
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json)
Hash identifier: Ny7WQcP3RsNdXk+zqVytEcD74v/i6HT4sWx1wvZbbhs=
Subject key identifier: 68:A4:C8:0F:CD:E7:F8:FC:3C:FF:CF:47:59:89:2C:1F:FF:EF:C1:DF
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial: 07D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
Manifest number: 12BA
Signing time: Fri 12 Jun 2026 19:22:19 +0000
Manifest this update: Fri 12 Jun 2026 19:22:18 +0000
Manifest next update: Fri 19 Jun 2026 19:22:18 +0000
Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: GamU6gjwEdhpy3yBh72t4Adk/CCRmMtxSPJ6jbbxvQg=)
2: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=)
3: 6243075E653411EB98060C17C4F9AE02.roa (hash: v0uC7Tgqg5Ka5gyjZsM8cExfBYnQ3ib9cJkCqTADvOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Validity
Not Before: Jun 12 19:22:18 2026 GMT
Not After : Jun 19 19:22:18 2026 GMT
Subject: CN=6a2c5c6b-8557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:5c:d7:b7:1b:bc:b9:53:3a:bb:9f:0f:78:
c8:c3:c2:c7:35:3c:e1:34:39:62:3f:2d:c0:fc:ee:
c7:33:b5:b1:5f:21:f1:4e:09:ac:5b:4d:3e:86:a6:
c3:69:7a:4c:de:cd:38:0b:e6:50:54:57:28:9c:b7:
b4:2c:8c:7e:6c:b2:0b:ec:9e:59:04:95:17:98:15:
b1:e5:cd:23:63:3d:0e:58:db:11:3f:30:87:c4:a9:
ac:59:e8:f0:62:cc:ce:05:d9:1e:e6:a9:75:e8:56:
cb:a0:58:f2:9e:59:03:5b:cc:84:19:ff:8d:15:dc:
c6:ad:b1:e3:f8:52:7d:54:2b:51:b6:66:7b:d4:90:
83:34:67:ee:69:49:1b:e6:be:df:cf:90:e5:84:19:
51:b5:5a:e4:4e:0f:da:68:72:1f:86:41:6d:d4:b3:
32:05:5d:71:12:95:1c:aa:ff:1d:aa:83:e0:7d:98:
aa:f8:87:ef:99:66:f7:8d:66:ab:ac:0e:b5:64:5c:
30:49:6a:b0:e0:3a:5b:49:11:bb:6a:2b:3a:03:2b:
9c:92:70:28:0f:4f:b4:f2:ba:55:d5:25:ab:6f:b0:
9e:49:a4:ed:d9:e6:b4:cd:f8:c0:59:bc:03:ff:9e:
7d:19:80:9b:2e:48:11:0e:e4:09:89:e2:44:16:e4:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A4:C8:0F:CD:E7:F8:FC:3C:FF:CF:47:59:89:2C:1F:FF:EF:C1:DF
X509v3 Authority Key Identifier:
keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:f4:1a:e3:78:15:fd:12:ec:ee:08:43:4e:21:c5:c9:b8:
23:2c:a6:1f:06:5a:b8:52:d3:59:a7:dc:30:ec:1a:c2:be:93:
03:4e:80:5f:66:0a:5d:50:c9:cb:23:a9:35:95:ce:b5:3e:37:
21:0d:6c:a3:25:27:5d:4b:c3:ff:8f:fa:b2:22:4f:43:f9:69:
e1:8d:d9:bb:ea:6d:2b:73:53:df:cd:7d:e3:e2:01:c5:5a:55:
ba:8e:58:f2:36:a2:0f:79:af:7e:fe:c7:7d:4c:10:65:82:b5:
1f:c3:08:7b:13:ab:23:a4:f4:70:5a:ad:90:c6:dd:2f:b0:b0:
35:3d:17:73:65:d6:77:77:f7:11:47:9b:61:26:18:c5:83:8f:
39:b6:d1:94:02:e7:91:8a:c2:9d:da:ae:3c:6c:7e:56:48:e5:
81:64:f4:87:32:cd:1f:30:ce:65:6c:85:b8:ff:ff:6f:8e:9d:
9e:cd:51:ff:01:ff:ae:0d:24:3a:90:07:cb:c6:b6:bd:dc:91:
3d:7c:9b:73:7b:c8:da:49:eb:57:8d:41:80:7b:96:20:91:ee:
6b:58:61:c1:82:33:0b:7a:5f:f7:de:32:04:e7:49:4c:07:bd:
df:d5:db:04:14:3f:3b:64:2c:44:45:93:09:fa:ca:7a:0b:7a:
72:0f:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:51:34 2026 by rpki-client