
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier: 0+tA+B2zDWJxH+c4cmBmKohG4/IWUP1GRWFdi0iCrL4=
Subject key identifier: C2:A9:65:3D:5E:4C:38:B6:9E:7A:19:E0:31:FF:4A:4E:55:A0:AC:CA
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial: 35A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number: 3583
Signing time: Wed 22 Jul 2026 14:44:53 +0000
Manifest this update: Wed 22 Jul 2026 14:44:53 +0000
Manifest next update: Wed 29 Jul 2026 14:44:53 +0000
Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: wENd8+GsU8sd/YvmSU54Akkx+rp6eOTCgU4xnKL+AYk=)
2: BBDA65F6479111F1892030F49D833773.roa (hash: t3MKX0SQ0l2/O3Cn8Pta+/GR5x74uHYlPAkfD5y3Nzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13731 (0x35a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Validity
Not Before: Jul 22 14:44:53 2026 GMT
Not After : Jul 29 14:44:53 2026 GMT
Subject: CN=6a60d765-d095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:f3:ec:af:d3:49:38:28:89:b6:d6:4b:b6:
94:12:92:60:65:e4:7d:9a:b3:bd:6a:44:ed:77:a9:
db:d2:c6:d6:0b:72:4c:ac:c3:58:63:4c:9a:03:af:
44:69:fc:af:78:41:bf:5c:14:18:3e:b0:76:a4:5a:
ac:a3:39:4a:0f:c1:58:28:db:f0:64:3b:f1:ef:c1:
e0:e1:6b:bd:60:02:88:d5:17:34:96:13:51:5a:25:
0c:a7:03:de:4f:ce:9a:2a:5f:98:ee:5b:5c:15:b6:
0e:a3:a6:c9:e2:57:f5:42:86:b6:cd:0d:2e:54:ce:
89:57:7d:a9:92:00:f3:9a:9e:f8:f6:5a:94:df:87:
11:53:80:b0:ad:b3:3b:21:b1:f1:5a:fd:03:2a:35:
97:9b:45:74:33:ab:46:f0:87:bf:8d:a8:f5:da:2e:
fc:a0:b9:3f:c4:9a:1e:9a:5c:1f:90:31:cd:cf:de:
83:9c:d7:87:91:d3:71:fb:07:0f:91:3a:f7:91:90:
74:41:d5:37:66:5b:9b:a2:92:9f:ea:9b:57:68:6d:
f1:70:54:0f:53:62:c5:ae:2b:e9:42:e1:8f:07:fd:
b8:f8:fc:67:e0:6d:1e:d5:6d:0c:79:1f:9d:c7:6f:
fe:17:31:23:52:c1:ce:3e:a7:67:fc:83:ab:8e:29:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:65:3D:5E:4C:38:B6:9E:7A:19:E0:31:FF:4A:4E:55:A0:AC:CA
X509v3 Authority Key Identifier:
keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:d1:20:78:c0:7c:dc:43:21:0d:4f:0b:b2:8c:1f:1a:e4:a9:
99:6e:24:a7:f1:7f:71:68:2e:56:d4:e4:0e:f3:1a:93:93:8b:
6f:33:fd:db:d0:47:94:ef:7a:18:b7:36:8a:f0:57:96:be:9f:
bc:52:bb:d8:ab:b0:71:d5:34:ac:06:37:dc:2d:e7:ed:1f:82:
9f:08:d4:e6:bd:1c:5b:50:06:97:9b:5f:43:bc:17:3e:89:5c:
58:c1:5a:b3:a8:3f:23:49:9e:4b:4b:08:be:85:73:b8:00:be:
bb:41:23:47:fb:71:63:51:cc:61:f5:5d:5e:9f:5a:40:46:4e:
d8:8a:58:d4:41:e2:82:f4:18:4c:4a:31:08:da:d0:1d:02:ad:
63:a1:a0:50:bb:91:24:ce:02:4f:cb:cd:da:6a:65:67:63:99:
94:4f:ff:12:bb:c1:b3:2e:bc:01:92:4b:1d:9d:e2:25:d2:2b:
f6:37:b4:81:f0:3d:42:c3:6f:e4:d9:05:8f:4f:76:2b:05:fd:
42:ce:a2:5c:70:cc:3f:cb:b1:68:5e:01:4c:0c:64:20:d2:94:
ed:f5:f9:53:ff:ea:8d:fb:5d:11:07:8d:12:28:a7:47:59:01:
c9:25:ad:11:55:fb:bd:d8:7c:c6:8e:59:45:dd:a6:34:82:ea:
a5:75:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:00 2026 by rpki-client