
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json)
Hash identifier: PUU6VjhFJQT1b9rO8bjuy5gFfmhNO8uw2+ZknAArG/E=
Subject key identifier: AA:39:E3:25:47:B5:19:55:7D:5A:DC:81:07:E9:22:6A:BE:A7:FF:32
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial: 0723
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
Manifest number: 06FC
Signing time: Fri 12 Jun 2026 22:14:11 +0000
Manifest this update: Fri 12 Jun 2026 22:14:10 +0000
Manifest next update: Fri 19 Jun 2026 22:14:10 +0000
Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: yhvt/95Vmw9N8hbRwgF5xSFCN6WlesW5rsrQVcwUt2E=)
2: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=)
3: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=)
4: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827 (0x723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Validity
Not Before: Jun 12 22:14:10 2026 GMT
Not After : Jun 19 22:14:10 2026 GMT
Subject: CN=6a2c84b3-6c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:34:1a:28:76:ad:49:10:8f:e0:d6:6a:90:
a9:18:57:61:4a:9a:9b:3c:8a:92:e5:88:cc:5a:dc:
10:75:e0:c6:17:41:ba:98:2d:0d:8d:f1:be:27:8d:
b1:11:48:d8:c7:94:f8:81:df:12:b4:3a:e3:27:fc:
dc:59:77:8f:24:a2:e4:62:2c:09:7e:45:f2:31:9b:
cc:9b:a6:0f:6d:60:a4:11:e8:33:7e:ad:95:4a:e4:
3d:6a:be:06:73:7c:2f:5a:0f:0b:09:a0:49:ef:56:
86:36:e0:be:13:73:f5:ee:e4:bc:27:fd:50:10:48:
1d:2d:d0:09:43:ee:a7:d3:2b:00:36:6c:46:39:98:
c5:2f:44:39:da:9f:59:34:1d:dc:3c:c8:d0:54:49:
92:f9:6e:4f:5f:3b:ca:73:ce:38:22:2b:98:74:0e:
ec:cf:a9:db:e0:2f:0e:7e:9d:35:c3:84:23:c6:85:
18:e7:74:19:8a:c7:87:6d:2f:0a:04:fa:0f:78:94:
85:0d:55:bd:16:a4:3a:61:80:ce:b9:63:03:f0:5c:
67:85:f5:ff:ff:92:3a:b2:af:23:20:5d:54:31:5f:
ba:c7:9c:8f:40:5d:05:04:9a:3f:a2:45:de:15:ab:
92:b7:38:91:a4:a3:5b:d2:77:ba:6d:41:e9:77:bb:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:39:E3:25:47:B5:19:55:7D:5A:DC:81:07:E9:22:6A:BE:A7:FF:32
X509v3 Authority Key Identifier:
keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:98:6b:95:58:52:7e:5a:37:d3:c3:43:35:d4:28:f1:da:2a:
cb:ba:a2:a6:39:89:07:62:b2:1c:2a:9b:d5:96:59:11:8a:3c:
3d:19:a0:dd:75:28:4d:89:bf:47:6f:44:92:44:f5:08:25:58:
ad:e8:57:d7:d1:4b:4f:22:2b:ae:cb:ec:a1:f5:9c:47:64:f4:
69:1b:f1:f7:bf:e0:dd:b9:48:a5:2b:3b:db:18:f0:aa:1a:13:
fd:9c:51:57:ba:06:a2:aa:fb:67:46:dc:c4:bd:b4:a9:a6:4a:
5a:f0:5a:e3:bc:3c:a6:b5:a1:3e:13:7a:f2:75:85:c4:8e:0a:
e4:7d:26:c4:a9:fd:9d:39:cf:77:9c:46:df:71:e3:03:85:87:
62:b6:c9:23:15:ce:6d:01:c3:90:21:a1:6a:7b:6f:2a:b5:6c:
ff:17:fe:14:41:05:75:4d:b5:87:d1:81:2e:dc:37:96:a0:fa:
6d:bf:ad:cc:bb:de:a3:4f:2c:99:89:60:db:db:78:b1:a3:9b:
22:47:47:6f:25:14:cb:10:08:d7:75:e9:50:70:0c:e4:08:9f:
c5:3c:b9:21:05:81:74:1d:30:9e:b0:2b:9d:12:f7:0c:ce:a3:
54:43:6b:f5:ef:81:1b:2e:fc:7c:ea:37:73:e1:a1:28:64:e0:
d2:c4:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:10 2026 by rpki-client