
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: OhFKMrCWzv3m5KMvs8Dl0m4i0TRVt9jhUvLOmlf5TAs=
Subject key identifier: DA:DF:77:1C:DF:37:17:6D:EA:8F:B4:89:41:FD:12:CC:6C:5E:1D:3D
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 0678
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 0667
Signing time: Wed 10 Jun 2026 22:43:13 +0000
Manifest this update: Wed 10 Jun 2026 22:43:13 +0000
Manifest next update: Wed 17 Jun 2026 22:43:13 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: oSCWzJ/TdrMdIJj3skskffGO3aPCqsrIvkOiUi/NNB8=)
2: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
3: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
4: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
5: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656 (0x678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Jun 10 22:43:13 2026 GMT
Not After : Jun 17 22:43:13 2026 GMT
Subject: CN=6a29e881-4b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:79:6b:b1:5d:63:14:62:f9:02:30:df:6e:
7b:97:17:b5:44:80:10:15:23:3f:c0:40:b2:aa:a1:
c3:be:2e:35:17:e0:be:d3:f7:a7:04:ab:12:31:d0:
dc:81:6c:9b:c9:25:9b:2f:fe:eb:f5:8f:1f:e8:30:
e2:14:c0:d2:9a:7b:67:ef:86:e7:72:57:14:b1:72:
7e:5a:87:b8:02:47:82:70:f2:c4:b7:e6:da:88:f1:
e2:91:95:cc:df:30:ab:ac:90:7c:85:ad:e8:dd:10:
b3:d1:90:dd:7d:70:a5:8a:d4:0f:81:ec:78:ba:aa:
1a:79:a6:15:8c:41:ea:51:c2:49:47:6a:8a:ca:f3:
f6:e0:83:18:45:05:78:eb:17:20:bc:47:64:49:e4:
d1:88:b1:64:84:82:22:3c:ff:67:89:92:cf:5d:60:
ed:4e:9a:a9:d9:01:92:31:97:b8:76:67:96:1e:7f:
45:5a:54:e1:50:e7:44:1b:cc:f6:f2:a4:1c:ea:62:
d1:df:4f:c3:7a:cf:54:1b:99:1e:70:f5:ed:0c:01:
1b:92:02:5c:78:3e:6e:e6:c9:7d:c9:62:87:84:9c:
30:a3:db:ba:e3:d9:ec:f1:01:fc:53:13:b9:4b:c4:
65:be:80:7d:d3:50:3a:9f:c6:11:83:2a:e7:0d:c8:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DF:77:1C:DF:37:17:6D:EA:8F:B4:89:41:FD:12:CC:6C:5E:1D:3D
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:32:f2:6d:df:20:46:20:26:a7:77:ab:be:3e:05:45:d9:7a:
d7:fc:9d:31:75:fc:5a:f4:aa:c7:f8:71:cc:ec:bf:fd:d4:cc:
1d:13:91:21:d4:ad:1d:e6:8c:a3:58:69:11:72:12:19:63:6d:
8a:85:27:da:ae:4d:a9:17:eb:b1:b5:7f:28:39:51:9f:4d:42:
06:52:2d:c7:a6:e5:5c:57:25:50:27:6b:e4:00:13:df:a7:12:
58:57:fa:63:f0:6d:80:21:3c:cc:89:25:5c:06:37:52:60:82:
d2:93:13:8b:70:f7:be:9d:66:2b:c9:0c:d2:5b:13:ae:62:52:
17:e7:9a:d2:93:4c:c7:a7:48:58:7f:35:77:6f:e3:05:07:fc:
18:6d:df:ef:5a:c4:e1:60:f0:87:22:bf:4e:6e:12:61:cc:2a:
8c:73:56:5c:95:ad:bc:4a:16:62:fb:82:61:2d:80:f9:7a:9f:
fb:3f:37:6f:b6:be:e4:01:15:06:1e:0b:06:8a:4e:42:c4:ab:
a7:07:69:5e:b9:51:44:5e:fb:3f:48:7d:74:2b:b5:0f:c9:6b:
8c:ab:bf:56:9a:f3:b6:9e:95:d1:49:fc:2b:c4:47:9c:f3:31:
20:2e:a9:96:52:ab:ae:6f:4a:56:c3:dd:d5:33:4a:44:62:e0:
a6:eb:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:30 2026 by rpki-client