
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json)
Hash identifier: 228u4PfHi1UATgmM651XAV9j2PY5cOAS8AAvvtI9KdY=
Subject key identifier: 54:EA:F4:86:0F:07:5A:2A:4B:E1:FB:7E:A3:98:19:7C:D9:4C:61:C0
Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
Manifest number: 01AF
Signing time: Fri 15 May 2026 04:07:06 +0000
Manifest this update: Fri 15 May 2026 04:07:06 +0000
Manifest next update: Fri 22 May 2026 04:07:06 +0000
Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: tNcL1FcdncPeKbk/EHJcNk8nXnLJXKaNMh9mMCbzzB0=)
2: E2744874415311F18FDF4C4ECA833773.roa (hash: PUZmZiXbjmMIFND5bLENedBo7DL7DmtBzQSSVuNs/c0=)
3: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: EDr2C5zmUOcum1n6gE7rMsntZnWBPMLUPXoaimVppcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 04:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Validity
Not Before: May 15 04:07:06 2026 GMT
Not After : May 22 04:07:06 2026 GMT
Subject: CN=6a069bea-15ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:0e:87:03:f5:4e:16:1b:f9:ec:89:dc:63:
ae:8a:2d:01:ed:6d:92:b5:16:dd:8e:ec:32:2e:5b:
ce:e2:c0:93:09:23:02:1f:dc:a9:53:77:33:f5:64:
c8:c1:74:ca:38:bf:56:3b:ce:f9:76:36:7e:dc:db:
aa:5d:ba:6f:56:bd:f2:7f:4e:9b:47:17:e6:16:b7:
2f:ea:71:30:31:4c:84:b3:e6:21:4b:98:bd:1b:d3:
16:a1:25:db:0c:a1:bf:6d:0c:da:c0:cf:59:d7:bc:
c5:c0:e7:dc:61:c7:34:1c:6f:8b:29:9d:e1:9a:9f:
82:7f:5c:ed:c8:d9:24:af:fa:ca:10:8e:4c:4b:bb:
dd:21:5c:59:ee:95:e5:ad:38:c6:2f:f6:cd:37:35:
1b:56:d2:67:16:64:02:4d:56:55:81:df:26:74:19:
cc:db:ad:ce:ef:26:ba:35:ec:25:32:2d:6a:3d:85:
46:f4:e2:e1:a4:ea:43:4f:6c:cb:6c:23:1e:b9:4e:
51:6d:81:e2:82:1b:c2:56:ed:7a:1d:02:ae:25:a2:
4f:2f:e1:a9:6e:26:0f:d7:54:dc:99:a9:cd:95:54:
65:13:5a:10:12:f7:14:2d:2e:48:e1:91:52:47:11:
b7:b5:e1:e5:59:a4:ce:eb:70:1f:2e:33:3d:7c:0c:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:F4:86:0F:07:5A:2A:4B:E1:FB:7E:A3:98:19:7C:D9:4C:61:C0
X509v3 Authority Key Identifier:
keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c9:a9:66:13:2f:b5:4b:7f:71:e1:99:10:32:32:10:03:50:
c4:ce:82:5f:d3:7f:af:8a:72:bf:fc:15:c4:a2:9b:a9:14:90:
3b:25:4a:f5:4e:ff:28:5d:dd:33:bc:a4:cb:49:a9:85:7a:46:
a3:01:e2:5b:c5:bd:08:b2:7e:e7:55:bf:53:a3:69:3c:35:bd:
de:de:a9:69:46:57:e9:28:cc:93:59:0a:35:b1:94:40:b7:e5:
2d:16:7c:af:1b:c7:91:f2:33:03:c8:03:d0:da:01:6f:44:85:
34:58:df:26:cd:f0:1d:63:4c:d7:b4:22:7c:c0:1f:73:a1:a5:
52:7e:fe:6c:9f:ef:d2:d5:7e:bb:78:bb:fa:28:14:69:a7:67:
70:d3:89:e1:1a:77:7d:85:8e:81:14:ab:dd:19:99:73:c9:e9:
bf:84:fe:53:86:2a:38:5a:42:e7:36:fa:0e:74:87:25:29:4c:
d2:98:b1:a3:44:bf:56:9c:c1:3f:a0:b9:98:f3:ff:84:54:4a:
28:94:00:03:4c:11:19:2a:7f:0b:d6:f0:af:a6:32:7d:56:94:
bb:3f:5d:1b:54:02:e4:d1:24:fa:a3:e3:87:13:42:9e:43:04:
d4:dd:25:14:e9:6e:75:27:12:83:06:52:2b:ae:5b:1d:58:a9:
65:a6:1f:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC
QjdBOThGMEYwHhcNMjYwNTE1MDQwNzA2WhcNMjYwNTIyMDQwNzA2WjAYMRYwFAYD
VQQDEw02YTA2OWJlYS0xNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfcOhwP1ThYb+eyJ3GOuii0B7W2StRbdjuwyLlvO4sCTCSMCH9ypU3cz9WTI
wXTKOL9WO875djZ+3NuqXbpvVr3yf06bRxfmFrcv6nEwMUyEs+YhS5i9G9MWoSXb
DKG/bQzawM9Z17zFwOfcYcc0HG+LKZ3hmp+Cf1ztyNkkr/rKEI5MS7vdIVxZ7pXl
rTjGL/bNNzUbVtJnFmQCTVZVgd8mdBnM263O7ya6NewlMi1qPYVG9OLhpOpDT2zL
bCMeuU5RbYHighvCVu16HQKuJaJPL+GpbiYP11TcmanNlVRlE1oQEvcULS5I4ZFS
RxG3teHlWaTO63AfLjM9fAx82QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFTq9IYP
B1oqS+H7fqOYGXzZTGHAMB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz
RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt
OXNsbENFOEVpQmU3ZXBqdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa8mpZhMvtUt/ceGZEDIyEANQxM6CX9N/r4pyv/wVxKKbqRSQOyVK9U7/KF3d
M7yky0mphXpGowHiW8W9CLJ+51W/U6NpPDW93t6paUZX6SjMk1kKNbGUQLflLRZ8
rxvHkfIzA8gD0NoBb0SFNFjfJs3wHWNM17QifMAfc6GlUn7+bJ/v0tV+u3i7+igU
aadncNOJ4Rp3fYWOgRSr3RmZc8npv4T+U4YqOFpC5zb6DnSHJSlM0pixo0S/VpzB
P6C5mPP/hFRKKJQAA0wRGSp/C9bwr6YyfVaUuz9dG1QC5NEk+qPjhxNCnkME1N0l
FOludScSgwZSK65bHVipZaYfeg==
-----END CERTIFICATE-----
Generated at Sat May 16 05:09:41 2026 by rpki-client