
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json)
Hash identifier: 3V0Jif8jY2Svi0hKmIG1FX4rjQeVEnUjuLn7QSkdbgM=
Subject key identifier: 9F:03:3C:DE:18:3C:8A:3F:AD:C4:84:0A:56:D8:F5:15:DA:73:B0:08
Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
Manifest number: 01DF
Signing time: Wed 19 Aug 2026 04:09:26 +0000
Manifest this update: Wed 19 Aug 2026 04:09:26 +0000
Manifest next update: Wed 26 Aug 2026 04:09:26 +0000
Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: Q5rnl3uINfdj25S7PrNFeQlWK9ytuvg52mXBgnriGec=)
2: E2744874415311F18FDF4C4ECA833773.roa (hash: PUZmZiXbjmMIFND5bLENedBo7DL7DmtBzQSSVuNs/c0=)
3: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: EDr2C5zmUOcum1n6gE7rMsntZnWBPMLUPXoaimVppcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Validity
Not Before: Aug 19 04:09:26 2026 GMT
Not After : Aug 26 04:09:26 2026 GMT
Subject: CN=6a852c76-63ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:91:97:f5:d4:d1:51:73:f7:1e:d4:aa:5b:
70:b6:dd:cf:4e:55:22:ee:09:03:6b:ca:e8:2d:69:
21:8b:34:d1:14:bc:90:dc:df:43:fc:a0:b0:55:f8:
cf:c0:b8:45:c3:2d:94:58:26:71:09:45:8b:0f:59:
a3:f5:7c:fb:93:fe:bf:94:f7:db:25:9a:f0:8f:c2:
c2:e4:b1:58:3a:95:05:de:8f:bc:82:33:34:d6:23:
9f:f5:00:1e:b5:3f:47:f7:16:91:ab:52:0c:f7:40:
43:c3:77:16:95:e4:25:f3:c2:d7:78:6f:54:be:21:
99:f6:fa:01:e2:b8:6c:ac:bd:34:f3:2d:f7:ce:b5:
cb:06:29:43:ef:92:ee:09:1b:8e:01:ca:64:ca:6e:
86:c8:09:90:f6:87:e9:70:98:89:51:27:34:c2:f9:
c2:2b:16:45:da:ad:8c:bf:15:6f:4a:81:da:7a:40:
5f:14:f3:a0:bc:a0:1b:b2:e3:89:7a:15:da:42:0d:
fe:3c:99:81:38:fa:2d:4c:7e:9f:e8:93:d2:ba:61:
81:ee:98:da:62:b9:83:4f:b3:b1:83:69:84:66:1a:
e1:19:e6:ba:be:84:28:62:07:13:9c:7d:5e:2a:eb:
4f:24:4d:f1:0f:73:19:5e:dd:26:2b:0b:01:13:61:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:3C:DE:18:3C:8A:3F:AD:C4:84:0A:56:D8:F5:15:DA:73:B0:08
X509v3 Authority Key Identifier:
keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f2:5f:dc:17:9b:ec:df:c2:f5:63:48:3b:c3:10:d8:25:e2:
61:a6:61:4a:58:41:12:3d:d4:58:9f:b3:35:04:ff:7a:d8:0f:
2e:3c:12:c0:62:4d:1c:4d:76:c8:43:ed:c8:e5:15:4e:90:84:
71:d6:d7:31:80:70:04:ca:1e:7e:4b:c7:ea:46:20:01:50:b6:
f5:0a:37:21:29:0a:31:ef:79:33:d8:8f:c5:93:a9:ca:11:84:
ca:a1:5c:7f:97:a4:9f:9f:48:f8:a5:24:53:ae:85:00:83:aa:
72:9f:b1:dc:c9:95:54:5a:c2:7e:51:ad:93:5f:ad:0b:32:b4:
01:e9:4c:a8:62:72:bd:e8:8f:fb:f7:59:0d:46:94:f8:69:bc:
b4:7a:d6:d2:06:80:19:b7:18:45:d2:96:da:1e:8b:4d:a0:70:
25:24:00:b8:f8:17:bd:b0:ea:d3:67:8d:ac:6f:25:35:65:9f:
c6:1d:5d:1a:30:79:70:d9:77:eb:bb:04:91:92:16:2f:9a:d3:
02:63:bd:95:8a:5a:98:e1:31:21:e1:bc:19:a5:20:0f:ff:26:
ab:90:de:1b:6a:7d:3f:10:55:75:b9:f1:5e:81:79:64:f1:d9:
e2:83:60:57:64:41:ed:ad:b3:02:26:8d:1d:38:97:8f:73:2c:
64:fa:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:38 2026 by rpki-client