
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json)
Hash identifier: NSdkxiqpPn+tZH/OnCGh3L5emEzd6VSRAsfBEbu9iFU=
Subject key identifier: F3:33:9B:28:F6:55:D8:F4:4E:F5:8F:A9:06:9B:5B:01:EE:92:52:E9
Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD
Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
Certificate serial: 0C6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
Manifest number: 0C60
Signing time: Sun 20 Sep 2026 18:38:38 +0000
Manifest this update: Sun 20 Sep 2026 18:38:38 +0000
Manifest next update: Sun 27 Sep 2026 18:38:38 +0000
Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: WEIwToXaWrhdf0uzSh5+GHDeItXA9zMopkd7gnXkqAQ=)
2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bPIRgHEZY9rLQvrwabu6nPsfSsBA8Z8Wnu5AlQzU9KI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl
rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3179 (0xc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
Validity
Not Before: Sep 20 18:38:38 2026 GMT
Not After : Sep 27 18:38:38 2026 GMT
Subject: CN=6ab0282e-5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:18:da:b8:91:2e:de:01:32:c4:b8:cd:44:
a0:06:36:b7:4d:10:03:fa:82:df:21:73:9d:de:8c:
53:f5:b5:2c:9a:28:32:cf:5b:70:a4:d8:82:30:b9:
b3:76:f0:34:83:d4:b4:5f:4d:c1:4b:26:f5:1d:ea:
ff:7a:fa:28:62:00:02:1f:25:34:18:b5:83:83:54:
63:30:eb:d4:be:e1:d6:26:ab:a3:3d:10:59:3e:4c:
b7:99:c3:95:c7:ec:72:ee:f4:62:96:dc:c7:c4:9a:
4c:f0:00:b4:38:7e:9b:0a:a6:25:c4:23:4f:3d:ac:
1f:af:f5:ec:c8:8f:07:85:d2:84:d4:77:55:ef:54:
e0:c8:b3:a6:90:a9:dd:8e:9a:75:97:dc:da:9e:8f:
7e:29:52:97:70:7b:75:49:77:d5:7b:a6:50:c8:37:
29:36:1d:ef:de:67:0f:f9:12:28:9e:ca:9f:90:05:
b8:75:eb:d8:fd:fd:0d:9b:54:e2:b4:35:f3:17:9c:
08:36:20:94:c5:d4:4d:36:bf:82:d7:61:ed:e6:ee:
51:75:a9:8a:ed:78:94:ca:e1:6a:7f:99:53:51:18:
95:f3:35:74:ef:32:50:54:ee:98:12:bd:58:47:7b:
03:bd:f1:3e:88:3e:a4:42:c0:84:05:6f:b4:e0:dd:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:9B:28:F6:55:D8:F4:4E:F5:8F:A9:06:9B:5B:01:EE:92:52:E9
X509v3 Authority Key Identifier:
keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:4a:5d:61:00:88:1d:38:24:cd:31:9a:56:ad:ea:f8:66:
21:cc:49:a2:c1:b8:c8:46:21:11:94:2b:55:ee:ab:2d:66:94:
a2:c4:6e:ae:2a:aa:f1:94:d9:b0:d8:2b:7b:89:92:f4:8a:29:
bd:84:7b:56:5b:31:c8:ca:b9:03:b4:f8:53:fa:1b:c8:b6:2d:
b1:9e:38:4c:ab:5f:7a:1c:f3:bd:78:bf:06:1e:80:54:22:a0:
70:62:1e:d8:47:e4:da:2a:1a:a8:5f:b3:cd:d0:b4:e8:9e:ca:
10:c8:dc:3d:8f:ac:c5:95:5f:c7:fb:9b:e5:cb:a7:38:f6:bb:
99:0b:04:a8:16:92:fc:0f:46:90:a6:2f:f5:7d:52:73:c5:19:
15:07:d4:37:32:6d:0d:1b:8d:0c:f4:90:54:06:4d:ba:24:d2:
7b:78:34:23:d6:62:19:6b:a1:2c:fc:71:e8:56:59:70:9b:e1:
6b:d9:ed:57:ac:6a:32:72:2a:4f:a8:46:41:14:7d:1d:a9:b0:
9e:c0:df:5e:3a:c2:bf:0a:b8:91:b4:7f:53:03:c1:b8:13:d3:
55:eb:07:e3:1b:58:c7:bd:99:ed:a8:6a:6d:30:8a:a9:f9:53:
58:c1:d3:81:07:0a:c1:ac:c5:0c:95:33:bd:98:d2:e9:30:d4:
ee:3a:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:47:39 2026 by rpki-client