
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json)
Hash identifier: puQ9zQJWbB1klmXUd5E1b+SQGMj8Nj1xjbNOWuWqNto=
Subject key identifier: DE:E1:5D:5E:B4:14:95:95:4D:CE:02:C4:9E:27:2A:0D:C6:41:B8:04
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial: 0BED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
Manifest number: 0BE3
Signing time: Fri 12 Jun 2026 18:56:01 +0000
Manifest this update: Fri 12 Jun 2026 18:56:01 +0000
Manifest next update: Fri 19 Jun 2026 18:56:01 +0000
Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: Oa8RN+qZmYtZ+5++1YCudOd8DcfB65i5bsypUS9tQNg=)
2: 078AE946642A11EAA019224CC4F9AE02.roa (hash: 31whv5fvX3GHhn8oNBBfKndDfzOhLiKe+vMmbXanShU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Validity
Not Before: Jun 12 18:56:01 2026 GMT
Not After : Jun 19 18:56:01 2026 GMT
Subject: CN=6a2c5641-161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:0e:e9:e6:69:4f:9b:4d:cc:64:36:1e:5d:
1e:0d:7e:f7:8e:5b:b4:0c:09:35:db:ef:6b:45:e0:
a9:52:fb:82:03:7f:1e:96:3d:2f:ba:90:eb:b4:83:
e5:38:4d:18:ed:0a:59:65:6c:9b:ef:f3:f7:56:da:
3c:32:5d:2c:d0:6a:92:2d:0d:d2:b7:87:84:aa:04:
47:91:8a:a9:25:ae:15:ba:f9:ff:c7:44:ac:b4:f5:
92:ec:65:74:f3:e9:e5:c4:4a:6f:35:d5:ab:9b:a1:
be:15:33:0b:54:e1:7b:54:b4:77:a2:2d:c0:7f:53:
93:84:0c:a0:b0:8f:42:bf:d6:e0:fd:a5:30:b1:63:
e9:59:f9:d5:c7:31:d8:85:28:d1:ca:76:9e:fc:4b:
6f:38:3b:63:c0:c8:da:e0:04:4b:cc:19:b5:3b:f6:
c1:1b:fe:c9:95:63:35:bb:31:56:d7:12:23:49:c4:
c6:d7:5e:fd:6e:c4:99:5e:c3:ce:e7:18:c4:56:ba:
cc:41:93:71:f5:28:a2:e7:32:2a:03:c3:ef:24:23:
7a:02:99:3c:9e:d7:71:43:54:f8:d7:d8:71:49:44:
23:ef:77:c6:ba:5d:b9:41:a0:1e:a6:08:05:fa:85:
48:10:e4:cc:b4:c1:fa:7f:00:3b:9a:04:ef:e7:61:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:5D:5E:B4:14:95:95:4D:CE:02:C4:9E:27:2A:0D:C6:41:B8:04
X509v3 Authority Key Identifier:
keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:34:a4:9c:4b:56:4a:9a:dd:0d:55:c5:96:02:15:c8:6f:35:
68:29:34:de:05:28:0f:7d:39:e7:6d:d5:bd:bf:fa:4c:33:97:
28:fb:1b:f5:cf:a9:39:4d:6a:31:47:f3:8f:e0:55:e1:37:80:
82:08:d0:db:3c:20:04:61:74:70:6e:0e:ab:c1:c5:5a:ff:e9:
85:67:c9:ce:af:62:35:df:f1:ce:93:0b:2c:0d:49:88:7d:02:
bc:95:42:31:26:f4:ac:f4:f1:ab:9c:26:06:90:2c:7d:b5:04:
df:1b:26:73:3e:94:2f:15:2b:62:93:0d:3e:fd:5e:15:d6:f2:
ad:6e:ab:b8:c9:89:14:b0:cf:5b:f2:f0:b8:4f:73:b3:93:62:
e8:e6:1e:70:20:ac:29:11:59:2f:b0:33:7d:87:c5:77:54:b7:
bd:1c:d3:d4:53:42:0d:31:5c:fc:49:f2:d3:ce:25:e5:95:cb:
cf:d1:6f:d9:09:1a:4c:6f:94:70:2a:34:12:c4:1f:92:41:12:
db:c4:ad:c1:59:6a:d8:ad:38:71:c5:c8:74:2b:76:31:2c:8e:
cf:ea:6d:a5:1b:eb:45:6c:14:fe:65:57:bc:42:30:df:ab:de:
e6:88:b6:e0:81:60:94:f6:a2:17:97:35:8f:69:e4:86:b5:9d:
1c:6f:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:14 2026 by rpki-client