
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: /bSWNTa8f66Xodhu+wrGGLGsCzRZCY2UJeIIDEzjzoY=
Subject key identifier: BF:2A:C3:36:B4:FB:14:25:93:1C:16:3D:FF:37:C4:F3:0A:29:AE:C6
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 0661
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 0650
Signing time: Sun 26 Apr 2026 22:37:37 +0000
Manifest this update: Sun 26 Apr 2026 22:37:36 +0000
Manifest next update: Sun 03 May 2026 22:37:36 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: EfVyzlWgwxT5nL1339myD+ObdwK7F+4FskUdL4HIwHE=)
2: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
3: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
4: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
5: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Apr 26 22:37:36 2026 GMT
Not After : May 3 22:37:36 2026 GMT
Subject: CN=69ee93b1-3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:0b:1e:41:82:67:34:e2:7b:6a:bf:92:23:
72:73:9e:bf:cc:63:d2:6d:6e:e5:5c:3f:e6:13:f0:
52:60:7c:33:37:1b:c5:49:13:a2:77:a0:ed:57:23:
26:b9:42:e8:31:22:ff:a0:a3:3d:d5:e4:8f:51:bd:
43:b7:e4:7c:06:0f:8e:85:90:d0:5e:4b:1a:10:b0:
2d:17:f0:cf:21:80:89:fe:8a:6b:4e:45:89:4a:7d:
7c:10:df:ae:a0:c7:de:e4:8b:bf:27:85:98:dd:98:
0a:c9:76:87:1a:f7:4f:df:a2:57:de:4b:a6:0c:da:
70:dd:45:78:c6:a3:aa:46:6b:c6:ea:a1:0a:ca:26:
a7:98:55:ed:f5:8d:16:0e:1e:4a:b5:5d:22:81:d7:
17:0d:fe:28:70:80:01:61:06:6d:6b:e6:f1:cf:c0:
d5:9b:3b:89:ee:c0:52:6a:5c:ff:a0:18:51:23:9b:
07:12:dd:33:91:63:f1:5e:8b:38:06:30:c3:6f:3d:
91:14:27:db:3e:2d:97:6b:4b:f8:76:55:3e:e5:0f:
ae:fa:cd:bf:47:f4:72:39:c8:c1:0c:c9:e0:76:02:
b3:f3:7d:20:73:31:8b:a8:ed:bf:41:b8:da:14:7e:
2c:4c:bf:ea:44:54:69:71:7f:3f:73:13:f0:82:85:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2A:C3:36:B4:FB:14:25:93:1C:16:3D:FF:37:C4:F3:0A:29:AE:C6
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:c8:a0:6a:44:e7:db:b6:99:c6:0d:11:41:54:76:9a:b6:
ff:51:1e:09:86:35:80:69:21:6a:33:a3:3e:27:37:a5:30:99:
6d:8d:99:e7:a9:08:fa:75:e3:f0:29:90:71:fc:66:32:bf:26:
d4:eb:54:c2:5f:8e:1a:c7:2f:4f:3a:28:c5:a7:81:4b:19:1c:
15:ca:d9:07:28:da:36:29:ae:33:e2:a7:c1:4b:c9:12:d0:26:
3c:af:46:85:7f:aa:17:cd:d4:14:e3:e3:0f:f6:1f:83:c1:f3:
5f:3a:4c:8d:aa:0f:d9:ef:20:9f:48:b1:a1:67:5f:88:b8:32:
d4:32:2f:34:e0:da:90:69:f0:10:6a:cc:ca:a0:09:f2:3b:15:
b2:38:5d:71:c8:96:b7:6d:b2:01:bb:3d:3c:63:aa:60:20:bc:
e3:cb:ba:a2:c2:81:cf:23:2f:42:cb:05:71:6e:81:eb:b1:8e:
c1:0e:92:62:91:9c:17:41:09:38:6a:58:05:34:3f:a7:b0:bc:
9f:c6:7a:05:81:7c:fb:c3:0a:d8:b0:62:63:72:5a:1c:92:58:
f2:ae:09:d6:65:f5:c3:2e:c7:ff:52:9a:e3:b7:44:a6:a4:cb:
78:49:e4:eb:1a:1f:08:29:b2:40:06:2f:10:65:2b:94:c4:7a:
cb:dc:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:31:37 2026 by rpki-client