
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier: d26eBx+T781EIM5+4+UMLBERIoBZlW3Hh0Letl3WW/g=
Subject key identifier: EF:3F:AA:2B:9C:A3:F2:5F:6D:70:57:AA:57:B7:80:B3:2D:DD:12:54
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 08AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number: 088E
Signing time: Tue 16 Jun 2026 20:47:39 +0000
Manifest this update: Tue 16 Jun 2026 20:47:39 +0000
Manifest next update: Tue 23 Jun 2026 20:47:39 +0000
Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: JAt4Q/qLWswPTncVljJ3rF6UNUnfwNKvdG4BARs7dHs=)
2: E51AC37C169D11F18D04F8B992EE528E.roa (hash: mYlJdFIW8EjyX8ajfhqX1Cs+hajlapMlYM5UC79/gBw=)
3: 0BE76940057F11F1BBFA6CD7ADEE528E.roa (hash: 6ZHlxBuUbn16eSux/ogpwO6CFNWl05TS7wn4VyI0hlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Validity
Not Before: Jun 16 20:47:39 2026 GMT
Not After : Jun 23 20:47:39 2026 GMT
Subject: CN=6a31b66b-7f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:93:f6:7f:da:3c:19:59:e5:6c:8f:f0:f4:
4d:87:30:aa:0f:e2:3e:d5:aa:54:2d:ff:60:f8:19:
84:59:dc:87:cb:b6:b6:50:59:c9:9a:2a:ac:41:28:
e1:8d:b1:b7:ac:7b:9c:c7:53:2e:c9:ab:00:c9:8b:
63:66:36:1f:2c:09:7a:fd:5c:a0:38:28:ba:df:99:
34:d3:14:86:81:29:91:1c:c6:68:62:81:a6:65:21:
7f:2f:0c:3f:e1:05:f0:da:19:51:c0:0f:6d:f7:f9:
81:e7:43:e6:35:48:71:79:92:60:07:b2:6b:87:2f:
59:9c:c8:7e:00:04:52:d9:1d:41:6a:79:e3:ba:d9:
f7:3e:72:9c:48:10:83:c8:ea:10:d4:ea:60:90:65:
30:ff:c1:ad:07:bb:93:47:18:76:a5:c7:3b:2e:17:
93:be:86:80:67:28:29:07:9e:53:3f:48:1d:a1:07:
89:7c:6e:2b:88:be:28:34:6a:a1:b5:a6:7f:07:99:
06:18:8e:73:fe:f9:82:ba:94:06:bc:3d:1d:2d:9f:
92:c7:6d:1a:3a:b7:f0:d5:37:24:81:df:8a:7a:aa:
87:6f:db:02:89:2c:e6:96:e7:80:e5:18:ef:a2:ff:
3f:04:17:d4:a7:95:cf:f3:2f:21:e6:6e:83:bd:a7:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:AA:2B:9C:A3:F2:5F:6D:70:57:AA:57:B7:80:B3:2D:DD:12:54
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:08:ae:e9:d4:f6:6b:b9:10:78:f2:0c:7f:f5:86:8e:cc:a5:
6d:40:aa:fb:2e:87:55:7b:38:4e:f2:75:c9:d1:9f:18:a7:24:
2b:43:77:21:38:e4:55:cc:ab:dd:65:3d:9d:9f:5e:81:31:a7:
12:04:27:25:74:9a:2d:99:71:fc:51:09:54:d8:87:88:80:c8:
f0:b4:a0:35:ac:f3:c6:89:17:54:b5:3f:5c:cf:8c:e7:b3:bd:
0b:08:86:b9:ae:e0:64:e5:2b:32:49:a5:76:d2:e1:6a:8c:a8:
9e:8c:32:6c:b0:49:6f:38:3b:5c:1f:fa:50:f0:20:d5:98:9d:
95:ee:f1:93:46:95:89:40:ca:05:71:67:31:1c:ca:7f:c0:43:
2b:1c:88:f3:52:b5:f5:cb:9f:fb:c4:c4:d6:ff:59:88:49:fc:
74:08:3c:66:52:b1:57:4d:2a:55:8c:8a:75:52:55:cf:d9:45:
cf:d8:9a:79:0d:ad:ca:26:fd:1f:03:5c:f1:c2:3b:3e:62:db:
49:fa:c3:98:4d:a2:e4:76:22:f7:51:dc:1d:9f:c3:7d:57:46:
8f:6b:1b:f2:8a:01:13:b2:88:89:12:86:b9:18:ec:e2:c0:88:
7e:26:d3:c8:e3:37:a2:d0:8e:7d:f0:af:2b:ea:b9:42:f0:db:
4b:a5:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:07 2026 by rpki-client