
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: aAgtmA86ByFPLPISIcYTCqrF1npaWegOu9/K8DU7t+I=
Subject key identifier: 9D:57:16:16:EF:2E:BC:8A:BC:EA:43:A6:13:1E:50:00:4C:69:69:89
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 0668
Signing time: Fri 12 Jun 2026 22:39:44 +0000
Manifest this update: Fri 12 Jun 2026 22:39:44 +0000
Manifest next update: Fri 19 Jun 2026 22:39:44 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: IU5yfGWkM7AGkMaOiJ1o+vLbyLlLQ93jyDilXxHTWnA=)
2: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
3: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
5: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Jun 12 22:39:44 2026 GMT
Not After : Jun 19 22:39:44 2026 GMT
Subject: CN=6a2c8ab0-67a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:1b:b6:4f:90:2b:62:da:e9:9e:9b:d6:c2:
55:11:2d:92:2f:13:b3:f6:ab:5a:c9:28:03:04:04:
e0:73:bb:66:ac:31:4a:73:b1:29:c0:ce:6f:b6:7e:
48:60:ae:bf:8b:05:97:49:57:17:5a:b6:eb:c9:35:
c2:e7:a2:a2:f1:c2:68:b5:c8:9c:a0:94:c6:4d:a0:
bf:ac:66:3c:fb:32:1d:57:ae:f6:7a:63:7d:0c:f7:
4f:df:84:c7:d0:8f:e7:ca:cc:1e:f7:50:85:d6:72:
fe:9c:b9:b1:ac:b9:0e:54:20:ab:bd:1e:b5:dd:51:
a9:d5:4c:a3:60:c3:e6:23:66:4a:ca:f9:ee:95:c4:
49:db:b2:bc:3d:9d:76:de:a2:54:e8:bc:42:e5:e4:
6a:40:da:a7:b3:f4:41:e1:3a:69:32:aa:7b:54:24:
0a:11:4a:5e:c6:9b:08:f2:a4:8e:44:43:a6:12:0b:
0d:58:0a:9c:d1:25:ce:b0:ad:04:92:f9:94:dc:ac:
b6:e6:1e:8b:2e:20:6b:19:be:07:fe:4e:f9:e6:c4:
9c:15:e3:2d:78:3d:e3:60:a2:d5:ab:29:40:c0:8f:
17:55:33:45:94:c7:8f:04:c3:1d:01:90:ce:8c:46:
a4:ce:3a:65:2f:c0:60:b4:40:74:f6:dd:75:18:4d:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:16:16:EF:2E:BC:8A:BC:EA:43:A6:13:1E:50:00:4C:69:69:89
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0e:5d:56:19:22:72:05:99:3e:bd:39:c8:2a:67:ea:09:4e:
db:e3:fe:74:63:4f:99:93:33:14:de:f9:5b:98:12:ac:0c:03:
9f:f4:7c:3e:1a:4b:d4:3d:57:1c:db:7f:a2:bc:36:cf:1c:54:
92:cf:9b:47:73:1f:5a:19:49:c1:83:35:38:ca:56:c2:be:1b:
2e:be:5b:d8:1c:b8:48:83:d7:34:79:bf:d1:67:d5:ca:06:3a:
ce:32:88:4f:55:4e:cd:07:f2:1b:b4:1e:2e:1c:a4:8d:75:d0:
47:ac:f9:37:e2:77:78:eb:9c:f1:f5:14:7a:08:2d:e5:37:ab:
c8:d9:b9:7b:1b:40:d4:2d:f9:c1:da:e4:7b:58:7a:1e:d0:22:
6b:9e:23:b8:77:9e:88:ed:88:1a:64:7a:cd:c2:e5:12:64:a7:
ee:3d:bc:ed:c7:f3:9d:e3:54:3b:89:f9:ec:d7:d7:df:75:f8:
d1:4e:27:60:95:65:7b:c2:7f:6d:6d:28:63:f6:f1:a7:65:a4:
f7:8c:01:e6:b4:aa:c2:9e:d0:98:dc:7f:16:fe:54:47:66:46:
fa:39:7f:e0:b6:5e:2d:16:88:a3:cc:e9:a5:14:86:a4:7e:25:
6b:a9:f0:74:b7:32:aa:63:cc:ed:90:ae:25:3d:38:e8:67:ff:
6e:37:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:21 2026 by rpki-client