
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json)
Hash identifier: /vbvySUlmdmVVRb9h5Kj2xaFav12/ui2SXplmGFhYSk=
Subject key identifier: D6:E8:71:10:EE:11:DA:49:70:27:4A:21:68:10:13:D3:21:D8:A3:61
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
Manifest number: 0103
Signing time: Sat 13 Jun 2026 06:17:59 +0000
Manifest this update: Sat 13 Jun 2026 06:17:58 +0000
Manifest next update: Sat 20 Jun 2026 06:17:58 +0000
Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: sokX5iu1oaobc+8o1k2okUnPY9DKSB398tvWD+urssQ=)
2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: L6/yynEwdWf1sD2wlmqOrbdnKHzkKjuQTgZ1LmsT/eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Validity
Not Before: Jun 13 06:17:58 2026 GMT
Not After : Jun 20 06:17:58 2026 GMT
Subject: CN=6a2cf617-ee87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:2c:48:df:3b:c6:8a:4d:cc:8c:87:4e:1f:
be:86:22:37:9a:17:56:f4:61:52:3f:c6:31:fb:68:
e3:74:c2:8b:74:eb:0f:b6:88:b1:ab:1e:42:cc:8f:
9e:02:83:fa:57:b1:aa:ce:8a:65:93:91:c2:a9:c7:
97:9a:fe:9f:59:2f:4c:e1:da:6c:dc:75:9e:88:57:
46:50:94:ee:0a:1a:0f:51:00:25:7e:04:36:d6:c2:
05:0c:00:56:08:50:5f:8e:89:56:22:87:c2:fc:c5:
4f:48:27:e5:3b:2e:5c:48:3b:38:a6:68:85:20:80:
31:04:aa:bc:fd:fa:e3:b4:a2:eb:a4:1d:2e:eb:f8:
27:01:e9:0f:85:f9:60:c2:99:3e:fa:5e:db:81:e0:
7c:ad:cc:0b:c1:35:d5:3a:f3:a3:f0:b7:27:3c:b8:
d5:0e:23:69:3d:d8:73:8c:14:02:3e:6b:7f:7c:51:
b7:ad:20:91:16:70:7a:ac:31:e4:93:07:eb:1b:6f:
de:e6:94:ed:18:99:bb:d6:db:12:08:98:da:bd:01:
b2:02:8b:5c:b5:96:b9:07:a0:1f:f3:7f:a1:5b:99:
d0:1e:4c:66:c9:b2:69:fe:fa:61:1f:6f:c4:9f:d4:
e8:43:11:b9:9b:f2:99:4f:34:80:a8:14:bf:02:96:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E8:71:10:EE:11:DA:49:70:27:4A:21:68:10:13:D3:21:D8:A3:61
X509v3 Authority Key Identifier:
keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8f:07:c4:b2:82:fb:6d:8f:eb:0a:85:cf:11:79:1f:fe:d0:
ea:09:11:8e:8c:2f:94:37:37:9d:82:fc:53:16:27:c3:cf:fd:
99:66:70:b2:58:a8:e1:8a:51:d3:eb:67:bf:38:a0:48:83:40:
ed:86:74:1f:54:44:d1:3e:d4:3b:3f:93:a8:17:f6:44:b8:73:
a9:ed:2f:d6:69:a0:b8:88:04:50:32:db:92:e4:31:e2:2e:54:
dc:48:15:14:d8:cf:6e:36:b8:65:d7:2d:7b:d0:56:32:bf:04:
ad:d7:1c:79:95:40:e3:9b:6d:32:04:53:ab:c1:7b:e1:b5:a0:
43:85:64:38:43:c8:d8:49:63:ef:c9:3b:c6:11:18:0b:52:64:
ec:83:9c:fd:20:25:05:d4:8b:b1:2b:87:94:f1:6b:9d:a2:94:
b8:1b:90:0a:86:5d:51:92:79:4f:5c:16:7d:3c:0f:9e:9a:c1:
e5:59:44:4c:6d:93:73:ee:6d:90:9a:6a:e6:0d:05:4f:ca:5c:
17:2d:0a:0c:ff:8a:78:cf:f1:2b:e3:db:37:52:c2:bf:d2:4b:
85:42:24:96:60:11:11:a1:3f:9d:1d:62:9e:87:20:05:d0:8c:
48:2e:a0:fd:e2:5d:de:69:f0:a1:4c:05:a8:f7:e7:d1:a4:cb:
5e:66:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:48 2026 by rpki-client