
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier: TByILcbmPFaTM+kVX8cffb9gzSIhW1M0HGjStDbDnMI=
Subject key identifier: EE:B5:40:8F:36:44:EF:F2:D6:D5:34:14:6F:25:9B:6F:FA:0D:E5:2A
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial: 048D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number: 0477
Signing time: Mon 29 Jun 2026 00:25:09 +0000
Manifest this update: Mon 29 Jun 2026 00:25:09 +0000
Manifest next update: Mon 06 Jul 2026 00:25:09 +0000
Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: tOWEmdfvBPaZBSPKi3jRTgZrgQd7IFalyaN5nH+Q42M=)
2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 00:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Validity
Not Before: Jun 29 00:25:09 2026 GMT
Not After : Jul 6 00:25:09 2026 GMT
Subject: CN=6a41bb65-9623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:af:5f:9c:61:f7:0d:3a:09:82:87:bf:fa:
81:43:f8:d0:72:33:ff:06:29:1a:40:ce:70:64:bd:
98:99:67:01:c9:e4:65:34:20:5f:b5:24:54:e6:6e:
39:d7:01:cd:26:48:f6:4d:af:d3:98:c4:f3:6f:a4:
81:61:64:08:4e:0b:e8:ef:27:bc:79:95:35:c0:84:
36:a8:50:4a:16:dd:7f:f1:c0:3c:4a:bb:4c:e7:a4:
df:09:74:f9:5c:4a:59:ff:24:39:95:b6:8c:01:01:
99:c7:42:10:b7:26:ec:5b:c8:f9:d9:d6:de:bd:fc:
d6:a5:81:47:af:ae:1e:60:51:a6:85:64:8a:f7:9b:
c2:22:b5:db:d2:0f:c3:68:ef:ba:49:17:03:ad:da:
43:2e:88:67:4d:56:3c:dd:18:74:70:7a:54:f4:4a:
a8:42:25:1b:6e:7c:b1:47:6f:8d:ea:06:47:4f:21:
27:56:b8:a9:ea:9f:8c:75:96:cb:f9:db:09:f3:e1:
6d:f1:21:80:fd:2f:84:06:bc:a0:74:b6:08:28:44:
d9:c1:96:72:fa:34:fb:b4:7f:23:bf:1f:e3:e3:63:
86:40:22:67:5f:6b:34:57:5f:34:d2:d2:86:2a:97:
0b:8f:2c:1e:9f:dc:ae:37:75:58:8d:b5:f1:46:cb:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:40:8F:36:44:EF:F2:D6:D5:34:14:6F:25:9B:6F:FA:0D:E5:2A
X509v3 Authority Key Identifier:
keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:38:7d:eb:1d:f2:7c:5e:62:d3:1e:81:9b:63:49:a8:5b:
ec:42:34:ea:af:68:8e:68:58:c3:6b:22:4f:36:81:b3:ad:6a:
21:f1:aa:24:84:b5:7e:de:03:11:a4:17:a1:e6:57:ca:a1:b3:
d3:f0:f9:c1:cf:d4:91:43:b3:8d:61:50:ca:95:13:7c:27:cb:
06:0c:a9:21:15:18:a3:71:d1:65:55:57:7d:70:93:bc:e8:67:
88:3e:ae:4d:8a:f2:db:88:77:1f:85:cf:86:6d:9c:e9:04:1d:
5e:c6:d6:57:2a:26:54:69:15:9b:4f:5b:95:ef:81:cc:ca:50:
18:2e:2c:26:34:db:2e:c3:41:57:72:54:9d:0d:9f:7d:93:5a:
4b:51:d3:0a:07:97:b7:f7:09:d0:47:23:b5:c3:40:6e:de:0a:
59:d4:d8:43:b4:d0:c5:7c:f1:90:48:01:fc:7b:e1:1b:5e:89:
5e:98:5f:93:c8:e5:c1:b0:79:40:f2:3a:ff:29:b1:5b:27:a0:
7c:d4:ea:c7:c9:bf:77:f4:49:d1:f3:af:e2:78:56:84:58:86:
6a:c9:d6:1b:c1:51:7c:d9:9a:70:b5:6a:5a:5b:8c:41:a8:5d:
52:d3:1b:35:2c:0e:e1:a2:24:c9:41:bc:ee:e6:41:d5:a1:84:
c8:93:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:24 2026 by rpki-client