
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json)
Hash identifier: rhFuL8MbNIrF1t60IDzs9NWOmy7CB68i8R1DW7vMU6U=
Subject key identifier: 1E:7D:22:D5:E7:7D:F1:42:D9:51:32:81:DE:6D:B9:70:72:74:31:B8
Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Certificate serial: 3569
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
Manifest number: 355B
Signing time: Fri 12 Jun 2026 14:56:23 +0000
Manifest this update: Fri 12 Jun 2026 14:56:22 +0000
Manifest next update: Fri 19 Jun 2026 14:56:22 +0000
Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: ATKGSSjtdord3diOkY/uUyErqjCK5CE488iXT8mTDn8=)
2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 07LE9X8LH2BaI/dz0O3mbMsKmiKgclhDrz2z98RF0c0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13673 (0x3569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Validity
Not Before: Jun 12 14:56:22 2026 GMT
Not After : Jun 19 14:56:22 2026 GMT
Subject: CN=6a2c1e17-2e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:22:10:54:79:3b:87:ec:40:4f:72:48:e8:
cf:d1:0c:f4:db:77:3e:45:91:34:88:bd:4c:63:6c:
99:b2:19:d9:37:3a:7e:f3:7b:05:4c:c3:39:03:40:
91:6d:85:ba:e1:0a:61:ce:34:7f:f0:ab:bb:6a:63:
64:e2:d9:2d:af:f7:01:cd:b0:ab:4c:1e:64:16:e1:
49:45:21:1c:96:1e:48:18:ed:78:90:f1:b5:9f:34:
53:ff:28:82:ae:6a:18:cb:bf:e6:7e:74:8d:fb:a6:
03:32:98:a8:cd:cc:59:73:b8:e7:ef:af:0d:5b:2d:
72:e7:14:e1:8b:32:d7:a8:6c:ed:e6:b2:a2:b6:a6:
dc:b2:aa:9b:bb:68:9e:ca:6c:c6:56:f7:e0:5c:6a:
09:f7:83:ec:20:52:41:9c:cb:41:8e:58:6a:d1:e1:
76:f5:7a:5c:e3:4c:24:4d:70:1a:97:3a:3b:dc:d0:
5c:77:0c:ab:63:b6:1b:31:57:39:52:f2:f1:b5:04:
be:1a:d6:4b:83:63:49:56:1b:63:a6:48:10:d3:82:
62:8e:a1:48:46:a5:6c:a8:6a:05:27:0e:3f:95:94:
3a:29:ca:17:d0:36:50:9f:d8:5b:59:f6:38:9e:61:
45:e2:e8:82:b8:b5:82:e6:7f:d1:92:f3:87:8d:b0:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7D:22:D5:E7:7D:F1:42:D9:51:32:81:DE:6D:B9:70:72:74:31:B8
X509v3 Authority Key Identifier:
keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:a4:47:a9:13:c7:c7:23:7b:7f:9a:98:ae:4b:41:41:aa:
aa:5a:29:98:fb:ba:17:96:f9:99:4b:07:cc:ce:5f:a2:fb:4b:
9c:3e:a0:77:3a:75:85:4c:41:0f:2c:20:b5:2f:3b:2a:e8:6d:
06:09:15:67:b3:86:3d:98:b5:d3:ba:c4:30:8a:ea:27:d6:b0:
56:d3:99:a3:61:85:e8:a6:a0:80:5e:42:d8:92:51:8c:4f:01:
30:63:db:c9:19:3b:87:c5:fe:33:aa:5e:b5:39:e6:c6:b9:9b:
86:58:d7:ca:94:3d:9b:14:ae:82:2f:7c:d0:f7:ce:2f:d9:95:
34:43:93:26:1d:e5:d2:4a:a6:6d:16:4f:93:f7:b6:a4:43:ef:
21:ae:f2:0a:c6:a4:66:7b:45:93:cb:5c:2d:54:42:9f:ab:7b:
ff:3b:ec:d1:65:34:8c:87:42:38:ff:ea:0f:bd:64:1b:84:14:
ca:7d:70:4c:b1:02:6b:50:6c:84:26:e0:e0:2b:cd:b7:16:53:
55:e1:46:4d:59:13:0c:ac:8f:2a:80:64:b3:94:9e:54:03:61:
24:99:11:98:94:a3:bf:25:b2:75:7b:b9:d5:72:91:8f:25:d6:
fb:48:db:b6:30:81:4a:51:2b:1c:11:6c:e2:92:2d:33:ed:73:
4b:91:4b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:44 2026 by rpki-client