
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json)
Hash identifier: eJDA90HVgoOa9i4PUOx+Of+Ze6NWrp+J1U4osA/N5w0=
Subject key identifier: 23:D2:61:A4:29:97:B0:D9:A2:48:E0:11:0D:8F:0E:E6:72:50:B7:6B
Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Certificate serial: 06B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
Manifest number: 06A0
Signing time: Fri 12 Jun 2026 22:28:28 +0000
Manifest this update: Fri 12 Jun 2026 22:28:27 +0000
Manifest next update: Fri 19 Jun 2026 22:28:27 +0000
Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: V1UUMrM+jfg5YzYMlmqrTgflc5Sw3twPMtakppUGiOU=)
2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: 8KAuUjRAKsyBi8GlES2lC9s8KKWwTwTgclR9At7r6RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Validity
Not Before: Jun 12 22:28:27 2026 GMT
Not After : Jun 19 22:28:27 2026 GMT
Subject: CN=6a2c880c-1213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:78:0e:f5:3e:0e:07:f0:e3:9b:fd:53:1e:
08:73:15:f3:4c:d7:3f:53:54:ce:d7:62:b4:63:03:
dc:1e:0d:27:72:c1:bc:84:ba:9e:5c:38:7d:2a:52:
29:34:13:05:3c:d0:98:ba:1e:1b:4b:0e:c4:b1:54:
0d:b2:fb:26:52:d4:29:1c:9f:f8:bf:b1:7c:a5:cb:
f8:0f:30:d7:42:ae:80:17:ad:5b:96:1e:9a:b3:53:
da:ad:1d:18:06:e9:06:47:ed:9d:98:28:dc:c0:79:
ba:05:44:da:9e:77:b0:b1:67:cf:d0:20:e2:05:b6:
9e:09:80:7c:db:2e:9d:30:26:78:f4:46:a9:a9:83:
2e:32:0d:46:db:1c:c8:80:4a:4d:50:9d:25:67:8a:
4d:27:65:bb:39:d8:1d:de:12:7e:b0:63:84:51:33:
7a:cb:e7:94:3f:33:14:ea:aa:4d:d1:b8:02:b0:4d:
d7:4e:f0:a3:61:1e:f2:0e:76:ea:d8:29:02:aa:89:
3d:0b:3d:55:57:1f:75:d0:82:fa:38:e7:5d:ee:23:
e7:f6:cd:5f:50:73:6c:4a:40:89:ed:d8:cf:bd:76:
46:d7:bc:4c:c4:c9:a8:4a:98:de:ce:3e:b0:88:37:
5a:7f:20:a5:03:3c:d4:08:3c:19:6d:c6:06:e5:bf:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D2:61:A4:29:97:B0:D9:A2:48:E0:11:0D:8F:0E:E6:72:50:B7:6B
X509v3 Authority Key Identifier:
keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:57:12:ab:33:32:2e:d6:26:fe:42:75:15:02:db:97:f9:6b:
90:92:58:7f:55:77:03:8c:bd:4a:bf:57:b6:b2:b1:df:a2:d3:
4b:21:90:84:f2:d8:2e:f1:05:bc:a3:c2:c6:75:43:0c:5e:a1:
5f:88:6d:b8:94:62:44:2f:90:f4:44:7d:ea:a7:c1:d7:c3:08:
a4:e9:0e:5f:8a:3f:81:2c:95:11:2c:26:d9:c9:0b:67:66:8d:
42:0c:b3:07:11:c7:de:7e:1f:c3:3e:55:0d:ac:19:f4:7e:58:
23:a8:2a:5d:24:a1:61:f3:58:13:b6:82:36:12:60:69:af:b7:
33:6a:b8:70:d7:00:d6:d2:b9:c0:08:ad:ff:f1:11:08:2b:82:
bf:54:7f:6f:90:96:07:72:2d:9b:f4:74:87:af:0b:d4:58:43:
2c:fc:cd:f3:59:35:0e:60:da:c3:5d:6a:1e:53:68:69:3e:a0:
3f:3b:ea:7f:c8:21:c8:e6:e8:70:f2:18:a1:45:fe:9f:e0:32:
45:9a:f7:e4:f5:3c:9a:e1:21:21:ab:59:33:57:8c:bc:85:98:
71:22:4f:09:8b:25:d8:18:bd:1c:c5:8f:66:da:74:ef:f1:59:
eb:88:bd:38:69:b4:22:fa:4a:79:fc:0a:6c:d1:be:bd:09:95:
e6:ea:c7:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz
ODEyNkRDOUYwHhcNMjYwNjEyMjIyODI3WhcNMjYwNjE5MjIyODI3WjAYMRYwFAYD
VQQDEw02YTJjODgwYy0xMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTF4DvU+Dgfw45v9Ux4IcxXzTNc/U1TO12K0YwPcHg0ncsG8hLqeXDh9KlIp
NBMFPNCYuh4bSw7EsVQNsvsmUtQpHJ/4v7F8pcv4DzDXQq6AF61blh6as1ParR0Y
BukGR+2dmCjcwHm6BUTannewsWfP0CDiBbaeCYB82y6dMCZ49EapqYMuMg1G2xzI
gEpNUJ0lZ4pNJ2W7Odgd3hJ+sGOEUTN6y+eUPzMU6qpN0bgCsE3XTvCjYR7yDnbq
2CkCqok9Cz1VVx910IL6OOdd7iPn9s1fUHNsSkCJ7djPvXZG17xMxMmoSpjezj6w
iDdafyClAzzUCDwZbcYG5b8RQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPSYaQp
l7DZokjgEQ2PDuZyULdrMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5
NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81
anRHemNqTkRGems0RW0zSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl1cSqzMyLtYm/kJ1FQLbl/lrkJJYf1V3A4y9Sr9XtrKx36LTSyGQhPLYLvEF
vKPCxnVDDF6hX4htuJRiRC+Q9ER96qfB18MIpOkOX4o/gSyVESwm2ckLZ2aNQgyz
BxHH3n4fwz5VDawZ9H5YI6gqXSShYfNYE7aCNhJgaa+3M2q4cNcA1tK5wAit//ER
CCuCv1R/b5CWB3Itm/R0h68L1FhDLPzN81k1DmDaw11qHlNoaT6gPzvqf8ghyObo
cPIYoUX+n+AyRZr35PU8muEhIatZM1eMvIWYcSJPCYsl2Bi9HMWPZtp07/FZ64i9
OGm0IvpKefwKbNG+vQmV5urHqA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:43 2026 by rpki-client