:52:62:9d:6a:bb:87:70:14:
0f:61:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:00 2026 by rpki-client