
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json)
Hash identifier: +HvCujwVwq5XU6AFRN0K2e+AykTwikvfcec6m0SeBaE=
Subject key identifier: 65:B0:CC:1A:F2:CD:38:43:E8:BB:DB:97:12:97:A4:25:9B:9C:A7:D6
Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Certificate serial: 09EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
Manifest number: 09E2
Signing time: Mon 22 Jun 2026 19:52:23 +0000
Manifest this update: Mon 22 Jun 2026 19:52:22 +0000
Manifest next update: Mon 29 Jun 2026 19:52:22 +0000
Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: CUltIhT+kYIdAsLB5EZUOeIN/LrCOB7B7NJOA0J+NxQ=)
2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: drREk/OAiw4nw+aB1RVjD5zbqv5hAnk1VMgyPcenfqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2539 (0x9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Validity
Not Before: Jun 22 19:52:22 2026 GMT
Not After : Jun 29 19:52:22 2026 GMT
Subject: CN=6a399277-065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:05:be:59:41:f0:4b:be:93:e0:d5:f4:be:
43:8b:36:12:5d:5a:27:86:7e:f9:4b:68:5e:ab:8a:
d7:ac:b4:e6:37:25:0d:0f:c0:78:4d:4c:be:60:b0:
35:6d:05:6e:cd:ea:85:18:74:f9:08:4d:c8:fc:6c:
11:04:bb:b3:60:2d:b5:94:a6:4b:74:bf:07:80:16:
a0:c9:61:b1:f2:b0:2d:03:f0:99:d2:a0:26:1d:da:
f6:fe:5f:62:43:59:89:5e:a8:7a:c7:78:62:cc:44:
4d:6c:1a:e9:30:0a:49:79:6c:d1:94:f1:dc:19:88:
e3:42:ad:36:c3:83:53:c0:ba:8e:9d:9b:ec:76:b0:
6f:48:62:cc:90:3a:b2:bf:cd:75:a2:98:93:f1:69:
9d:ed:96:d8:f2:f8:97:10:8c:9f:95:9e:69:fc:cb:
3c:d9:5d:7a:9c:40:60:a6:1b:49:53:98:62:2b:c6:
94:da:7a:d7:8b:b3:90:3b:52:b4:af:fb:af:cb:56:
be:d6:be:2c:7d:f4:ed:bc:62:2c:57:c4:34:b6:9d:
55:a6:ad:09:cb:1c:82:84:d4:ce:10:df:4f:07:e7:
1c:25:b4:46:4f:97:cf:80:73:e8:39:38:78:d8:ee:
fd:46:df:1e:d3:f1:cc:2f:54:b7:f4:0b:9f:11:c3:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:CC:1A:F2:CD:38:43:E8:BB:DB:97:12:97:A4:25:9B:9C:A7:D6
X509v3 Authority Key Identifier:
keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:16:89:7f:34:4e:6c:01:31:0a:3f:ee:2d:1f:59:e0:05:51:
3f:70:4c:61:dd:bf:2b:6e:44:24:f5:ba:5e:20:41:58:22:27:
c5:2b:64:5d:5b:60:37:31:b9:3d:94:03:f0:d5:cd:d9:7d:42:
29:5a:28:73:13:2a:1a:21:a5:c7:6c:d0:bd:44:4f:61:ac:de:
6c:14:e0:10:9a:88:79:16:e7:e9:81:bd:75:23:6c:10:80:1b:
ee:60:3d:e9:99:f9:ba:b4:ef:2b:8e:9c:b4:c3:0d:82:eb:dc:
fb:53:35:3d:cb:29:86:f8:03:7d:11:a3:a9:a9:81:cc:f1:e4:
d6:da:b2:66:aa:b0:bc:dd:66:1c:8a:a1:fe:96:fb:b8:e9:73:
42:8b:49:8d:b1:8b:cb:9f:36:9d:2b:b3:67:a7:4d:24:d7:1d:
60:55:93:c3:9a:95:e0:0b:cb:3f:b7:f1:3a:5f:dd:ff:a1:16:
26:52:f4:dd:6a:1a:60:d4:67:44:2c:66:b3:94:14:ed:cc:74:
50:6c:63:7e:b5:41:4d:73:07:87:52:48:73:2d:27:b6:35:10:
e3:de:f7:8e:55:5a:4c:3e:c7:04:99:16:c6:8f:5b:12:3a:2f:
ae:30:df:e8:86:5c:c5:2a:36:7d:55:6b:05:58:f2:83:da:ff:
d8:dd:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:23:41 2026 by rpki-client