
$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier: JK9fPFSY/Se5VYcLTxl+RmFTcQl0JOtA1TaFYvXupaM=
Subject key identifier: EA:1B:4E:50:13:51:17:05:6D:63:6A:2A:BD:F0:83:40:FE:A2:6A:C5
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number: 0126
Signing time: Fri 12 Jun 2026 18:59:47 +0000
Manifest this update: Fri 12 Jun 2026 18:59:46 +0000
Manifest next update: Fri 19 Jun 2026 18:59:46 +0000
Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: krQVcXZomGRVDXTWWsaQ2zqvfIrTTgux6FZ8x+fE5YU=)
2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: XIBVLN0QTNRfgKTP2te+4QcwWNVAHO7ezlqwT3o7bi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Validity
Not Before: Jun 12 18:59:46 2026 GMT
Not After : Jun 19 18:59:46 2026 GMT
Subject: CN=6a2c5723-cb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:a9:d5:ce:f0:27:15:e5:b0:6e:5b:15:8e:
8f:b5:c7:63:9d:55:52:a2:5d:b4:6f:fa:dc:41:f0:
99:d6:49:49:6a:19:c1:a4:40:a3:96:a2:e4:22:74:
9c:11:db:1a:c6:97:67:31:35:fb:5e:e3:55:f1:40:
a8:6d:c6:ca:31:ac:8c:c2:0d:36:16:fc:c2:ad:2e:
e7:f1:57:89:39:3a:9d:29:94:f9:b2:3f:55:6a:98:
2b:ed:10:14:41:b0:02:8a:d5:df:6d:75:11:01:b8:
d2:25:44:24:a1:c8:30:78:3e:36:a5:89:20:34:62:
84:a9:a3:09:71:39:5d:f6:ab:ba:fc:81:a6:48:d4:
10:53:6d:ca:45:06:b9:bb:f5:47:eb:bb:56:a6:18:
ee:70:84:2d:5a:24:d4:bf:43:fe:9e:32:8b:e9:e9:
6a:95:17:b4:ce:e8:07:48:bd:51:de:dc:44:24:e2:
01:c8:6f:c0:db:3e:7d:bc:59:f4:44:bf:77:fb:0a:
90:a8:6b:95:68:69:5a:f4:7c:ec:c5:a6:20:dc:ec:
a3:b5:e7:66:71:21:8b:8a:3c:e6:bf:13:d2:38:7e:
ae:4a:d5:f0:ff:6e:cc:2d:bb:7b:31:fc:69:83:a7:
59:65:5b:3d:9b:5a:dd:03:03:e5:65:d4:0f:6d:4b:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:4E:50:13:51:17:05:6D:63:6A:2A:BD:F0:83:40:FE:A2:6A:C5
X509v3 Authority Key Identifier:
keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b7:ff:b1:a9:28:cd:4c:6f:d1:f3:37:1a:9b:e3:64:66:5d:
36:ba:14:3b:19:e1:85:a0:e4:f6:8d:2d:fa:8b:34:0e:ef:d2:
1b:26:d9:a3:9a:62:e2:e5:be:cb:d3:93:96:0f:0a:5b:b5:2e:
cf:8e:d0:e1:a2:51:5d:53:ed:77:2d:ea:c7:60:ec:5d:4e:96:
09:e2:af:20:76:36:05:13:4c:ca:ed:9e:d7:8c:22:ff:61:d3:
b1:16:3b:07:8d:ac:98:89:99:c7:0c:a8:1b:26:4b:ff:f4:41:
44:77:b5:c8:90:0d:66:2b:09:63:74:47:d9:df:36:23:d3:d4:
8d:23:34:cb:7f:aa:3b:75:84:4d:de:0d:52:9f:9d:80:d7:8d:
14:d3:73:80:7f:e4:92:78:50:cf:70:6f:bf:ed:57:b1:9c:ec:
e1:34:72:70:f6:20:04:6d:af:c1:7b:58:27:93:06:29:0b:78:
98:40:b0:89:cc:6e:98:3c:ea:bc:b2:65:cc:5f:24:6a:7b:7e:
c2:a0:84:c3:fd:7c:2f:da:2d:38:a4:54:51:ca:92:97:11:00:
e3:a5:85:f6:b6:e5:db:64:2b:20:85:74:dd:60:77:26:6c:be:
ff:e5:4a:c9:e9:9d:df:6e:b7:bb:9c:1a:4c:d0:f0:d4:c7:22:
b0:60:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:29 2026 by rpki-client