
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: 0MU8MnVQgjisqDOddIoesBd7FzMtOFIyEpNC1QoZVb4=
Subject key identifier: 55:F4:A0:3B:6B:EE:6A:15:81:D2:3D:79:AF:48:EA:11:CB:BC:6E:05
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 06A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 0695
Signing time: Tue 08 Sep 2026 22:32:37 +0000
Manifest this update: Tue 08 Sep 2026 22:32:36 +0000
Manifest next update: Tue 15 Sep 2026 22:32:36 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: /GZVzSWnHVJY/S/hi8efbyXR6kICSMwffhlNiI/CFYU=)
2: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
3: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
4: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
5: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 22:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Sep 8 22:32:36 2026 GMT
Not After : Sep 15 22:32:36 2026 GMT
Subject: CN=6aa08d04-76bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:0b:28:fd:0d:76:c1:45:1a:86:1f:38:5e:
26:1f:7d:b6:b1:82:e4:ae:6a:8c:0e:d9:5f:ba:9f:
7d:70:0b:ad:3f:b1:89:ee:ef:83:e9:30:8f:2a:ea:
99:85:85:bc:20:f8:4c:d2:49:2a:7a:e0:d7:6a:d8:
31:4f:df:2b:ba:b7:30:86:27:b5:18:1a:0e:89:f0:
03:ca:e0:b6:be:3b:21:87:8d:21:9c:7f:10:f7:8f:
19:1a:56:44:03:81:8b:ff:69:aa:48:11:8b:18:1e:
02:da:00:3b:b1:c6:46:b5:2d:c8:93:6b:e1:33:9a:
19:34:15:cd:31:59:b7:11:f1:df:04:e9:d5:cf:60:
b5:0c:b2:7e:29:78:ce:89:be:e5:fc:92:91:77:27:
17:38:f2:d1:cc:d3:83:89:91:e9:8c:46:d4:59:e1:
80:0a:21:b9:91:99:01:c2:83:20:fe:85:29:c9:95:
d4:a4:fa:1c:f3:fe:1a:37:f8:8f:f4:45:78:74:80:
91:c0:2d:a3:81:33:50:76:15:72:b5:04:ae:ff:97:
62:9c:fe:f4:53:cb:84:56:41:53:36:eb:5b:da:ad:
94:ef:d2:6a:72:fb:da:db:a4:58:7b:b4:fe:34:c2:
09:e2:3d:f6:2e:6d:74:f5:d2:cf:ef:d9:88:97:a0:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F4:A0:3B:6B:EE:6A:15:81:D2:3D:79:AF:48:EA:11:CB:BC:6E:05
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:20:4d:4e:5d:c6:e1:da:2b:6b:0d:4e:96:38:4d:48:03:
08:99:2f:a2:28:35:d6:9e:bb:0f:f3:10:f5:23:aa:12:63:37:
26:01:00:9c:cb:31:1e:21:03:bc:05:15:40:32:d5:9d:97:54:
75:38:12:02:c2:68:36:03:cb:37:6b:47:7b:6f:ff:69:41:ab:
2a:ea:30:72:32:be:01:a0:59:4c:69:df:d0:f5:34:61:88:8f:
b6:26:6b:dd:c3:52:fe:8e:32:02:8c:47:24:6b:e1:e7:fe:d7:
50:fe:ca:b5:ee:80:5f:1e:0f:49:2b:4e:32:84:cd:15:7c:b3:
c1:a7:15:f3:25:fb:91:49:4d:b8:c7:92:1a:6e:ca:e0:53:15:
52:1f:5d:14:9e:4c:06:d6:4b:0d:6e:5b:0a:ea:74:5c:25:c0:
7b:0e:af:1f:de:77:7e:66:fe:a4:b3:ba:8f:c5:e8:a1:76:55:
84:02:84:aa:e5:b8:c6:8b:5b:4d:fc:9c:bf:5a:6d:ca:ae:7a:
47:e6:98:44:b0:13:61:c1:d4:f0:ae:86:49:6e:8b:73:78:42:
a9:88:f5:ed:5b:e1:a0:7d:35:fc:0a:c3:38:9f:b1:06:c7:a3:
2b:2e:b0:aa:a5:bf:53:21:92:e5:2e:dc:02:f9:ab:68:a9:4c:
d4:9f:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:15:03 2026 by rpki-client