
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json)
Hash identifier: EFrkfdX0eDQsywM4uiXWpfWYkm6jBAgKBrToz2Zvcio=
Subject key identifier: EE:4B:FD:96:45:DF:07:33:FB:8C:EF:3F:64:3D:D6:1C:5D:25:8B:33
Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77
Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
Manifest number: 014C
Signing time: Thu 11 Jun 2026 07:31:46 +0000
Manifest this update: Thu 11 Jun 2026 07:31:45 +0000
Manifest next update: Thu 18 Jun 2026 07:31:45 +0000
Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: GJ+dshv1eGdRRlSqRI33qrHbeMC8cXIZdFpe2h0ayAs=)
2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: M+cyWKbUFQNlRI1m90KUe0FaVezt/HgotqvoprldJAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl
rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 07:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177
Validity
Not Before: Jun 11 07:31:45 2026 GMT
Not After : Jun 18 07:31:45 2026 GMT
Subject: CN=6a2a6462-2c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:31:62:a8:fe:cb:6d:9c:6e:0a:14:a1:7d:
3b:2f:ab:47:16:7e:44:6e:96:4a:02:e4:71:61:c4:
ba:99:e9:f9:e8:38:e6:2e:f3:d6:83:f9:69:23:ef:
41:d3:db:37:3e:52:5e:db:54:19:42:d1:ba:38:c3:
05:f2:22:16:d7:ae:f1:0b:f7:eb:fc:37:39:ac:08:
84:cb:b4:bc:07:bb:0c:ae:a4:53:ea:80:f2:2b:64:
73:2f:75:43:ab:22:88:3c:d9:86:cd:db:f0:6f:e8:
77:b6:a0:a9:70:04:94:da:05:6a:ae:bb:58:9a:34:
42:72:ef:d4:39:3d:5e:76:44:29:0c:21:d2:b2:2f:
a3:7b:d4:76:3a:26:69:15:b7:7b:5a:22:d6:2a:aa:
3f:cb:a8:ff:f1:e0:6a:b8:39:04:5f:b1:13:e3:20:
31:e5:42:be:56:d3:23:e0:3f:0b:d1:26:1b:4e:de:
52:b8:e1:59:9c:ed:de:ae:8c:27:a0:1f:6f:51:f0:
33:7f:30:55:16:2f:cd:3c:59:36:bf:08:8a:f5:d5:
68:5d:9d:3b:bc:b3:15:44:eb:35:c9:6b:ef:eb:4b:
ea:38:b1:ea:c1:96:41:91:b4:71:6a:39:8d:d2:76:
44:fc:5b:e3:ee:9d:93:be:b3:6a:80:3b:b6:a1:41:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:FD:96:45:DF:07:33:FB:8C:EF:3F:64:3D:D6:1C:5D:25:8B:33
X509v3 Authority Key Identifier:
keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:72:a7:b7:5c:ae:1a:35:91:87:da:e2:f6:a6:01:f1:60:fb:
0a:34:47:d0:e6:d9:19:b0:12:0a:5e:df:81:05:0b:5d:48:33:
c2:96:f5:be:73:4d:a6:30:d9:6d:81:6d:10:fe:9e:ee:6c:da:
da:d1:35:bf:b2:c3:e5:3d:68:c8:e8:f9:12:e3:75:98:b6:18:
62:6e:60:68:c1:ff:94:c0:39:9a:b1:e3:70:62:0e:c8:9c:82:
dd:78:7a:1f:20:d5:25:5c:32:f7:4a:c9:c7:45:12:e0:ec:02:
b0:f6:ab:7f:c0:4f:3e:b9:c4:4c:13:b5:a1:b0:81:45:d3:92:
f3:4f:f2:33:91:7d:eb:f2:f0:f1:35:d2:35:2a:b0:91:14:fc:
47:5e:94:aa:49:44:e1:32:f8:fc:9f:1b:12:9f:6c:39:0b:01:
e7:aa:35:0e:05:df:87:95:78:4c:39:71:eb:4b:fd:b5:39:ae:
cb:04:a3:32:14:7a:e4:36:ba:17:82:30:58:a7:98:a9:e9:7f:
73:15:41:b7:e6:a5:4d:37:ef:ca:78:d6:ca:f5:6e:7a:0f:c2:
2b:30:b1:79:2b:00:ea:6e:c5:c8:ec:84:13:84:a0:32:3a:b9:
b6:12:05:ed:a3:e3:97:e0:41:0d:89:0e:2b:b6:de:4d:07:0a:
4c:24:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:19 2026 by rpki-client