
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier: U+S7pfb+Dwnyt6cDJ3kTHdtRPs8m4di8RTFC7zpbgyc=
Subject key identifier: BF:B4:9A:79:30:86:00:56:C7:54:79:B5:A1:A8:CB:0B:6A:07:DF:7F
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial: 19B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number: 197E
Signing time: Wed 10 Jun 2026 16:24:01 +0000
Manifest this update: Wed 10 Jun 2026 16:24:00 +0000
Manifest next update: Wed 17 Jun 2026 16:24:00 +0000
Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: 1Y5stNspT2RnPQJ28mYhB7YAeIycAFcd2LK8QCtXONY=)
2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=)
3: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6580 (0x19b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Validity
Not Before: Jun 10 16:24:00 2026 GMT
Not After : Jun 17 16:24:00 2026 GMT
Subject: CN=6a298fa1-22c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:33:49:16:79:e5:27:28:53:83:36:1c:63:
30:21:00:79:61:78:e1:4f:d6:4b:a3:72:49:ee:6c:
2c:f4:37:15:40:55:a8:00:90:6d:6f:8a:a6:48:e8:
0f:82:35:7c:90:1a:94:9b:de:68:b6:89:f1:29:6d:
28:1d:d8:b1:a6:14:fe:d1:fb:80:2d:0c:11:cc:11:
0e:4a:bc:dc:00:55:08:61:0f:6c:1d:32:97:6a:ae:
f7:57:10:18:5e:2c:c6:80:cc:cb:d2:b5:c2:e4:0a:
80:c2:b5:64:47:b3:c6:3e:12:02:82:23:cd:a8:a0:
6a:ba:76:eb:68:74:f3:f5:41:46:80:c9:e9:e6:a5:
d7:8d:da:e0:a0:de:e7:66:21:7c:d8:f9:2d:bf:77:
be:ea:b2:4a:bc:79:45:84:ba:4b:ce:09:8b:9a:26:
46:9b:e2:75:af:f9:24:f4:2b:fd:16:e1:25:d4:1b:
4e:15:89:c4:d6:57:e5:ad:55:31:0c:7f:94:33:5e:
00:6c:e1:52:74:42:3f:18:7a:6f:29:04:b4:62:60:
1a:ce:17:7a:b5:75:03:d7:79:b7:24:c6:94:2e:70:
cd:75:e8:b6:51:c6:97:84:f8:90:99:43:69:16:3b:
1f:96:7e:d7:8f:b6:7b:35:09:e8:59:aa:c0:07:dc:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:9A:79:30:86:00:56:C7:54:79:B5:A1:A8:CB:0B:6A:07:DF:7F
X509v3 Authority Key Identifier:
keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:f7:bc:1b:91:a4:79:3a:1b:ab:98:6b:14:13:f9:23:ee:0a:
63:4a:1e:47:77:6d:ab:06:1d:e3:95:9c:b0:43:51:a6:2c:c6:
3c:42:62:a9:b1:55:98:db:45:ab:a1:f7:39:c5:cb:6f:8d:08:
55:19:30:6b:84:6f:26:56:5a:e9:5c:b4:ec:94:64:bf:5e:8b:
43:20:3f:d0:fd:5b:9e:86:7d:cf:97:03:66:7b:59:36:0a:b8:
7f:0c:91:d1:dd:74:a2:9f:f3:bf:83:f2:3b:bd:cf:2f:a9:df:
3d:73:4c:62:04:96:75:f2:86:37:3b:9d:a4:49:bf:d2:8f:c4:
5c:b2:c7:1b:34:ba:9e:47:a5:e2:92:e9:79:2d:71:1b:ec:d7:
b1:e8:cb:f8:41:c4:3c:fe:d1:aa:a9:f2:b9:e0:2e:b2:c5:05:
00:44:e5:64:5c:fd:99:8e:2f:17:17:f2:65:db:89:a2:26:1c:
61:61:58:e4:94:6b:f9:52:86:d4:19:2f:d8:38:7b:0a:9a:97:
de:cc:f1:17:6e:a5:83:d4:7b:e1:26:a4:1e:2d:93:b5:a0:1d:
ea:fb:b8:8d:c3:18:d8:3a:90:89:45:74:71:10:67:f0:c5:12:
55:79:07:4b:46:31:25:a2:d6:1b:91:39:27:5d:74:ab:55:8d:
0e:97:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:37 2026 by rpki-client