
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json)
Hash identifier: itevSiU9SdPWsrgUAcHt5/kb2/C9uXyDEcaBKPVSiLo=
Subject key identifier: EC:AC:D9:CD:E7:E0:D1:09:EE:E8:CC:5D:49:8B:7F:80:90:C3:2A:A9
Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47
Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
Certificate serial: 0619
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
Manifest number: 060B
Signing time: Fri 12 Jun 2026 22:53:30 +0000
Manifest this update: Fri 12 Jun 2026 22:53:29 +0000
Manifest next update: Fri 19 Jun 2026 22:53:29 +0000
Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: 1oS8YHN9IKsyi5vM9LtbpxeQxyAfASBYyXCd/Z3P484=)
2: C41538940B4711EC99840631C4F9AE02.roa (hash: V6JHUzOLGDXoFaxiTUAua6l+IvXzjhCqWaQC1lRJApU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl
rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
Validity
Not Before: Jun 12 22:53:29 2026 GMT
Not After : Jun 19 22:53:29 2026 GMT
Subject: CN=6a2c8dea-3f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:03:f0:6f:48:5c:8e:cb:c3:4f:be:c4:73:
b6:d6:72:3a:0b:80:39:0a:ad:05:60:5f:7e:5c:54:
f9:64:20:aa:06:49:7b:5f:86:f6:8a:26:c0:e3:93:
dd:2f:62:e0:c8:59:d8:d5:33:de:62:16:1c:67:c7:
fb:b2:27:a9:93:bd:7d:b5:b2:08:5b:d2:50:10:a0:
09:8d:69:ab:3f:ae:0e:54:f3:cd:b7:7b:13:c2:eb:
cb:0a:69:ec:68:82:ca:8d:79:18:fe:85:77:a3:06:
ea:77:12:16:db:a0:0a:71:5c:3f:ee:b4:2e:8a:61:
a9:ef:89:e6:f9:11:59:e7:b7:96:77:46:3a:a1:9f:
ed:2f:95:c7:96:72:72:3d:e2:1c:9c:58:b3:f9:a8:
fc:c8:36:a4:a3:c3:e2:13:ef:ec:09:8a:41:b8:f0:
ef:28:31:9c:b4:66:12:9c:11:dd:97:df:94:f2:e3:
a8:b1:36:9b:19:c2:d1:89:76:0f:6b:cd:ad:91:95:
ef:af:de:7a:a6:f7:7e:47:88:94:3b:34:c3:69:c6:
6b:77:dc:bb:9f:6b:a8:d5:8b:94:6e:ef:85:da:8a:
34:47:39:90:bc:4b:b1:2e:be:35:e8:e8:1d:46:22:
17:3f:d2:51:c1:62:65:a6:07:c7:31:13:b2:a0:d9:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:D9:CD:E7:E0:D1:09:EE:E8:CC:5D:49:8B:7F:80:90:C3:2A:A9
X509v3 Authority Key Identifier:
keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:18:a8:ab:23:bf:74:2f:7e:cb:b8:8f:64:0a:9b:eb:be:
03:3f:91:14:37:88:15:f1:27:3a:53:57:17:f3:ec:55:74:e7:
aa:53:34:e5:4e:91:de:e4:35:33:ac:93:7d:69:d0:0c:fe:45:
41:c7:6b:6f:a4:67:fd:44:b0:d9:fd:b7:9a:cb:79:7e:f9:09:
fd:6f:91:40:45:8f:98:ee:62:ba:db:1b:d1:15:48:a0:0a:55:
12:42:fe:9a:8a:53:99:69:37:c6:e8:6b:dc:be:3b:1a:fe:d0:
b6:80:44:bd:0a:82:21:56:da:7a:e5:2b:7c:a9:85:9f:b8:e1:
27:a9:ab:cb:98:90:3c:81:6f:14:d3:39:d0:21:0f:9b:48:93:
c5:c0:cc:06:f0:2f:7c:a7:c0:d6:3a:5d:bf:0f:f5:2a:89:c2:
a1:25:ea:35:f7:73:ff:53:f8:0a:28:ad:47:5b:c6:85:29:6b:
9c:f4:ae:9f:0d:07:1f:ad:e1:d9:52:aa:b5:4d:de:87:a1:96:
6c:07:f2:db:66:d6:3d:ee:8e:84:11:53:e2:3f:1a:75:47:24:
2c:1e:1a:33:2b:a8:8a:a9:f5:fb:83:9c:a4:2e:9d:8b:d8:1c:
df:c5:5c:b6:6f:69:13:ee:f6:b3:00:72:33:25:22:7b:4f:79:
56:ff:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:44 2026 by rpki-client