
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
File: _KoIYibfAq-DlPqyLR-5bgt9Zd0.mft (raw, json)
Hash identifier: PWuI622gvV/c7e4CoUbZI5LE0Nl9B4h38IR7GykxYYM=
Subject key identifier: 40:12:C1:30:6E:1F:D7:FA:7B:BF:B6:81:CA:BB:C1:DA:92:70:18:6D
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0CF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
Manifest number: 0CA0
Signing time: Wed 10 Jun 2026 18:43:40 +0000
Manifest this update: Wed 10 Jun 2026 18:43:40 +0000
Manifest next update: Wed 17 Jun 2026 18:43:40 +0000
Files and hashes: 1: _KoIYibfAq-DlPqyLR-5bgt9Zd0.crl (hash: JMXDwS8Z5icM3q7JQq5h9V8FwWrnHPkC7L6EeglJERA=)
2: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (hash: gzcKTWUYCkW7/UycwF0pi+085wVbUmNYAwtTydE5q9k=)
3: 78E949B8BA2B11F091659A18C4F9AE02.roa (hash: jySnNcQ/+odq2S87rB45bvuTiaw3wlS7bGHDCJXajj0=)
4: 16C56390B6FF11F096DEAA71C4F9AE02.roa (hash: BgUHPnvLwPxqiAYZUON/ST5O2jioUi7aR9uP+MPdncA=)
5: 50229D303D6711F1A0848E61AE833773.roa (hash: reIxgqe05sEBUJKY+WscmjdUtjvd2Rhqu3ZL/1RHcqc=)
6: 336E2134D0FF11F0904A3785C4F9AE02.roa (hash: 8ReXEY/ooZI9VWwdjyL+EpSnY0MpgK9LpTHh2PDG6Qw=)
7: 45DE9550BADF11F09B91D509C4F9AE02.roa (hash: p36IxgJSYxSVxDcgWekbNQXRkHJAnWyPDPHksjl233k=)
8: 75775B8A5E3C11F094FDCD71C4F9AE02.roa (hash: 71T3pzVhzyKgAZZGhNCVsYqKbfXYuUmjUcBl+S0PhoM=)
9: E2D5171C2F3211ED958A415DC4F9AE02.roa (hash: EKgPE59Um2mB3Cb/fDjzGAqBUuX41HjcK3tgwN7mb6g=)
10: A28603BE3D5D11F19617582FAB833773.roa (hash: guX6EhbcTR6j/8h8tuHU18WPC5/CU3vKLdR4Gif3JRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Jun 10 18:43:40 2026 GMT
Not After : Jun 17 18:43:40 2026 GMT
Subject: CN=6a29b05c-8d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:f1:77:d6:95:4f:a6:4e:fd:e7:ad:15:fc:
5a:74:b6:47:52:35:12:7c:bb:97:9d:78:f0:4a:a8:
5a:07:e9:18:54:db:59:6b:32:9d:1c:1d:d8:20:8f:
a2:90:8c:4c:31:1f:e2:ec:9d:ae:9d:36:89:45:a5:
58:6d:a5:07:56:3c:6b:62:da:9b:c9:8c:85:ec:c2:
d3:13:e0:2d:4a:72:f9:3c:0c:83:5a:d4:b2:38:9a:
ff:e7:47:b4:f7:b0:a6:1f:26:af:e0:f1:95:0c:01:
7e:0a:40:ce:7a:b8:42:41:d1:f7:f9:a3:53:bf:c7:
08:54:80:88:d5:3b:b4:94:29:1a:4d:1d:ce:3f:20:
e9:5e:02:cb:63:50:ff:08:1c:66:e2:08:c9:6d:cc:
31:8a:3e:40:e8:9f:47:0a:48:ab:29:3e:17:b9:be:
65:49:0e:60:07:61:26:31:7d:8e:3e:47:35:6d:5c:
ff:93:ee:ef:6e:4d:15:a8:99:b6:f7:3c:ed:3f:95:
cb:d7:f7:d8:1a:3c:e5:ef:53:2c:e0:a4:f5:15:47:
cb:4a:f9:50:6d:58:52:5f:45:d5:bc:b8:de:b2:6f:
00:a6:e2:c3:e1:e6:43:bc:46:0b:97:31:7f:ac:96:
61:78:22:2d:26:03:fc:43:ec:34:34:15:9c:b4:31:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:C1:30:6E:1F:D7:FA:7B:BF:B6:81:CA:BB:C1:DA:92:70:18:6D
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:8e:a5:15:c6:1b:20:f3:19:b7:04:c1:22:1d:20:06:c9:34:
ad:fb:a2:36:5c:74:73:b0:96:4a:53:6b:9b:40:05:86:9e:43:
85:1d:1d:57:ad:73:0f:98:ca:87:fa:18:e4:20:63:e2:37:65:
ad:29:e4:cd:85:98:77:bd:4c:3b:e1:c0:8a:8c:bc:22:9c:8f:
a2:91:a3:13:21:de:4a:10:73:1f:58:b3:93:ad:a7:d6:c2:f0:
97:ce:5c:75:ab:94:c6:43:19:e6:a6:48:7d:e2:6b:ce:f8:04:
82:ea:70:8b:df:29:e7:60:1c:6d:50:d2:cb:df:35:20:7d:64:
33:9a:b2:eb:5d:a0:d3:9f:30:3b:4d:45:7a:95:7e:6c:6b:e1:
b2:14:d3:7a:6e:6e:0a:ab:c6:73:3c:58:41:f8:64:78:a5:91:
ea:0c:29:58:b9:ce:06:54:32:f5:dd:70:44:c5:44:9c:b4:fe:
0a:31:b2:ff:b7:b9:58:75:fe:d6:44:3b:e3:36:33:f3:ce:99:
48:59:d9:72:e9:9b:f9:75:b6:f6:d7:1c:da:b6:6f:b9:69:57:
a0:86:55:ef:00:35:5f:1a:7c:c6:db:85:03:7b:dd:02:3d:c1:
3d:d2:0e:eb:19:9d:ee:5f:ae:55:3a:e6:ae:4d:91:1a:f5:02:
60:e3:38:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFCMjJEMUZCOTZF
MEI3RDY1REQwHhcNMjYwNjEwMTg0MzQwWhcNMjYwNjE3MTg0MzQwWjAYMRYwFAYD
VQQDEw02YTI5YjA1Yy04ZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Sfxd9aVT6ZO/eetFfxadLZHUjUSfLuXnXjwSqhaB+kYVNtZazKdHB3YII+i
kIxMMR/i7J2unTaJRaVYbaUHVjxrYtqbyYyF7MLTE+AtSnL5PAyDWtSyOJr/50e0
97CmHyav4PGVDAF+CkDOerhCQdH3+aNTv8cIVICI1Tu0lCkaTR3OPyDpXgLLY1D/
CBxm4gjJbcwxij5A6J9HCkirKT4Xub5lSQ5gB2EmMX2OPkc1bVz/k+7vbk0VqJm2
9zztP5XL1/fYGjzl71Ms4KT1FUfLSvlQbVhSX0XVvLjesm8ApuLD4eZDvEYLlzF/
rJZheCItJgP8Q+w0NBWctDFs3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEASwTBu
H9f6e7+2gcq7wdqScBhtMB8GA1UdIwQYMBaAFPyqCGIm3wKvg5T6si0fuW4LfWXd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThEQS8zNEYzNjEyRTI2
ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFxLURsUHF5TFItNWJndDla
ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19Lb0lZaWJmQXEtRGxQcXlMUi01Ymd0OVpkMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OThEQS8zNEYzNjEyRTI2ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFx
LURsUHF5TFItNWJndDlaZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk46lFcYbIPMZtwTBIh0gBsk0rfuiNlx0c7CWSlNrm0AFhp5DhR0dV61zD5jK
h/oY5CBj4jdlrSnkzYWYd71MO+HAioy8IpyPopGjEyHeShBzH1izk62n1sLwl85c
dauUxkMZ5qZIfeJrzvgEgupwi98p52AcbVDSy981IH1kM5qy612g058wO01FepV+
bGvhshTTem5uCqvGczxYQfhkeKWR6gwpWLnOBlQy9d1wRMVEnLT+CjGy/7e5WHX+
1kQ74zYz886ZSFnZcumb+XW29tcc2rZvuWlXoIZV7wA1Xxp8xtuFA3vdAj3BPdIO
6xmd7l+uVTrmrk2RGvUCYOM44Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 17:38:46 2026 by rpki-client