
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json)
Hash identifier: JYFw7C/m25iHFttv0MhJLSXq6yAhaAl95jr3ajXQVxg=
Subject key identifier: 53:75:C2:AC:BE:78:97:8F:C2:EF:CD:EF:0B:C1:6C:76:72:C6:88:42
Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Certificate serial: 061A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
Manifest number: 061A
Signing time: Fri 12 Jun 2026 14:18:16 +0000
Manifest this update: Fri 12 Jun 2026 14:18:15 +0000
Manifest next update: Fri 19 Jun 2026 14:18:15 +0000
Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: 780ShgWR5JhbjAfUybP4WPHu6/IG79IyvV9KpUAr0Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Validity
Not Before: Jun 12 14:18:15 2026 GMT
Not After : Jun 19 14:18:15 2026 GMT
Subject: CN=6a2c1527-b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:f5:1b:6a:d2:99:53:9b:90:25:95:cc:bf:
38:69:14:08:18:f5:86:b3:1b:0e:67:d3:27:1d:8e:
48:84:f3:c6:91:ef:39:57:be:89:69:24:04:17:c3:
c7:39:9d:aa:70:87:62:4d:bd:e4:53:d6:95:b6:95:
db:ab:de:9b:8e:04:28:0d:6b:27:81:03:1e:60:33:
46:4f:4e:6e:d9:29:06:cd:11:c6:81:f5:64:98:7a:
e0:ce:0c:8a:50:e8:72:ec:23:61:47:81:14:42:a9:
16:cb:ad:96:47:c8:77:ec:f9:53:6f:63:9a:af:f7:
45:cf:56:c7:c5:b7:09:53:ac:19:72:c7:36:2b:72:
64:7b:99:78:93:17:2b:ef:87:e6:cc:b3:f0:49:8a:
36:a6:45:91:3a:f9:f5:24:b0:03:b5:6c:c1:79:a1:
35:6a:7e:a3:f1:e0:0f:10:8e:4d:2c:0b:89:c0:2f:
97:ca:99:91:01:89:1c:f7:93:22:e9:49:fb:9f:05:
48:65:e5:c0:f3:d2:9c:84:d7:c4:b7:c4:e2:23:dc:
ff:3b:c6:ac:ce:0b:ba:42:38:13:17:0c:de:2e:c5:
50:db:f8:59:33:d8:0f:75:1a:7d:2f:bc:5a:ea:25:
2e:0a:3a:8a:cf:53:4a:e5:f5:a6:99:9d:1b:7b:14:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:75:C2:AC:BE:78:97:8F:C2:EF:CD:EF:0B:C1:6C:76:72:C6:88:42
X509v3 Authority Key Identifier:
keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:d0:61:65:cd:18:71:55:bb:c2:6e:d1:e8:6e:da:a4:3b:
0a:5e:e0:ba:8f:2a:d2:a7:86:5e:68:e6:30:0a:fe:aa:f8:06:
e5:f5:2a:17:77:3f:73:b5:9e:7f:aa:44:94:d7:3f:90:bd:15:
c7:97:0b:a9:e6:b6:b0:8b:6e:05:ce:55:6f:ef:21:d3:0f:eb:
14:07:a5:ec:4f:2f:cd:61:b3:34:4b:a6:ec:9a:af:68:93:88:
75:45:51:f4:92:1b:46:e9:61:f8:4b:3f:bc:1f:3f:ce:13:b0:
7e:97:f3:f1:d8:31:6a:c0:81:46:62:36:1e:b2:54:67:b3:fd:
6d:ea:a0:ab:f4:61:0f:ed:2f:5f:9a:a2:6e:1b:7f:6e:0d:01:
9d:16:b4:78:01:7e:07:3a:41:41:5e:01:7b:2e:1d:3d:de:ea:
10:17:bb:9f:fa:8a:6d:79:61:29:e2:54:fa:b6:b2:75:bb:5a:
28:25:df:85:24:79:28:41:2a:c7:6a:19:3b:da:b8:b5:59:b2:
a0:3b:1e:33:eb:c8:7b:09:87:3f:d8:52:e6:02:8b:25:4f:24:
00:d0:b0:32:53:3f:e0:77:b9:de:33:45:d8:4e:b7:f9:30:4e:
17:eb:70:c5:3d:e3:c1:38:27:5d:bb:8a:5c:e9:0a:06:19:f3:
34:bf:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:25 2026 by rpki-client