
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json)
Hash identifier: /OP5hbK824AkqYTgmNXsFnl0yWElR3T79em8OBBuW9g=
Subject key identifier: C8:A4:14:0F:AF:CA:D4:20:B4:BD:8D:0E:11:B5:6E:BF:B8:65:D3:25
Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
Manifest number: 01FC
Signing time: Sat 13 Jun 2026 03:33:34 +0000
Manifest this update: Sat 13 Jun 2026 03:33:33 +0000
Manifest next update: Sat 20 Jun 2026 03:33:33 +0000
Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: w78KJWv3o+qghQ2wh5KBQuJEUQVKlhOVbN/9X/trBcc=)
2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=)
3: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=)
4: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl
rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Validity
Not Before: Jun 13 03:33:33 2026 GMT
Not After : Jun 20 03:33:33 2026 GMT
Subject: CN=6a2ccf8e-e7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:50:75:1b:14:bd:dc:ed:13:2a:5f:a0:d2:
b0:58:43:fc:d9:c7:4b:79:fc:99:00:03:0a:1d:fb:
cd:7b:41:76:39:ec:41:ce:db:2e:de:75:37:eb:51:
cd:ae:5f:5a:0b:6c:64:bb:7d:ad:f8:d0:f2:80:50:
ff:49:b9:5e:f7:8b:f3:0f:65:f2:5c:8c:a4:23:26:
6b:5c:79:c5:d6:03:a3:27:02:3d:89:11:0e:35:bf:
64:12:52:c6:5d:a4:cb:97:f5:c5:cb:ab:60:8e:1c:
a1:29:f4:1a:90:bd:dd:51:4b:4d:c2:8e:a8:24:6f:
5d:25:71:b5:d9:3d:9e:69:f4:6c:28:2a:5e:8e:11:
4b:68:f6:f2:a0:c0:22:0c:2b:4d:01:f3:2a:49:b8:
e5:65:a6:47:af:17:df:4c:fd:ab:4b:ff:9d:b0:20:
c6:ce:a1:5e:2a:3c:b0:c9:3c:5b:c7:ad:67:23:4d:
09:7e:d4:b9:83:21:15:69:31:fc:66:49:e4:c6:4e:
ea:b7:dc:d6:58:d3:e1:f8:28:3d:12:e0:53:1a:6f:
23:2f:0f:0e:fb:62:82:ff:5e:9d:7c:76:d0:b7:37:
07:ec:a0:b8:5a:60:17:0a:6a:6b:46:7b:d5:d7:5a:
f5:ca:74:8b:d5:c7:b8:fb:f5:04:e1:fe:70:cc:71:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:14:0F:AF:CA:D4:20:B4:BD:8D:0E:11:B5:6E:BF:B8:65:D3:25
X509v3 Authority Key Identifier:
keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:01:9c:77:65:9e:25:92:96:9f:59:f4:8a:f0:e3:d8:ce:0d:
f2:7e:8c:f4:86:b7:f4:85:6e:cd:93:61:10:75:1a:d8:d1:c9:
6d:5c:49:5e:57:dc:45:20:3b:a7:af:a8:9e:c2:c8:eb:fa:e4:
f0:18:a8:97:08:88:33:a1:2d:3f:d5:47:c6:6f:21:81:67:ab:
a5:fe:d1:9b:6c:4e:d7:69:d1:77:80:f3:05:0a:21:95:33:45:
04:3b:33:77:ee:e7:07:dc:bf:33:2d:7f:13:b8:8c:d8:3d:6b:
36:cd:59:bc:9b:72:9b:3e:42:ff:04:dd:cf:46:47:06:9d:53:
01:9a:07:1e:7b:2f:c6:cf:22:22:d2:50:6d:2f:05:f3:2b:9a:
b8:6a:4b:0e:97:b5:60:35:41:d1:b5:e0:36:21:02:d0:63:b4:
89:bf:70:94:8c:4d:79:46:ce:50:b0:03:cd:d5:86:2e:f1:de:
6e:51:a1:1e:1a:9e:64:6b:88:ab:47:f8:ac:6a:6e:0f:d8:80:
c8:c3:ac:de:0c:a8:ff:8b:c1:4d:00:a5:3d:18:03:46:23:e8:
d4:1d:d4:c3:40:7f:72:bc:7f:f9:66:a7:8f:05:86:d3:69:75:
3e:50:68:a8:8b:10:23:9d:d2:df:7e:6e:0f:63:eb:e3:ac:5f:
e2:98:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:13 2026 by rpki-client