
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
File: kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json)
Hash identifier: TVLNaFy3SFQVb9lhb1jdLnuVHJuVmyarErePcEsf/q0=
Subject key identifier: 19:8B:FF:FC:64:37:D6:40:9A:EE:9B:D7:72:E6:26:C4:0F:8D:5E:BB
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Certificate issuer: /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
Manifest number: 1224
Signing time: Fri 12 Jun 2026 17:06:40 +0000
Manifest this update: Fri 12 Jun 2026 17:06:40 +0000
Manifest next update: Fri 19 Jun 2026 17:06:40 +0000
Files and hashes: 1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: QjDN9+gXz0IJnzY1syGPwgMvwoHe1ny+XrAabY/EuTc=)
2: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=)
3: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=)
4: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=)
5: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=)
6: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Validity
Not Before: Jun 12 17:06:40 2026 GMT
Not After : Jun 19 17:06:40 2026 GMT
Subject: CN=6a2c3ca0-a313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:27:1f:20:90:97:93:e1:a7:75:8d:f4:bf:
df:fb:68:54:7d:00:8f:0e:26:1a:bd:49:4f:34:8c:
89:4e:c8:26:ce:e1:10:c6:c6:56:4f:5a:73:71:fc:
ca:f3:50:e3:c4:b6:4a:ea:08:24:32:25:a0:55:d4:
3d:20:d1:19:31:aa:17:63:97:f6:e8:31:ff:2e:ac:
2e:1b:e4:54:67:29:8a:65:1a:27:c1:ff:a4:7d:53:
ce:a1:92:3c:88:a3:e9:ef:fb:63:f6:dd:9b:ee:ca:
f7:27:1c:c4:09:56:20:24:49:f4:67:ca:75:f9:a9:
17:f6:da:81:a8:4b:7e:6c:88:ec:0e:53:ad:40:00:
7b:fe:92:bd:c7:74:38:d2:05:68:08:9f:bd:c7:2f:
47:4f:9d:5c:d0:6d:bc:5b:9e:56:22:82:1a:d1:f4:
8f:d2:f8:69:a4:c7:db:d7:a2:7b:cd:31:e3:e7:59:
d5:53:91:33:e4:29:c1:d9:41:4a:29:dd:ea:f9:15:
92:14:27:ca:45:54:3c:40:58:6e:23:3a:04:e0:c0:
14:c0:cf:e2:52:c7:a6:63:62:26:01:dc:7e:7e:73:
0e:4c:9a:da:59:80:66:42:10:09:d8:b0:d1:46:e9:
dd:25:1a:62:66:9d:41:17:20:0d:bd:6b:fd:a2:21:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8B:FF:FC:64:37:D6:40:9A:EE:9B:D7:72:E6:26:C4:0F:8D:5E:BB
X509v3 Authority Key Identifier:
keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7b:9e:78:b5:9f:39:35:52:cf:9f:b2:aa:77:b8:99:2f:c1:
9b:85:69:05:d7:38:d3:75:f4:6b:0f:eb:91:fb:b9:f6:c5:07:
d6:a7:4d:66:34:47:bf:9e:e1:9e:ac:e6:ac:ed:7e:fc:96:44:
ce:da:84:78:42:3d:f6:21:2d:03:ad:a3:c0:7c:0f:45:d6:7a:
c7:ae:56:56:3a:a5:4b:94:cd:23:f0:da:db:64:40:88:17:cc:
19:bf:b8:04:73:4b:01:7d:e9:52:a3:c8:70:b3:63:cc:bb:0b:
40:46:40:da:78:e6:81:bc:c2:6c:83:2a:d7:92:73:cc:17:88:
e1:cf:bd:e4:9f:a4:cb:8c:c1:7a:05:0f:88:80:b8:7a:dc:96:
9e:81:dc:ea:3f:f0:f3:60:fa:46:c1:30:1f:62:21:2f:6a:4c:
99:3c:40:99:00:81:87:7a:e6:f8:1b:b9:b0:aa:86:d8:54:6e:
a5:98:f9:53:77:b3:64:1f:ec:b1:fc:98:24:1c:ee:27:ae:21:
05:20:6d:d1:14:87:5b:00:7e:c9:45:55:24:25:93:6f:12:29:
47:93:44:da:df:56:af:f7:aa:72:35:95:85:0e:0e:0b:e7:ce:
c4:40:fe:7f:d9:57:4a:dd:04:d5:61:73:61:88:21:46:4d:46:
3c:ca:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:20 2026 by rpki-client