
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier: B3rddWqeEPLE7jNhlx/bx+fV0deA9+WA+B3RkNztt+s=
Subject key identifier: 0F:F6:B8:98:A1:ED:D9:98:41:C1:F0:42:A2:3C:36:26:B7:5E:A1:7D
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 0707
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number: 06E4
Signing time: Fri 12 Jun 2026 22:17:53 +0000
Manifest this update: Fri 12 Jun 2026 22:17:53 +0000
Manifest next update: Fri 19 Jun 2026 22:17:53 +0000
Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: StqMM1MBoj/FzU2sdPvlWx/KHfOLpHksEF2Kjl1Vj94=)
2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: GMAvWxN7LqaBOKvtkjWDIMlqwj7hC5qzX6WxN7KtnZg=)
3: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: j3y2MD2N/DYKUU8fqu1Wpt61itE0tbiREOOVu3Ycs5g=)
4: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: 1Z9LS41ng6fjPpTuu047cOJxnZNw575SVnm1zMIsT+k=)
5: 68219776A41311EBBF911855C4F9AE02.roa (hash: VjXHPuIwGHjxhTWLqkjCa7VDTT6rvVJHd6oJKd+W8yI=)
6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: w4PVGKfxeERIvQHJMYDS31Ha+UPsN3eP0dVpold/msw=)
7: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: bhE8kPKbDhbjGGtK3dqK/PTW2f7OgPh1zprjpQ4GT6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Jun 12 22:17:53 2026 GMT
Not After : Jun 19 22:17:53 2026 GMT
Subject: CN=6a2c8591-41a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:bb:92:05:cc:64:0f:b0:d1:86:67:eb:71:
b9:89:d0:31:cc:e4:56:3a:64:78:cd:96:0e:46:a7:
a8:19:7f:95:2e:8c:c8:a7:de:ba:1c:89:8d:ac:e4:
ac:90:0a:85:e8:db:6c:8d:60:e4:a0:dc:3a:2d:05:
51:e7:32:23:be:a1:a5:53:af:20:7b:78:c5:89:72:
85:1e:7f:3d:4c:94:da:62:56:18:89:5e:f2:35:9a:
17:fd:58:b1:e5:53:28:72:d1:f3:b5:85:fc:7f:3e:
06:63:e0:2a:9f:55:5c:a4:80:94:88:67:c0:d7:55:
7e:bc:94:82:bf:3e:73:8d:e3:14:96:d3:e8:a0:95:
b7:f4:63:0b:e2:d9:a0:55:b9:7d:38:56:45:91:d0:
67:c8:e7:c1:32:55:13:cd:f7:fc:7e:96:9f:da:51:
bf:be:2c:7c:b5:7b:08:7c:8a:91:5d:cd:8d:e5:a2:
9f:50:de:f7:38:7e:16:4f:54:5f:f3:e9:7e:62:de:
99:97:aa:9d:ff:a6:67:3d:83:95:5d:51:08:22:f8:
f2:ec:11:5b:52:a1:4d:68:72:d3:e9:67:5d:41:ae:
26:c4:70:ad:4e:b3:52:b4:d9:c5:b4:8f:8d:17:b9:
d5:64:b6:f5:ba:06:69:c9:13:25:07:a1:00:b6:0b:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:B8:98:A1:ED:D9:98:41:C1:F0:42:A2:3C:36:26:B7:5E:A1:7D
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:78:68:4e:5a:3b:f5:66:9e:72:e7:9c:be:72:bb:7c:4a:
7e:95:f4:f2:19:04:1e:f1:7f:88:f4:e0:56:e7:c5:81:d5:2b:
42:97:bd:a4:1a:26:1e:71:c6:f6:14:6a:87:07:93:b0:ab:3e:
51:73:f1:90:83:1e:3b:fe:3b:28:ab:e7:c2:76:74:fc:15:fc:
cb:2e:d1:68:fd:d0:8b:48:ce:1c:c0:16:f3:96:86:aa:83:a0:
c3:7a:3e:ba:93:80:c5:d3:1d:a7:19:8d:d9:a1:8b:03:65:3e:
55:53:5b:54:ce:49:4b:2c:b5:21:84:75:3f:ce:98:ae:10:d0:
1e:de:ec:20:fa:25:e3:bf:3e:26:38:8e:4f:1f:99:f4:6f:30:
09:b0:ed:62:b4:e4:c2:45:7f:31:a0:4f:29:5e:0f:ec:22:bb:
c5:42:04:7e:81:50:39:4a:96:67:4e:52:f9:67:d8:12:7a:84:
ee:26:73:bd:1d:d6:00:15:ef:b8:54:8a:e9:58:8b:f1:8a:fc:
57:4e:c0:f8:41:36:1c:7a:f8:89:3f:4c:36:ee:e1:f8:33:b8:
ed:2d:89:f7:ed:90:96:25:4a:16:f3:8b:25:da:ee:c2:46:36:
c8:e8:d7:62:cd:ac:ad:d0:0a:bd:ec:aa:09:af:b9:43:35:89:
ed:d0:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:36 2026 by rpki-client