
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json)
Hash identifier: 88auHDc4jaDn/WD7GkQAF3bNYK5OfO2HvFYySp03fBw=
Subject key identifier: 5E:27:98:2E:B6:62:F3:14:5E:88:CF:FC:58:2E:BF:FE:E0:75:1A:2A
Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Certificate serial: 0A1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
Manifest number: 0A16
Signing time: Fri 02 Oct 2026 19:59:25 +0000
Manifest this update: Fri 02 Oct 2026 19:59:25 +0000
Manifest next update: Fri 09 Oct 2026 19:59:25 +0000
Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: W+asoa8uWNczA61MyPL2YnsuMsVfd7TuZ5CCJGwl38g=)
2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: drREk/OAiw4nw+aB1RVjD5zbqv5hAnk1VMgyPcenfqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2591 (0xa1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Validity
Not Before: Oct 2 19:59:25 2026 GMT
Not After : Oct 9 19:59:25 2026 GMT
Subject: CN=6ac00d1d-98e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:ad:81:e7:2c:6d:a0:fa:14:17:24:0d:a1:
05:9e:f7:3f:21:df:f3:3b:00:10:55:ac:42:95:f1:
a8:12:b6:e9:6b:ee:48:0e:66:8a:de:d2:cf:22:fd:
f2:f4:bf:0f:f3:2e:0c:0d:c5:d3:fd:d0:45:35:9a:
94:eb:f1:eb:ab:ae:0f:5d:f2:0c:21:09:92:26:1d:
e6:9d:b1:b2:d3:aa:e6:bf:16:66:07:83:18:9f:09:
15:b7:85:e3:84:75:de:1c:48:aa:83:f3:7b:98:a4:
f6:67:ac:84:ce:53:00:b4:fd:de:a7:09:58:54:0b:
14:8e:1a:14:3a:7d:21:80:31:d4:04:38:6f:38:c4:
89:3c:9c:5e:bf:44:5a:2b:4e:a8:28:2d:2d:f0:6c:
56:e3:40:82:de:c6:31:8e:8c:8c:ba:4c:3b:c6:97:
ef:fb:1f:ef:cc:6f:1e:25:2e:e0:cc:e1:0c:40:4e:
b3:11:e6:ba:44:10:5e:9b:b6:4e:1b:22:eb:b7:74:
3b:f2:35:df:c7:5e:65:48:3f:b1:f0:53:9d:9b:0f:
fa:a8:82:82:28:a1:19:90:2d:af:1a:ed:84:87:e8:
27:5c:19:5a:c3:c0:9f:0a:b7:1f:0d:df:4b:dc:d5:
2f:2a:10:d5:1f:35:93:d5:e4:2c:88:63:bf:2f:c6:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:98:2E:B6:62:F3:14:5E:88:CF:FC:58:2E:BF:FE:E0:75:1A:2A
X509v3 Authority Key Identifier:
keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:a2:c4:36:1d:15:1b:1e:83:28:f2:d0:e5:4d:28:26:99:b1:
5f:3c:d3:75:e3:e6:a2:1a:07:00:0a:44:ac:80:32:75:ae:c6:
3d:69:43:cf:76:1e:03:f6:4f:7e:db:f3:46:ab:45:71:bb:13:
5f:e5:f4:11:10:fa:c0:51:11:95:6f:f3:3c:69:15:59:93:45:
01:a4:e2:61:1a:71:9d:6a:4d:1e:fc:3c:6f:0e:1c:04:84:b0:
c1:8d:00:92:89:97:43:ef:e5:ad:c8:e7:0d:82:dd:9f:b8:b3:
9b:da:05:d2:84:4e:99:69:a2:76:34:ca:83:be:13:c0:c2:ee:
92:01:19:2c:50:13:80:94:62:bb:1f:d7:b0:1f:c2:5f:12:52:
b1:8e:33:cf:c4:9e:38:a2:63:f8:7b:62:5f:5f:94:1c:c1:65:
de:bc:36:8a:98:06:b4:bc:e8:46:9c:c4:f3:b1:b6:c5:de:42:
bf:48:32:d3:07:33:2e:43:f6:17:c7:f1:6b:c6:99:a6:b5:67:
0b:b5:e8:18:0e:44:a4:74:1e:1a:84:fe:e3:5c:4c:db:ae:0d:
07:5e:ba:df:2d:bd:69:cf:b7:85:a3:fb:81:6c:85:3f:f3:f9:
de:10:0f:b6:4d:a5:1b:32:ef:b3:07:05:0d:78:9b:e8:f5:07:
e0:81:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:22 2026 by rpki-client