
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json)
Hash identifier: GpyQRdpF8k5IGAjbFTW4L86C2arTqt6AzIJ8ew8Fqys=
Subject key identifier: 18:7E:00:10:7F:2A:A9:E3:54:5C:D4:E8:05:F6:89:04:93:E1:C5:F6
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
Manifest number: 0186
Signing time: Mon 01 Jun 2026 05:18:09 +0000
Manifest this update: Mon 01 Jun 2026 05:18:09 +0000
Manifest next update: Mon 08 Jun 2026 05:18:09 +0000
Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: 4oWee8tTq+HFHkpOJcT+9IqEEU9xUh8HdVCUSfSNGXE=)
2: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: TzkPBOuu8iVT94DUClMMw+tXF1MG5WJOQ0I22k+/nfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Validity
Not Before: Jun 1 05:18:09 2026 GMT
Not After : Jun 8 05:18:09 2026 GMT
Subject: CN=6a1d1611-9769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:e6:d5:e8:0d:18:34:87:2e:f4:ff:76:2d:
a0:ba:33:4b:c5:7f:ee:a2:d9:69:c3:de:1b:b5:f5:
d0:14:25:b9:47:3a:d0:7b:ae:7a:dd:90:9c:aa:60:
0a:b1:61:22:da:c8:41:cd:38:44:9d:f9:2b:84:53:
ba:2b:08:ce:02:c7:51:c8:38:8d:de:da:64:46:0e:
a8:f0:ea:f5:71:fa:fe:8c:21:a4:d8:4e:5c:6d:3e:
c8:11:ae:40:4c:e9:1d:69:11:4a:93:8e:67:00:ea:
da:2e:ae:d6:10:ce:0b:ec:b3:da:57:f0:44:a8:33:
e0:46:f4:69:32:0e:dd:d2:0e:ac:7d:e6:a9:a2:ce:
22:9b:09:5c:ae:ab:df:64:33:50:99:f9:03:fe:32:
31:fa:0f:44:88:cc:92:09:1d:79:7c:a6:0f:0b:4e:
1e:4a:5d:e4:3c:80:e2:8f:c0:23:2d:5a:25:af:7b:
24:6e:c6:a9:38:6c:5f:19:e4:e5:65:d0:9b:09:6f:
88:62:b9:08:6a:fe:31:53:14:9d:56:3f:2c:f9:c7:
40:03:7e:d0:64:bf:da:c0:6d:5e:13:e5:59:de:b3:
cf:f5:7f:01:38:82:f6:2b:ca:81:cc:96:18:0a:b3:
03:9a:a9:d6:d8:28:3e:3b:a3:a0:7f:2a:a3:04:be:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:00:10:7F:2A:A9:E3:54:5C:D4:E8:05:F6:89:04:93:E1:C5:F6
X509v3 Authority Key Identifier:
keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:f2:00:e9:20:07:57:f3:37:e7:63:a4:35:04:c5:14:4d:55:
44:be:75:9d:9a:32:10:d5:44:71:e8:c2:c4:c0:f2:1b:5c:ec:
01:49:9c:77:b7:8a:45:e4:5d:8e:57:26:da:e9:e6:ba:ec:6d:
e4:d7:9a:d6:fc:5f:8d:2e:7a:0e:fe:b2:95:32:21:4d:a8:70:
8c:27:be:7f:c9:82:c2:62:c5:e7:2c:2a:55:ae:78:bf:a4:6f:
ef:97:f8:04:87:af:7b:b9:b0:77:22:b0:28:94:17:91:fb:40:
b6:dd:26:0f:f3:7e:98:e1:88:8c:91:54:67:bf:02:7d:6d:4f:
3c:d3:0a:92:ab:e7:a4:28:20:57:58:1b:e4:ad:b2:f8:7a:71:
e1:27:6e:85:b6:5c:25:11:57:ce:81:19:04:8a:3f:0c:d0:4c:
0f:98:90:c5:4d:6a:86:fe:89:81:55:69:27:82:93:6f:6a:f3:
9d:a7:2a:04:51:ae:f5:b6:06:b2:94:91:bf:94:47:df:8f:eb:
83:a8:98:d1:77:4d:45:17:7f:8b:ac:46:71:02:9f:0e:ec:88:
ec:e2:b7:3c:f5:c6:ee:b1:80:94:b9:49:fc:cd:e1:4a:d1:4d:
c4:08:b6:59:a1:7d:0d:f0:72:0e:bb:01:d7:20:7f:bf:74:3b:
4b:1f:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:43 2026 by rpki-client