
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json)
Hash identifier: 0Z3jsmC1TU4UFy/3mQUZo8wODRNQT7T1tk1BQOiIpck=
Subject key identifier: C7:77:BB:94:21:7E:4A:C4:F9:32:36:10:D1:23:2D:FC:67:E2:CA:39
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
Manifest number: 019E
Signing time: Mon 01 Jun 2026 05:13:01 +0000
Manifest this update: Mon 01 Jun 2026 05:13:00 +0000
Manifest next update: Mon 08 Jun 2026 05:13:00 +0000
Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: OhHvjgo0r1c3JfO9Tu0iHndzuE1yH+zuV036BJwSu6U=)
2: ECD8F45832C711F1809C448B9A833773.roa (hash: vdA7Y0+FQqP1B/PSwPlcTDY8ijwH4/m6ZdsYH/Ip2Uo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Validity
Not Before: Jun 1 05:13:00 2026 GMT
Not After : Jun 8 05:13:00 2026 GMT
Subject: CN=6a1d14dc-39af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:d9:5b:02:f4:9f:7a:03:d0:1d:a6:1a:98:
81:e0:f3:cf:13:ac:ee:01:de:75:b7:80:5b:73:c5:
5a:71:99:5e:68:d7:59:7c:1d:c6:df:fa:37:d1:df:
aa:19:1c:27:de:00:a1:63:98:19:8c:78:2c:8a:2d:
ec:a4:bb:e9:7b:cb:8b:5a:79:7c:96:5d:98:b1:96:
5e:9f:a2:bb:75:bb:e5:be:3f:e5:d3:4b:3f:30:56:
ed:21:57:cd:e7:19:0f:85:f1:55:ab:e0:9b:e1:a4:
2a:21:76:59:a8:3f:1b:22:42:e2:c0:bf:2f:ee:de:
db:d4:0f:fb:9b:37:0b:2f:ba:f9:f4:17:c5:09:92:
0f:de:a9:71:d6:8d:47:9f:24:45:f8:61:bd:bd:c8:
5b:b8:0e:59:39:1f:95:f5:0a:35:98:87:a1:b3:af:
95:7b:e0:54:a1:32:ac:ce:f9:8e:3f:64:06:89:3a:
58:d3:00:28:09:53:f4:cc:ce:57:64:31:f6:91:dc:
f1:cf:35:65:9c:75:68:36:63:de:11:ea:2c:03:fd:
c7:ad:fa:81:a9:f2:d5:3b:92:1b:b0:3e:14:8e:80:
b6:cf:d8:cf:5b:74:01:13:75:66:47:14:75:de:cd:
ea:cb:b0:3d:71:51:35:a8:06:5d:87:42:8a:7d:f7:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:BB:94:21:7E:4A:C4:F9:32:36:10:D1:23:2D:FC:67:E2:CA:39
X509v3 Authority Key Identifier:
keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1e:90:b4:4e:05:87:0f:07:12:e3:7e:e8:b2:8e:07:cc:af:
a1:da:41:dc:02:96:8e:17:86:bc:8d:9a:ed:84:bf:9e:a3:e7:
b4:72:c0:03:99:33:c3:af:bd:cd:29:09:1c:63:52:9a:97:b8:
49:9c:72:52:a3:0d:ba:08:0e:a1:58:08:52:9f:c9:f6:95:8a:
b1:48:4a:53:4e:ee:cd:64:cf:3f:a4:f7:9a:5e:82:dc:b4:44:
12:a7:86:11:5a:41:9d:f5:08:76:c7:ab:61:4f:f6:af:65:88:
ed:d4:54:89:f1:4e:cf:e2:b9:74:40:f2:37:e3:5c:5a:f2:fb:
1f:cd:f0:1c:73:83:a3:69:00:9c:6f:c9:27:b5:3b:7b:74:31:
65:a8:0c:90:f9:7e:58:aa:a7:ab:af:b7:39:0e:b2:0f:e3:74:
49:84:4b:29:e8:7b:f8:ae:e3:c7:7e:73:6a:eb:fa:fb:a9:85:
99:6b:11:90:9d:b2:9f:8b:bc:88:de:ec:17:ac:7e:ba:93:e0:
3f:55:20:cf:1f:4e:87:78:82:c3:4f:93:ee:f6:3a:df:af:b1:
6f:18:ec:20:d5:04:94:97:ae:21:de:db:ce:54:17:d7:ca:98:
aa:b9:1a:b9:f1:5b:1b:7c:d6:42:97:8e:e9:0b:4b:dc:86:63:
e9:60:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:47 2026 by rpki-client