
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier: v5U7gu40Cb3IHNPKFeQXSSog5ZsGnG5NGVQfBW0bXfs=
Subject key identifier: CF:F4:3B:7E:91:46:5C:6F:32:72:06:1D:78:DD:37:BE:18:D1:FD:B3
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number: D6
Signing time: Thu 11 Jun 2026 08:59:35 +0000
Manifest this update: Thu 11 Jun 2026 08:59:34 +0000
Manifest next update: Thu 18 Jun 2026 08:59:34 +0000
Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: 7B8iA2m9crzazFkbJsBcYLB8sOPP3y54J3fYTWw5x6g=)
2: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: nKq89mFtdPAm1UALvKV17Saig4Y05tURAwcO6cCh6zc=)
3: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: q15h8naITCmlNDgt0fcVFaL5Jg+soxRTIhbvGiyXn00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Validity
Not Before: Jun 11 08:59:34 2026 GMT
Not After : Jun 18 08:59:34 2026 GMT
Subject: CN=6a2a78f6-e384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:c9:79:1c:ea:7e:5c:dc:e8:ab:9a:f1:01:
0a:86:d0:83:ba:c6:ac:e4:0e:c9:9b:b2:b2:ce:09:
96:d6:7f:e3:e0:ec:5d:c6:54:0c:dd:d7:2f:bd:70:
c0:1c:a3:78:b7:aa:c9:d8:3a:6b:2f:6b:13:06:5c:
32:9e:a4:07:3f:39:f6:1e:8f:f6:f3:99:73:e9:5f:
90:9b:4b:6a:5f:26:76:34:3b:fe:56:44:88:20:68:
19:c9:03:e7:c1:84:46:e9:32:95:18:13:f0:6d:83:
76:a4:0e:cd:ea:d2:95:bd:15:63:53:e5:00:b5:75:
a7:16:f2:50:9d:5c:39:a8:64:a7:dd:7a:82:19:4e:
82:22:81:08:8f:74:03:a8:8c:37:2f:52:d6:45:15:
09:a9:5f:a7:df:56:11:b3:60:91:30:de:6f:ce:c1:
64:29:c9:a7:4f:3b:35:20:fe:ad:45:b5:46:2a:ed:
b2:bf:95:6e:ee:81:b0:23:c0:c7:db:2a:c4:4d:4e:
be:73:0d:eb:00:fc:37:fd:c4:8e:d5:16:9b:71:6b:
b8:d2:39:45:6a:10:12:67:64:cf:90:41:81:65:9b:
89:76:5e:8c:58:e8:4b:00:b4:d8:ae:bc:18:4f:ee:
69:33:0f:f3:46:09:77:09:fd:1f:24:26:e0:c1:a6:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:3B:7E:91:46:5C:6F:32:72:06:1D:78:DD:37:BE:18:D1:FD:B3
X509v3 Authority Key Identifier:
keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:30:de:b3:f2:11:a1:af:2f:8c:b4:e6:fe:42:f9:84:79:
e6:42:d4:ac:d0:d7:b3:16:ce:e7:3e:85:87:b0:57:3c:a4:58:
53:0f:a6:d6:6e:59:cb:ed:46:9d:c4:2d:e6:e8:29:ec:a9:39:
95:61:97:cc:87:20:27:e9:a5:75:0d:8e:47:27:c0:06:77:9a:
7a:29:88:09:06:53:bc:ff:2e:da:ed:f9:5b:81:35:fa:4c:de:
e1:a0:30:26:65:3c:d1:ac:e9:ac:be:6b:ef:ca:f7:91:d7:4e:
33:0c:db:24:3a:a8:ec:e9:7a:43:54:c0:a5:47:ad:27:10:09:
22:7a:b8:4c:f5:91:f3:ea:53:ea:37:cb:b8:7d:9d:86:32:96:
65:c4:88:53:2a:da:e9:a6:92:8d:89:99:30:ec:5d:41:ae:62:
e7:c9:00:33:75:9f:6f:e5:20:90:68:0f:b4:a6:50:9d:76:f8:
0d:9f:ab:fc:f5:ea:1e:cf:9a:ed:ba:b1:29:39:2a:6f:ab:bc:
53:8e:5f:76:e1:4d:2d:fb:26:4d:3c:f0:b1:aa:05:db:56:1b:
d0:75:ce:95:dc:53:2b:b5:2d:f2:7e:ea:58:d7:96:50:e6:ce:
3b:93:87:f9:c2:a7:c3:23:e5:d4:8a:8b:e8:7e:2c:a8:ef:62:
c7:fa:09:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVGQ0YxMTAvBgNVBAUTKDk4QUU5NTZENDI2RTE2MDJDRUQ4QkI3MjU4OEY2MkEz
REExMkE5NTUwHhcNMjYwNjExMDg1OTM0WhcNMjYwNjE4MDg1OTM0WjAYMRYwFAYD
VQQDEw02YTJhNzhmNi1lMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj2LJeRzqflzc6Kua8QEKhtCDusas5A7Jm7KyzgmW1n/j4OxdxlQM3dcvvXDA
HKN4t6rJ2DprL2sTBlwynqQHPzn2Ho/285lz6V+Qm0tqXyZ2NDv+VkSIIGgZyQPn
wYRG6TKVGBPwbYN2pA7N6tKVvRVjU+UAtXWnFvJQnVw5qGSn3XqCGU6CIoEIj3QD
qIw3L1LWRRUJqV+n31YRs2CRMN5vzsFkKcmnTzs1IP6tRbVGKu2yv5Vu7oGwI8DH
2yrETU6+cw3rAPw3/cSO1RabcWu40jlFahASZ2TPkEGBZZuJdl6MWOhLALTYrrwY
T+5pMw/zRgl3Cf0fJCbgwaattwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/0O36R
RlxvMnIGHXjdN74Y0f2zMB8GA1UdIwQYMBaAFJiulW1CbhYCzti7cliPYqPaEqlV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUZDRi9CODRDNjAzQTFF
NUYxMUYwOUU2QTZCNEZDNEY5QUUwMi9tSzZWYlVKdUZnTE8yTHR5V0k5aW85b1Nx
VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FWVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUZDRi9CODRDNjAzQTFFNUYxMUYwOUU2QTZCNEZDNEY5QUUwMi9tSzZWYlVKdUZn
TE8yTHR5V0k5aW85b1NxVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATAEw3rPyEaGvL4y05v5C+YR55kLUrNDXsxbO5z6Fh7BXPKRYUw+m1m5Zy+1G
ncQt5ugp7Kk5lWGXzIcgJ+mldQ2ORyfABneaeimICQZTvP8u2u35W4E1+kze4aAw
JmU80azprL5r78r3kddOMwzbJDqo7Ol6Q1TApUetJxAJInq4TPWR8+pT6jfLuH2d
hjKWZcSIUyra6aaSjYmZMOxdQa5i58kAM3Wfb+UgkGgPtKZQnXb4DZ+r/PXqHs+a
7bqxKTkqb6u8U45fduFNLfsmTTzwsaoF21Yb0HXOldxTK7Ut8n7qWNeWUObOO5OH
+cKnwyPl1IqL6H4sqO9ix/oJkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:36 2026 by rpki-client