
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File: k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier: msXFhcsGjhWPqYf6wkv/U+17g8oFU+YPvHEpE9OiU7o=
Subject key identifier: 38:58:64:B8:64:B0:D6:AC:B3:99:E1:99:B4:05:58:E8:48:13:A8:AB
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer: /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial: 084F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number: 0846
Signing time: Mon 22 Jun 2026 20:59:11 +0000
Manifest this update: Mon 22 Jun 2026 20:59:10 +0000
Manifest next update: Mon 29 Jun 2026 20:59:10 +0000
Files and hashes: 1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: jJT/0R3qk2pH6zfXpAbnm+Qj96HHro85/o0be0IXZE8=)
2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: fwuIOJ3NO3h7Aw2rK766OXsCZm+Z7FPR85wnCI/U1gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127 (0x84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Validity
Not Before: Jun 22 20:59:10 2026 GMT
Not After : Jun 29 20:59:10 2026 GMT
Subject: CN=6a39a21f-d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:eb:22:74:86:91:37:ec:a0:0a:0b:01:75:bd:
a9:64:c2:6b:f6:3c:aa:4a:5c:5b:a9:0f:32:37:cd:
e3:c1:e2:32:6e:a9:9d:8a:6d:92:38:5b:74:cb:b0:
df:14:c4:e6:d3:04:09:24:df:9c:9f:1f:d4:88:94:
19:be:52:ef:9d:80:3e:e5:7e:47:83:34:4a:8a:bf:
4b:5d:f8:aa:34:2c:dd:44:83:d3:d6:c9:7d:da:ec:
61:c1:37:57:f3:10:20:f8:ff:b5:c2:0b:a1:f7:cc:
cb:00:92:21:43:37:47:e6:a9:ca:e4:91:f4:4e:7d:
85:fc:47:eb:96:d7:ce:76:3d:32:05:34:f6:74:ab:
6a:61:84:0a:92:3d:bd:b4:e8:62:75:07:81:15:83:
03:06:c8:66:e7:a8:c4:61:0e:7b:c6:0a:48:4e:0e:
50:6a:92:43:a0:31:77:7f:2b:28:f6:74:73:03:a5:
b4:a6:f0:4a:f5:5e:d2:80:d0:29:b8:f1:7e:d1:f9:
58:e5:fe:cc:98:e6:00:38:06:9b:25:cb:cd:9c:0c:
1a:c6:21:d0:ab:5d:7c:d9:2a:38:ba:c0:4e:6e:c9:
e4:75:40:25:e1:05:ce:54:bc:0f:0c:a2:80:61:dd:
77:3d:04:4e:05:f4:58:03:fc:b0:53:77:d9:3b:f6:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:58:64:B8:64:B0:D6:AC:B3:99:E1:99:B4:05:58:E8:48:13:A8:AB
X509v3 Authority Key Identifier:
keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:0c:e2:8c:5c:fd:e1:aa:f2:79:af:3b:3f:d7:3a:15:45:
63:70:ca:47:a6:2f:9e:31:4d:9d:66:65:9d:d1:ba:51:22:ed:
4f:2d:8e:49:8a:a8:cc:28:36:10:43:1d:c9:84:74:62:98:a2:
3a:37:12:42:e7:51:9e:b0:41:14:94:cb:a6:ee:25:b8:aa:bf:
0e:fd:d7:c4:10:58:46:10:b6:bc:69:11:b2:52:52:9c:20:67:
24:af:49:48:13:ca:4f:86:89:03:28:27:f1:ff:03:80:d1:a5:
0c:e3:38:05:80:3a:c5:c0:fe:5c:1c:c9:8b:a7:05:ad:4e:5b:
cd:a5:f3:89:df:ec:43:80:fb:ae:2e:20:4d:79:73:43:98:13:
57:84:14:3c:c2:c7:2f:4c:30:28:b3:01:fd:09:66:ee:26:e9:
28:57:ee:55:df:9c:3b:e0:13:c5:e8:66:e1:ba:0e:fa:34:88:
b3:c4:ce:fb:a7:de:1f:d7:b1:81:0b:b2:6b:9a:17:c4:a0:b5:
db:1c:78:17:1f:4b:ca:58:ca:cc:bc:d9:a0:1f:35:29:95:1c:
d0:cd:f6:e8:1b:f7:e4:ba:4b:70:ac:ba:b0:61:2f:fb:74:b9:
a0:14:f2:8f:18:57:b2:f5:c3:be:22:92:f1:0f:5d:36:5a:06:
fa:ec:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:03 2026 by rpki-client