
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier: I6YS1FTn8r/uuTw2LTuZxuHvsRAZR6Q1C97CaL3Po74=
Subject key identifier: FD:B7:81:55:DC:03:BD:F8:A6:9F:D5:AF:38:CA:F1:31:62:08:5D:5B
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number: 016A
Signing time: Mon 01 Jun 2026 05:38:05 +0000
Manifest this update: Mon 01 Jun 2026 05:38:04 +0000
Manifest next update: Mon 08 Jun 2026 05:38:04 +0000
Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: A+dQqiqbak43wtpGvnpU1uNJ+O0zAF19fNLm06+Mn94=)
2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: kDnQaZkgd3eRRV1TX5nuWTf0BQqvLUjGytAokBZ6vug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Validity
Not Before: Jun 1 05:38:04 2026 GMT
Not After : Jun 8 05:38:04 2026 GMT
Subject: CN=6a1d1abc-03e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:b1:d7:e6:fe:39:d2:9f:6c:db:57:f4:da:
4c:7c:1c:7d:d5:bf:67:87:fe:92:11:81:a9:79:84:
82:3b:c9:d1:8d:2b:78:c8:ca:e7:9f:d3:d6:21:15:
eb:1c:3e:59:c3:38:c0:68:97:ba:94:c5:65:7e:6b:
8c:82:b8:1b:c5:26:c0:9d:98:b9:31:bb:3e:c7:e2:
7f:71:b8:06:3f:85:cf:49:ad:4a:c7:4b:d1:65:61:
c8:85:f5:cf:05:6e:c8:b3:d4:ce:25:4a:5b:de:1c:
1b:d2:0e:04:0b:69:d8:09:bb:e5:ee:52:61:90:b2:
b8:f2:ce:1a:21:d1:80:16:41:ec:53:96:f3:e8:ce:
69:d1:de:d1:39:9b:2c:ac:7d:07:da:f6:78:4b:56:
54:86:22:9f:36:4f:0a:da:a1:b0:93:8c:64:19:0a:
7c:b4:1f:33:3f:94:f6:9f:9c:d9:0a:d2:ec:e9:f8:
26:fa:de:26:50:50:ae:f5:6c:a7:5a:8b:f3:68:ed:
56:c0:de:6a:d7:f6:d2:ac:d7:a4:82:ac:54:ea:bc:
fa:3d:23:38:f9:77:97:9c:6e:b5:8d:0f:18:c9:2c:
fc:a5:4b:ce:3d:86:0d:27:e9:6c:8e:95:7a:cf:a9:
a3:94:a0:ea:b7:37:16:58:61:b5:bf:9e:d7:80:fa:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B7:81:55:DC:03:BD:F8:A6:9F:D5:AF:38:CA:F1:31:62:08:5D:5B
X509v3 Authority Key Identifier:
keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e2:72:b1:3e:a7:c1:e4:32:6f:6a:67:6c:70:4f:29:f9:42:
5c:c9:ea:ee:d4:be:c2:ba:88:e1:ec:94:d5:b2:d2:f8:00:1b:
2c:48:bb:36:3b:b2:94:a0:ef:20:a1:57:28:52:8a:e4:c6:e3:
fa:9b:51:ff:76:0a:62:03:b6:61:cb:e9:14:67:7a:b5:b8:36:
c3:d5:d2:dc:10:eb:25:ba:fd:a5:ad:5f:9e:05:dc:ab:2f:88:
37:05:80:d9:47:e3:08:32:df:d8:25:8e:4f:d4:f6:89:24:61:
20:c6:25:06:26:01:47:1c:1f:cb:96:30:a9:88:9a:5e:fb:db:
80:2c:1b:ec:59:30:2f:b5:12:5f:6f:84:48:e6:ac:85:fc:7e:
ee:05:85:e7:72:6f:80:25:97:2a:cd:a4:0e:86:1e:0e:f8:54:
31:c0:b9:1b:d6:73:90:b2:48:f9:45:40:2b:90:7d:58:03:06:
b9:07:65:b6:62:64:85:19:d3:55:73:97:4d:1a:8c:ed:8d:b3:
18:94:15:5e:e7:a7:a5:54:ee:f7:43:6f:6e:0e:e3:04:5a:5f:
29:d6:fd:1b:ea:8e:51:47:bc:26:3b:88:55:e1:4b:9a:be:41:
44:a3:5d:ff:14:31:a1:66:99:c0:71:cb:20:70:fc:aa:77:f4:
19:76:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:24:05 2026 by rpki-client