
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier: tnwV6AJEyVV5Kp2iHGKp6XjSmkSW3xry05n9WUjGbdQ=
Subject key identifier: 9C:45:85:52:73:16:C7:EE:3C:34:4F:E8:E8:82:94:3B:7D:22:A3:24
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial: 0476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number: 0460
Signing time: Fri 15 May 2026 00:16:25 +0000
Manifest this update: Fri 15 May 2026 00:16:24 +0000
Manifest next update: Fri 22 May 2026 00:16:24 +0000
Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: HNTWfQKyGvd237oPoKRuwMKTIthH4i6DYVK9HxXKipg=)
2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
4: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Validity
Not Before: May 15 00:16:24 2026 GMT
Not After : May 22 00:16:24 2026 GMT
Subject: CN=6a0665d8-5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:a7:8a:26:11:03:4f:64:03:9b:d6:79:3f:
cc:3c:51:b5:45:b2:09:1f:0e:16:4b:f1:5d:80:1c:
26:23:57:4c:4f:ad:3d:5a:de:8b:df:df:aa:20:36:
08:1d:d9:52:c5:27:2b:78:d9:96:9d:d0:fc:c1:fc:
43:22:be:38:69:09:33:e4:6f:9d:28:21:b0:3d:63:
94:35:50:d3:b2:23:57:4a:02:a6:ad:f5:a3:80:0b:
33:0c:0a:58:51:d6:47:27:9c:8d:2f:77:15:ae:77:
6b:3a:a0:1e:90:4f:f1:82:fe:a1:bf:87:0f:53:03:
99:11:ae:5d:dc:71:03:a7:76:20:9c:2d:97:12:20:
1b:07:5a:c7:5a:11:ab:cb:e0:ae:5a:18:1b:fc:8b:
d8:8f:1d:2e:41:55:a0:b2:d5:69:25:b2:5f:4a:49:
f1:b2:a5:f8:4f:b9:7b:10:ad:c8:36:87:c1:45:bc:
9a:5f:8c:67:0e:f1:9b:a3:2a:63:af:73:2b:95:9a:
3b:ca:bf:b7:5a:6a:ba:47:44:33:ad:51:26:ab:0c:
99:cf:86:9d:65:85:1d:a6:6a:56:af:7e:0c:e0:fd:
38:ae:f2:44:7b:2c:98:cd:61:99:67:5c:f7:19:c8:
5c:03:ec:9c:39:3f:fc:02:6a:84:3b:2d:a4:91:6f:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:85:52:73:16:C7:EE:3C:34:4F:E8:E8:82:94:3B:7D:22:A3:24
X509v3 Authority Key Identifier:
keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ff:69:85:15:15:ff:de:7a:7b:dc:a3:53:0d:2a:30:fc:56:
99:b7:20:58:8a:ad:9a:d6:76:a0:52:30:5d:7f:48:44:68:b0:
6a:d9:a5:0a:9e:24:c5:62:1e:5f:1f:4e:22:55:aa:3f:da:ff:
00:ef:85:05:07:25:70:f8:2f:22:05:8e:c6:5a:be:ef:1d:3c:
42:e4:b3:af:72:10:2d:73:38:fa:b2:fd:2d:ff:9f:63:da:51:
c9:a5:a2:f7:94:09:48:b2:a5:ce:80:9c:3a:25:24:41:57:66:
28:1e:e5:63:4e:b2:b0:d0:ea:12:23:83:77:cf:ca:78:f7:95:
7b:15:e4:75:8b:83:40:76:01:3a:2c:c0:fa:d5:46:be:a7:b2:
06:e1:a3:e7:07:5e:17:cc:0e:7a:40:5d:16:a6:e0:a0:8d:f8:
71:7d:9f:0c:12:7d:cc:7f:e7:26:eb:10:7a:bc:b8:92:8c:5f:
6b:3f:c6:99:40:2a:71:28:51:df:2b:2a:47:79:61:d5:19:6c:
63:17:84:e0:81:34:43:42:a4:e5:bd:a2:34:5c:6d:16:ae:16:
fe:c1:48:26:ea:be:70:55:75:8e:b3:0a:48:04:62:42:f2:39:
71:31:d5:0c:00:f5:3a:2f:d2:8f:e6:4c:4f:6c:ab:fe:54:46:
8d:fa:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:12 2026 by rpki-client