
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json)
Hash identifier: L2cqtOHatZdqqqWtXCV4dA4wRLr97Q/GG5H58H+nxbg=
Subject key identifier: A8:16:54:73:72:C7:0E:D5:9E:87:74:00:7F:53:B3:38:1F:E7:CC:FC
Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Certificate serial: 2049
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
Manifest number: 2039
Signing time: Sat 20 Jun 2026 15:54:07 +0000
Manifest this update: Sat 20 Jun 2026 15:54:06 +0000
Manifest next update: Sat 27 Jun 2026 15:54:06 +0000
Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: XTmQMCwFkDlS6QDKG/GbjaFlFmor4QwJZw106ltIgMM=)
2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: f53n49BRZ+a4OFczbu9IHjhQmjnGPixaP4vK3+8G2j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 15:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8265 (0x2049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Validity
Not Before: Jun 20 15:54:06 2026 GMT
Not After : Jun 27 15:54:06 2026 GMT
Subject: CN=6a36b79f-9acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:33:2f:fd:13:55:66:7b:7c:6e:ed:0c:fe:
88:20:14:49:ac:26:dd:cb:b5:17:82:0f:a7:0c:5b:
6a:12:9c:db:c0:32:0f:50:0a:58:6c:9a:e0:fc:7d:
2c:71:48:f5:4d:20:f3:0b:2f:d8:19:51:66:f9:20:
b4:bf:bb:79:69:61:09:b9:6a:ce:d0:95:34:e7:bf:
89:42:7c:44:c1:29:f2:84:d3:ce:c2:20:7a:94:7e:
fa:b8:09:34:6e:a7:a8:3d:59:48:41:a8:3e:7a:3f:
be:d5:86:f2:9b:19:61:d6:f1:f0:87:c8:15:8f:c4:
6c:2b:0f:3a:4a:21:c2:90:d5:12:3a:39:fe:02:7a:
f6:21:37:8d:b7:02:a1:4e:04:84:bf:c0:24:3a:38:
b8:7e:8b:d5:f3:24:0d:2b:74:70:b6:14:d9:90:9e:
ee:7f:2a:d9:ea:d9:7c:b0:e9:8c:c4:6c:f5:ed:d0:
2f:f2:4e:0c:e2:9e:b0:b2:3c:4b:2e:50:19:99:2c:
72:a2:6d:f3:31:e5:7b:58:31:be:bd:10:bc:13:98:
59:a8:98:d4:0d:4f:b9:c4:8f:67:8f:81:6b:62:62:
12:e1:53:42:05:22:3b:29:00:41:ef:d1:b5:9c:e1:
29:80:c3:ae:d4:73:11:d5:6a:2e:b6:d3:8f:b6:b8:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:54:73:72:C7:0E:D5:9E:87:74:00:7F:53:B3:38:1F:E7:CC:FC
X509v3 Authority Key Identifier:
keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c9:49:e8:73:98:42:78:da:ca:b1:58:81:b5:2b:7c:26:fe:
14:af:0b:25:78:60:2e:68:2c:c2:91:74:6d:95:8b:c0:d9:d0:
10:2f:b4:be:93:1d:af:35:c4:66:df:f7:06:62:83:5d:81:b6:
76:b3:e8:18:fc:32:01:bd:cd:19:52:2a:a5:a8:f4:a9:56:ef:
c0:00:b9:ee:75:fd:1e:41:8a:6e:8e:d1:52:82:4f:69:e2:f4:
54:1d:86:91:bc:52:79:75:17:2d:5e:c8:28:a3:72:dd:ab:00:
df:cf:a0:0c:2c:6a:cb:28:fc:e8:27:ba:28:a2:57:2c:32:e0:
93:25:16:2e:f8:c1:0b:8c:01:c4:18:09:56:3d:74:85:4a:d9:
e4:3b:d4:38:d7:97:ef:a2:6c:bc:71:46:c8:e8:81:76:3a:b4:
03:1d:9e:3c:83:cf:1f:3f:61:95:dd:97:73:b8:68:a8:8f:ac:
31:41:60:8d:91:4e:a7:c1:d3:df:65:96:12:7f:7e:4f:b4:b0:
ba:39:73:00:fd:a1:bf:b1:13:d4:00:86:c7:e6:08:d0:92:b8:
a3:de:18:89:e9:80:e4:bf:cc:a3:34:b7:13:96:41:65:1f:83:
f9:14:d0:69:e1:a1:a8:d9:b0:9f:0e:c9:6c:27:39:d7:22:e0:
71:32:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 12:55:59 2026 by rpki-client