
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json)
Hash identifier: ArFLPn1IvclSv8bWS7G5P3VVk3UqbpLlnev65Z8wmNc=
Subject key identifier: 47:D9:27:00:07:A8:FB:EE:18:5B:65:8D:04:77:BC:41:23:DB:0C:F2
Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
Manifest number: 01E8
Signing time: Sat 13 Jun 2026 03:38:09 +0000
Manifest this update: Sat 13 Jun 2026 03:38:08 +0000
Manifest next update: Sat 20 Jun 2026 03:38:08 +0000
Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: IqoGmgPKKahjvQ9v1sccUyJ2oldLWSedir38I/Wq7uY=)
2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: pHxXivDFEbvkF+NQAZkLY9uNgdyvvnZXrHsc10zFfQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Validity
Not Before: Jun 13 03:38:08 2026 GMT
Not After : Jun 20 03:38:08 2026 GMT
Subject: CN=6a2cd0a0-3739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:16:56:8f:d0:02:d8:3a:70:72:93:bb:0b:
c7:b4:94:df:00:68:17:6b:b2:b2:d7:38:07:60:39:
a2:e2:c0:d8:6a:6a:7b:4a:ce:25:4e:d3:56:99:f4:
f5:a4:c5:20:3e:a6:ef:a9:0c:71:82:1c:8b:3c:32:
bd:8c:b7:16:99:06:f5:34:2f:13:0a:2b:76:68:61:
60:f4:ce:ce:dc:e7:76:99:dd:91:78:d8:da:dc:60:
87:e9:28:5c:03:35:83:52:f2:97:24:fa:2d:8e:24:
07:47:21:cd:e4:33:8d:0a:ca:83:40:60:d7:05:f7:
df:17:97:83:41:3a:75:96:94:3d:d6:f3:5c:8e:76:
2e:35:43:9f:1f:8d:74:31:c6:95:29:db:d5:e4:d6:
72:66:33:b9:9c:fb:5f:9c:35:53:ad:c0:ee:07:19:
89:b1:a0:65:42:6e:58:98:7a:7a:9a:af:eb:b3:5b:
01:21:97:67:45:4c:fa:bc:59:f1:78:30:f2:ff:a4:
a3:8d:a0:bb:19:02:b1:db:76:51:94:86:7e:0e:61:
7f:57:85:9c:a8:fb:74:77:5b:7f:03:32:3f:2c:7c:
76:56:a9:8b:69:00:32:5e:c3:53:53:14:07:88:66:
e2:5c:cf:08:7d:c3:5a:34:c4:7b:57:cb:d8:c0:a6:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:27:00:07:A8:FB:EE:18:5B:65:8D:04:77:BC:41:23:DB:0C:F2
X509v3 Authority Key Identifier:
keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:8e:48:1c:90:07:34:05:59:01:5c:1f:7c:3c:e6:b7:bc:9b:
a8:59:b3:d9:14:19:56:b1:58:21:d8:c5:45:e4:4a:e8:6a:3b:
18:7e:48:ca:16:4d:de:a4:a5:aa:eb:a6:68:87:cc:7c:10:d8:
99:be:cd:63:67:ed:0e:c9:7a:bd:f7:e2:6e:13:0b:c4:6e:26:
73:eb:35:f9:fb:c3:6a:ed:6e:92:17:ef:14:15:2d:fa:1f:78:
4b:f8:c8:6d:46:20:e4:dc:81:29:86:de:c4:06:0b:68:76:39:
57:07:39:f3:a5:c1:fa:41:26:34:06:3c:26:e5:49:4d:57:68:
e6:5d:89:7b:1d:22:c9:f5:63:92:d9:36:24:44:1f:7c:05:31:
ba:b4:76:1a:71:36:be:ce:c3:88:ee:d9:48:12:53:6d:65:9c:
90:34:81:32:2b:9b:f0:a6:11:0d:a5:51:f6:7e:f6:80:cd:b1:
1b:6a:8a:33:7d:c0:fb:76:28:5a:97:c4:d4:35:fc:00:a5:82:
16:c4:5b:fc:b4:c2:00:d2:74:72:62:fb:5e:86:cc:86:4a:8e:
a8:84:2c:4b:51:14:9b:6e:e1:de:ea:ad:9a:4b:f2:28:78:f5:
21:48:59:53:ca:b2:ee:d1:23:bb:13:8c:59:74:9d:d9:cf:08:
b8:91:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:20 2026 by rpki-client