
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier: 8lJASnpjgmMH2hL9ss2txaChSh3Gcs7tc1di9KmnYIs=
Subject key identifier: AA:C4:7E:79:5F:FE:DB:2E:07:15:DC:AE:E6:AF:13:8F:90:5A:D2:E8
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 0979
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number: 096E
Signing time: Fri 12 Jun 2026 20:06:44 +0000
Manifest this update: Fri 12 Jun 2026 20:06:43 +0000
Manifest next update: Fri 19 Jun 2026 20:06:43 +0000
Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: FJ8S2tosu2BYFt7zm0Mr+vTWPU9tsl7csTWReeoX44M=)
2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: K8ifKpf1OxSentj2ShFOfGXT/u0aCJtaC2BhvsjDEzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2425 (0x979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Validity
Not Before: Jun 12 20:06:43 2026 GMT
Not After : Jun 19 20:06:43 2026 GMT
Subject: CN=6a2c66d4-ffae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:f5:68:38:60:0f:76:7e:ba:17:26:24:e8:
d8:49:7f:cf:12:79:63:c9:d2:6d:89:f9:d7:39:d1:
69:7a:93:05:9e:c1:d7:fc:59:b6:42:6e:4d:eb:9d:
03:7e:52:cf:ee:4b:e6:a4:24:03:6a:23:16:16:69:
5c:94:50:1b:da:c8:4e:63:28:ae:ad:bb:59:e5:96:
23:8c:e5:61:8a:1c:d1:5a:ff:6c:c1:7b:de:5c:14:
fa:48:67:b2:2a:4c:41:59:84:45:91:a5:cd:bf:aa:
73:6a:3d:3e:72:ef:5b:93:fd:f6:ac:ce:ec:3a:6c:
64:9b:46:d4:94:f1:30:20:e5:8e:77:5f:17:46:3b:
a7:ad:e1:f7:4d:d1:fd:29:e2:3b:b9:f2:96:a0:77:
31:10:30:49:fb:6a:ea:f8:39:bc:5f:d5:ef:9e:80:
b8:05:c2:9f:c1:3b:a3:4b:87:d0:8e:c1:34:1f:a4:
be:4d:4a:53:4b:81:98:22:a5:86:bc:d4:32:69:08:
d2:e4:77:57:93:c2:7a:26:0f:08:5c:1a:e5:4c:3a:
22:ec:07:cd:92:ed:8b:6e:3e:24:c3:c2:5c:54:62:
b1:71:0d:45:a0:2f:cd:73:04:2d:91:32:ac:8f:1b:
60:32:fc:9b:6a:05:bf:5f:dd:10:f7:6b:91:0d:20:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:7E:79:5F:FE:DB:2E:07:15:DC:AE:E6:AF:13:8F:90:5A:D2:E8
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e1:92:2f:94:ba:31:fb:7b:9a:94:09:68:ee:67:68:c8:b1:
25:01:38:28:4c:59:59:6b:52:4c:27:a8:cb:6e:57:4f:34:d2:
31:21:b9:f4:10:b0:04:bf:9c:ea:53:f4:14:6d:b6:0d:77:74:
4c:99:cb:52:18:e5:f3:03:8e:93:6a:23:f6:2c:64:f9:fa:71:
25:5c:df:2b:bb:c2:ba:a1:d5:83:98:f1:3e:75:83:71:a6:5a:
7e:2e:b1:0e:41:ed:db:58:cb:87:eb:75:d2:65:37:cb:67:3a:
ef:91:4c:5d:e3:23:25:d3:b2:11:87:33:8a:c2:6c:41:f0:b5:
99:7b:22:2f:03:53:b3:12:d9:cb:d4:bf:79:30:89:55:8b:2c:
12:c3:be:0d:13:c7:5c:ea:d1:cd:df:1a:da:bd:7f:59:dc:a8:
d3:4d:aa:74:be:41:c0:00:5b:04:a2:74:92:80:ec:a3:0e:45:
8f:6b:87:e9:6f:11:55:15:99:e4:48:72:14:15:5b:40:d8:30:
4f:b7:60:83:da:4d:29:15:23:8b:d4:e9:12:f0:03:10:d5:3e:
37:d3:89:81:e7:46:54:f6:51:4a:66:b5:3d:ee:e9:3c:78:c5:
88:23:3c:01:c9:39:e7:69:8b:81:97:36:eb:10:9f:c3:71:d7:
10:87:74:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB
M0I3NUE2RDMwHhcNMjYwNjEyMjAwNjQzWhcNMjYwNjE5MjAwNjQzWjAYMRYwFAYD
VQQDEw02YTJjNjZkNC1mZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtOX1aDhgD3Z+uhcmJOjYSX/PEnljydJtifnXOdFpepMFnsHX/Fm2Qm5N650D
flLP7kvmpCQDaiMWFmlclFAb2shOYyiurbtZ5ZYjjOVhihzRWv9swXveXBT6SGey
KkxBWYRFkaXNv6pzaj0+cu9bk/32rM7sOmxkm0bUlPEwIOWOd18XRjunreH3TdH9
KeI7ufKWoHcxEDBJ+2rq+Dm8X9XvnoC4BcKfwTujS4fQjsE0H6S+TUpTS4GYIqWG
vNQyaQjS5HdXk8J6Jg8IXBrlTDoi7AfNku2Lbj4kw8JcVGKxcQ1FoC/NcwQtkTKs
jxtgMvybagW/X90Q92uRDSDvcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrEfnlf
/tsuBxXcruavE4+QWtLoMB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB
ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjhCQS8zMjA5MDFDNEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4
ZDd4c09hUUdoWmlqdDFwdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoeGSL5S6Mft7mpQJaO5naMixJQE4KExZWWtSTCeoy25XTzTSMSG59BCwBL+c
6lP0FG22DXd0TJnLUhjl8wOOk2oj9ixk+fpxJVzfK7vCuqHVg5jxPnWDcaZafi6x
DkHt21jLh+t10mU3y2c675FMXeMjJdOyEYczisJsQfC1mXsiLwNTsxLZy9S/eTCJ
VYssEsO+DRPHXOrRzd8a2r1/Wdyo002qdL5BwABbBKJ0koDsow5Fj2uH6W8RVRWZ
5EhyFBVbQNgwT7dgg9pNKRUji9TpEvADENU+N9OJgedGVPZRSma1Pe7pPHjFiCM8
Ack552mLgZc26xCfw3HXEId0TA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:33 2026 by rpki-client