
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json)
Hash identifier: TWy1I5+a02iwfuoU+Pt2wJ4TjxnDF2TloShR28QpSOw=
Subject key identifier: 56:3C:C6:20:CB:4E:DD:21:FB:B8:B1:ED:AE:6B:50:EA:96:97:76:AC
Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Certificate serial: 06F6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
Manifest number: 06EE
Signing time: Thu 04 Jun 2026 21:59:21 +0000
Manifest this update: Thu 04 Jun 2026 21:59:20 +0000
Manifest next update: Thu 11 Jun 2026 21:59:20 +0000
Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: KHHjJ/LkLo7GhQwbLARv6Vbk9NiUSWS4odIlY+JZ/3k=)
2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: u0l6ewd10l3CnKNZWLyz/pX9vsxOgLw5k8pS9qZkY3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 21:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Validity
Not Before: Jun 4 21:59:20 2026 GMT
Not After : Jun 11 21:59:20 2026 GMT
Subject: CN=6a21f539-0f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f0:f4:ea:f2:81:17:df:6c:a8:fb:17:bc:cf:
96:4d:05:34:e6:8a:46:8b:3b:61:2d:77:7a:b7:e8:
ab:a9:22:4d:9b:53:13:4f:9e:f7:a4:40:89:ee:b3:
f2:47:45:96:98:12:28:12:70:3c:65:3c:79:9a:59:
a8:51:85:bc:ef:9c:fd:a7:68:65:82:45:8b:8e:82:
e4:c6:13:c3:f3:dc:27:23:6c:68:52:8d:67:1a:12:
65:48:5f:09:55:a2:dd:53:70:dc:b5:9b:57:28:d0:
ec:e5:7a:dd:61:4c:df:4b:9f:21:bd:e1:f9:21:41:
2f:78:eb:37:95:14:f6:0c:f6:48:ca:49:7f:fc:7f:
ea:dc:5f:1c:51:33:82:fa:13:fa:55:24:4c:0b:91:
4d:0a:a4:ac:60:92:59:17:57:7c:1c:eb:b0:6c:45:
f3:e2:29:7d:d9:5c:ea:04:60:18:e9:ad:a3:a2:1e:
a4:b2:ef:83:3d:9e:25:04:07:f7:e8:ec:fe:6f:97:
a1:d9:09:1e:34:02:bc:5b:e9:34:a5:49:01:c9:9e:
df:00:19:55:aa:9c:b1:e1:80:bb:70:38:b8:8a:c4:
dc:7f:5c:c5:ff:19:31:39:12:a0:3b:dc:45:1b:f2:
93:9b:2c:d3:45:4c:74:c7:a5:6f:c4:b0:74:bb:35:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3C:C6:20:CB:4E:DD:21:FB:B8:B1:ED:AE:6B:50:EA:96:97:76:AC
X509v3 Authority Key Identifier:
keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:82:b9:da:5f:6c:c9:94:94:7f:45:aa:5c:b6:1c:cb:62:e7:
94:76:2b:20:22:d8:a2:7b:ed:18:ae:4f:9d:97:90:ee:b3:e6:
b9:a2:ce:bd:d3:31:f6:72:bf:b1:98:c3:60:5c:d3:01:03:b1:
ad:4b:40:3e:ff:c9:fc:f4:be:87:a2:85:9a:a3:11:7a:cc:96:
22:94:2c:d2:17:03:50:0a:cb:dd:f9:4f:6d:fd:7f:50:86:1c:
d5:27:a7:91:c3:56:e2:fa:41:88:4f:06:ca:ce:a0:c5:0f:0e:
d4:59:2e:e8:c5:24:f0:81:af:82:8f:9b:dc:29:d3:a1:04:44:
18:50:d0:cb:06:97:b4:06:15:ed:0f:12:2b:47:32:fd:98:e5:
bc:59:94:e8:0b:b6:cc:e9:ab:dd:b2:34:6f:ba:3b:b0:0c:8e:
06:d7:8b:bc:83:8d:07:ce:47:71:38:63:3d:58:c4:a8:03:39:
4b:88:5e:42:8b:33:12:c4:8f:d4:22:5f:0d:0b:26:78:38:4b:
09:d0:dd:68:41:c0:3f:20:8c:db:64:47:ab:e7:a6:c6:bf:e3:
64:ca:dc:e5:33:fa:5d:23:56:58:ee:b7:e4:a9:b4:9c:2e:83:
9c:20:fa:0c:5e:91:cd:5f:9f:e4:dc:af:e0:75:b8:ca:43:21:
14:9f:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:05 2026 by rpki-client