
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: Ra/Jn2x355M2PGghLf2T7nzkcN80Enun9MO1Zxc/+vc=
Subject key identifier: 8E:6A:4F:6A:63:F5:2F:7F:3A:0B:1D:EB:D8:16:E4:35:A7:5C:2A:90
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 065C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 064B
Signing time: Thu 16 Apr 2026 22:37:09 +0000
Manifest this update: Thu 16 Apr 2026 22:37:08 +0000
Manifest next update: Thu 23 Apr 2026 22:37:08 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: 0fa9jh7xJqBse90SEXDpOq1AchkCxwSBagA0zCViCD8=)
2: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
3: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Apr 16 22:37:08 2026 GMT
Not After : Apr 23 22:37:08 2026 GMT
Subject: CN=69e16495-61cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:c2:40:be:70:d3:68:a5:45:85:f5:6c:da:
0d:38:22:4f:50:fb:d7:e6:3d:bc:0b:57:18:7d:e9:
86:e9:34:23:92:fb:db:ba:f3:d5:0e:bf:55:6f:42:
d1:d3:42:04:07:e1:9f:56:3e:d9:b1:0e:48:5c:f7:
c1:94:41:6c:9a:1e:da:f2:0d:f3:52:de:67:f6:b4:
a6:22:30:2e:dc:1c:8e:2d:b5:ab:2d:02:e1:a7:86:
1f:ad:cf:e9:f1:b7:ff:5c:5a:8f:19:a2:04:3a:39:
54:7c:49:14:ee:ca:2e:90:a8:cc:9e:76:16:ad:3f:
99:6d:35:27:6b:c5:05:dd:e0:fc:43:03:4b:7e:92:
6c:13:72:56:04:7a:95:4e:74:8f:0d:e2:2b:7b:08:
a5:54:25:8d:e5:58:0f:4b:90:49:2d:05:dc:27:60:
6d:99:c4:f0:21:39:af:b2:fb:ec:3a:23:e2:34:35:
20:86:f8:0b:7b:88:d9:ac:de:e3:ef:a4:ab:da:77:
77:6e:7c:83:ea:53:12:9b:76:9d:fe:74:da:d2:8e:
71:fb:a2:56:6d:ba:b0:50:0b:36:b8:ea:42:3d:db:
d6:34:b4:81:96:09:81:9a:69:ad:37:17:45:b9:ff:
51:36:31:53:17:df:cd:0c:fc:07:5b:3a:08:e9:5c:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:4F:6A:63:F5:2F:7F:3A:0B:1D:EB:D8:16:E4:35:A7:5C:2A:90
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d1:9a:c4:24:35:d4:bd:ee:79:97:0c:3a:3b:1b:bb:14:24:
05:7d:02:ea:0b:cd:46:d5:94:20:f9:1e:bf:27:f4:90:94:96:
a4:b7:8e:78:4d:89:ab:34:8f:63:b8:ce:ee:0d:ee:08:ef:66:
04:09:88:53:d5:60:85:0b:e2:be:79:aa:4e:cf:a5:23:70:92:
46:98:68:3b:c3:28:fa:a3:ab:2e:e1:3f:c6:44:15:b9:57:40:
13:86:96:c1:66:de:18:4a:4a:27:7c:34:9c:cd:b5:c1:3d:e8:
1b:1c:f4:5a:af:d6:b2:ec:8b:27:30:8f:da:5f:53:e0:b6:55:
38:12:f7:a6:7e:9a:0f:31:3c:6f:d8:d5:6a:b8:fa:1b:75:ac:
6e:fc:54:07:62:ad:52:00:51:1b:b9:e6:b1:d6:1c:8c:62:ca:
96:5d:30:71:2a:af:5a:ed:f6:4e:26:25:aa:ef:72:3d:a0:18:
1c:e8:07:f9:dd:d7:ec:f9:1b:72:4a:af:c1:e3:7e:2b:12:3a:
07:eb:2e:16:4a:d8:a3:53:e4:24:3b:95:c0:cf:d2:61:d9:d4:
f6:a4:94:bd:34:63:a1:4a:eb:35:e0:8b:53:41:02:39:5d:1d:
9d:d3:52:e6:36:d0:2a:ac:cf:8d:fb:0d:a2:6d:44:64:1e:70:
62:d4:5b:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0
RUY0NUMxNjMwHhcNMjYwNDE2MjIzNzA4WhcNMjYwNDIzMjIzNzA4WjAYMRYwFAYD
VQQDEw02OWUxNjQ5NS02MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqXCQL5w02ilRYX1bNoNOCJPUPvX5j28C1cYfemG6TQjkvvbuvPVDr9Vb0LR
00IEB+GfVj7ZsQ5IXPfBlEFsmh7a8g3zUt5n9rSmIjAu3ByOLbWrLQLhp4Yfrc/p
8bf/XFqPGaIEOjlUfEkU7soukKjMnnYWrT+ZbTUna8UF3eD8QwNLfpJsE3JWBHqV
TnSPDeIrewilVCWN5VgPS5BJLQXcJ2BtmcTwITmvsvvsOiPiNDUghvgLe4jZrN7j
76Sr2nd3bnyD6lMSm3ad/nTa0o5x+6JWbbqwUAs2uOpCPdvWNLSBlgmBmmmtNxdF
uf9RNjFTF9/NDPwHWzoI6Vx3OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5qT2pj
9S9/Ogsd69gW5DWnXCqQMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF
QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv
NkJZV25EdFFMcjVPOUZ3V00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAttGaxCQ11L3ueZcMOjsbuxQkBX0C6gvNRtWUIPkevyf0kJSWpLeOeE2JqzSP
Y7jO7g3uCO9mBAmIU9VghQvivnmqTs+lI3CSRphoO8Mo+qOrLuE/xkQVuVdAE4aW
wWbeGEpKJ3w0nM21wT3oGxz0Wq/WsuyLJzCP2l9T4LZVOBL3pn6aDzE8b9jVarj6
G3WsbvxUB2KtUgBRG7nmsdYcjGLKll0wcSqvWu32TiYlqu9yPaAYHOgH+d3X7Pkb
ckqvweN+KxI6B+suFkrYo1PkJDuVwM/SYdnU9qSUvTRjoUrrNeCLU0ECOV0dndNS
5jbQKqzPjfsNom1EZB5wYtRbgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:18 2026 by rpki-client