
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json)
Hash identifier: CiWfmgjpTuaOLXybEe95mqQoX/P2DHgX/Y/nUWH7xSk=
Subject key identifier: E0:8B:D4:9C:C8:8C:0A:53:BC:79:F9:65:BC:43:CE:C3:25:E3:56:29
Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Certificate serial: 061E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
Manifest number: 060D
Signing time: Tue 12 May 2026 22:58:41 +0000
Manifest this update: Tue 12 May 2026 22:58:40 +0000
Manifest next update: Tue 19 May 2026 22:58:40 +0000
Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: cMmlZf1K0ASqyE6o4zynw9i/KrI2DcxRnqThLbyXrgA=)
2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: tWNrfcWrRhpaxE6KzUPy0N1Gkp/CrciJBkIG+zBTsq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl
rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1566 (0x61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Validity
Not Before: May 12 22:58:40 2026 GMT
Not After : May 19 22:58:40 2026 GMT
Subject: CN=6a03b0a1-20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:e5:0b:6f:5e:61:40:c5:82:e2:bd:f2:fe:
d9:4c:e1:ae:cb:27:ef:d4:36:ec:1e:cd:dc:5b:8e:
9f:8d:98:ed:19:89:50:f6:e4:3e:1a:51:23:08:3a:
27:a4:6a:32:d6:3d:5a:de:a8:d1:e7:dd:da:a1:42:
48:23:c2:1a:50:fd:9a:6c:22:12:f2:23:2e:dc:08:
e1:4b:ab:13:a6:e3:07:47:21:0e:82:0e:93:98:75:
98:db:b2:4f:ad:73:92:30:09:9a:b5:75:a0:85:27:
c6:45:94:95:95:94:0c:b4:ff:39:40:d6:be:47:fa:
f1:8f:1d:41:fc:04:75:2e:83:fa:59:de:06:b1:c4:
1e:ad:e7:d3:b8:e6:e5:3f:86:ca:e2:63:d8:3c:13:
08:7b:4a:c7:ea:4a:c8:0b:3d:0c:4d:ef:9e:0a:f7:
85:97:8e:6b:b0:60:a7:bd:62:3a:f9:65:4e:5e:01:
06:a1:9e:a3:24:cf:1c:7a:5f:ba:5f:88:3b:44:f3:
73:07:9b:08:bd:63:90:11:22:2d:b7:fe:7e:e3:4a:
a0:76:2a:de:b5:e5:89:ec:64:2a:70:6b:5f:08:2e:
52:41:57:a4:c4:69:1e:2b:eb:44:a3:80:f3:66:eb:
5f:dc:cd:46:e4:73:b5:34:1e:f0:02:4f:c4:3d:3f:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:D4:9C:C8:8C:0A:53:BC:79:F9:65:BC:43:CE:C3:25:E3:56:29
X509v3 Authority Key Identifier:
keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:65:79:93:36:e3:ef:f1:8b:b7:a2:4a:ca:c6:8c:09:89:0f:
61:2e:48:3d:57:ce:45:38:2d:0d:f5:72:b5:ff:0f:87:19:25:
21:fe:2a:32:ca:63:62:8c:dd:15:d0:31:8a:5a:7a:34:d7:44:
ec:eb:cc:bc:fd:29:23:ab:5c:de:10:58:cf:77:16:2a:d2:c2:
f9:cb:9d:09:8b:3f:fe:45:fc:f0:58:90:fb:fe:66:8a:6e:27:
3a:85:7a:39:f2:ab:1d:1d:16:9e:0e:23:c6:d8:7c:07:b2:db:
99:08:c3:a8:3b:59:72:2b:cc:a8:f6:aa:31:b4:f2:5a:58:5c:
54:fe:34:78:ae:a8:0d:74:1a:f3:41:f7:1d:0b:e7:13:f6:a6:
80:17:41:f0:c0:a9:d2:37:33:ec:1d:83:ad:3e:bf:99:72:25:
f6:73:0f:6e:da:d5:44:64:a9:de:46:c1:2d:35:16:20:7c:e5:
21:51:fc:65:ac:19:06:12:9b:4d:aa:d0:d7:3f:5f:71:d5:4f:
fa:9a:61:56:c9:79:aa:78:63:48:6f:27:d6:67:97:83:df:10:
aa:9f:8f:d3:1a:2b:85:58:15:cb:aa:6d:3a:4c:45:ff:98:79:
fb:9b:66:16:ee:8e:1d:a4:2b:c2:02:cb:66:d8:66:99:43:88:
0f:08:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:54 2026 by rpki-client