
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json)
Hash identifier: 3jiQ3CF1CmJPGFxTEgnnsA6hUa18GLnWLG0ilwfeOC0=
Subject key identifier: 73:A1:0A:49:03:07:0D:2C:68:CE:89:12:F9:CC:7F:4D:D4:35:C9:30
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
Manifest number: F9
Signing time: Sat 13 Jun 2026 06:20:10 +0000
Manifest this update: Sat 13 Jun 2026 06:20:10 +0000
Manifest next update: Sat 20 Jun 2026 06:20:10 +0000
Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: ptfn1xCyzX4w6TEApLsv/oB14Xa9GMENSNn9rDHFxPA=)
2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: VpW1ss/FISZUa4YxltnTH36k8qN9hgV+vDjB+vqrTUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Validity
Not Before: Jun 13 06:20:10 2026 GMT
Not After : Jun 20 06:20:10 2026 GMT
Subject: CN=6a2cf69a-0503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:27:50:02:b4:76:df:ea:6f:64:0a:d0:0c:
df:7c:20:43:a8:fe:ef:11:6e:35:6c:44:e2:af:de:
f3:e6:af:22:b4:43:d5:00:81:f8:24:54:3c:a5:ee:
f3:3d:04:4a:db:b2:2c:c5:2a:36:f4:db:cf:25:f2:
ac:fd:51:00:07:aa:36:fb:d6:c3:2e:4d:ae:dc:ff:
87:d9:f3:28:2a:e2:43:3b:e5:49:cf:42:d8:e3:4b:
97:c9:92:97:ff:00:79:4f:fa:3b:44:33:ee:3d:9f:
24:e0:52:17:df:76:b3:67:23:1f:1a:0b:56:44:f5:
e0:5d:ac:fc:c5:47:92:2e:36:cb:81:66:97:4d:64:
b0:fe:54:75:e8:6e:eb:76:2f:9d:d6:8c:47:4a:52:
2b:92:fa:cc:97:3a:7e:20:16:b2:27:19:d8:b1:36:
76:7e:41:1d:57:81:35:0c:eb:27:27:ae:72:69:86:
1a:03:5c:dd:28:3d:f9:7a:ef:8b:16:d2:72:80:12:
e2:70:b5:26:d8:5d:b6:6b:b0:12:9d:38:b2:a1:92:
8a:ac:15:dd:2f:6d:f2:89:4c:bd:09:3e:57:b4:1e:
27:32:47:d9:20:be:72:a0:79:2f:09:5e:7c:31:ae:
04:15:75:9e:4e:c0:62:33:fc:f5:48:3c:7f:80:d4:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:0A:49:03:07:0D:2C:68:CE:89:12:F9:CC:7F:4D:D4:35:C9:30
X509v3 Authority Key Identifier:
keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7b:75:ac:91:b5:d9:6a:00:50:b0:e3:a4:88:3b:ce:1a:d3:
f6:3e:2f:a0:75:a5:e7:f7:79:56:c4:56:1f:23:8f:6d:86:b2:
48:27:49:d5:f0:f9:40:38:d1:af:64:7d:bb:0a:b9:b4:9b:4b:
2e:54:06:e4:fd:db:da:67:cf:f9:bd:32:05:9b:3d:8a:0a:3c:
67:11:ad:bd:f2:d5:21:9f:2b:9b:03:45:25:ee:a6:bf:d9:5a:
ab:42:4f:bf:09:0f:16:29:5a:bd:4f:5a:ec:97:06:45:ae:c5:
52:47:99:88:9a:6d:9e:1c:5e:0e:d1:e4:37:65:29:94:ac:71:
c2:c5:fc:0f:93:f7:fc:c3:b8:ec:48:8a:d6:40:44:46:42:bf:
8d:99:d6:67:2f:e3:50:a3:a7:70:c3:f7:2e:0f:f0:63:94:79:
4b:e5:a0:d0:92:c0:97:cb:33:3d:9c:d7:84:c3:1f:72:dc:91:
9c:0c:16:79:ac:de:91:47:dd:86:16:71:dd:bd:2b:5d:c4:95:
fd:b2:62:ca:c4:b8:f7:30:66:b7:94:c6:57:d1:ac:ac:e4:93:
f8:45:ed:95:ce:8d:69:ba:2a:ae:a7:6d:21:32:d3:ea:80:00:
13:a4:37:a3:d7:55:af:17:17:13:c1:df:cc:f1:c7:49:ad:27:
22:4e:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:16 2026 by rpki-client