
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json)
Hash identifier: UDm0vhwvh3auysVckdKDGxpZQJG4DmaROl50qSVu+68=
Subject key identifier: 06:69:C7:B1:94:03:17:34:BC:B6:11:45:57:AB:BE:14:2A:5E:E8:8A
Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Certificate serial: 052A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
Manifest number: 052A
Signing time: Tue 16 Jun 2026 23:38:50 +0000
Manifest this update: Tue 16 Jun 2026 23:38:50 +0000
Manifest next update: Tue 23 Jun 2026 23:38:50 +0000
Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: x/c0BG3oVnN/COUo0tl2sKYEYmUQUr+Cvy+W3ur7ffo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Validity
Not Before: Jun 16 23:38:50 2026 GMT
Not After : Jun 23 23:38:50 2026 GMT
Subject: CN=6a31de8a-d02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:de:10:b3:80:bb:92:85:30:44:9b:07:33:
87:9d:6a:4a:5b:ab:fe:fa:90:2a:33:23:77:2c:5b:
32:74:06:5b:6c:5f:85:88:97:93:09:5e:8f:12:e7:
a4:cc:57:bc:10:b3:a6:44:05:ae:b9:b0:fb:02:22:
79:4f:3c:c1:5d:ec:62:e5:7a:50:60:90:f0:ad:b0:
c5:f7:bf:77:60:5f:6f:8e:1d:b7:ce:f5:68:55:ce:
28:b5:40:61:41:c6:60:18:68:29:f4:04:ee:ea:45:
67:7c:10:62:2a:ba:14:28:20:34:e5:b2:2b:68:86:
bc:9c:56:91:6a:8f:9a:b1:34:1d:c8:10:09:ab:c3:
41:a1:25:0e:05:8f:45:ca:87:76:62:ce:53:85:42:
9c:c2:f6:9c:7c:f2:c6:54:91:c5:ad:64:0d:03:82:
78:c4:a0:41:2c:a2:a0:ea:c3:d8:5d:ea:c5:cd:fe:
33:c3:e4:e8:ee:00:67:8d:ee:99:79:9f:37:a1:30:
7b:b8:02:28:f8:1f:d3:c5:3a:77:84:c8:2d:b8:62:
3b:31:62:0f:6e:0c:33:aa:2d:34:bf:62:15:ab:74:
72:e4:a2:b0:51:d3:41:f1:e1:fd:3a:df:dd:e5:48:
bb:c2:4c:28:a0:5c:79:b5:80:e2:76:a6:d6:14:ff:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:C7:B1:94:03:17:34:BC:B6:11:45:57:AB:BE:14:2A:5E:E8:8A
X509v3 Authority Key Identifier:
keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:3c:65:b3:81:22:50:79:ec:04:78:46:76:5f:72:5a:d2:
85:c4:49:91:6c:20:0b:da:9a:ec:25:1f:2c:63:cf:8d:f4:a3:
81:29:af:7a:50:52:7e:32:86:84:8f:48:45:9b:f1:36:fc:94:
b3:64:44:f4:9b:2d:3f:bc:88:d7:99:9e:24:5b:dc:c8:b7:61:
f2:2b:36:e4:4c:1e:96:22:9a:6c:fc:0e:e3:a0:ba:6b:a8:39:
1a:0c:61:30:02:c3:57:fe:c2:cf:4d:cc:65:31:08:b8:3f:72:
0a:d3:d0:72:ea:45:e5:af:43:a9:cb:e3:f3:34:7d:dd:6f:19:
99:6f:99:a6:b2:f3:17:1c:c7:1d:c2:bb:ae:40:a0:2b:aa:83:
ec:9d:85:36:fb:a8:69:fb:2b:2a:62:c0:1d:94:f5:5b:b5:46:
f8:e2:6d:05:51:2a:aa:95:af:34:ac:26:29:97:76:f0:05:0b:
0b:78:63:50:65:fb:f9:cc:63:a8:a4:d9:e7:eb:ee:74:c6:cc:
67:28:b9:b5:3c:2c:dd:4a:ac:73:43:05:9f:42:ff:19:14:61:
f1:ad:69:a9:57:92:d7:80:c1:03:11:a8:69:e1:ff:a0:d7:2e:
3d:a8:b8:a7:11:f5:ee:54:08:f5:d2:46:7a:18:c2:9d:a5:9a:
9b:ba:45:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDMwMDI4NUIxMjhDQjhEQjk1RjFFNDFGRkJEMkVCQzIy
OEQ0NTNFRkMwHhcNMjYwNjE2MjMzODUwWhcNMjYwNjIzMjMzODUwWjAYMRYwFAYD
VQQDEw02YTMxZGU4YS1kMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwv3eELOAu5KFMESbBzOHnWpKW6v++pAqMyN3LFsydAZbbF+FiJeTCV6PEuek
zFe8ELOmRAWuubD7AiJ5TzzBXexi5XpQYJDwrbDF9793YF9vjh23zvVoVc4otUBh
QcZgGGgp9ATu6kVnfBBiKroUKCA05bIraIa8nFaRao+asTQdyBAJq8NBoSUOBY9F
yod2Ys5ThUKcwvacfPLGVJHFrWQNA4J4xKBBLKKg6sPYXerFzf4zw+To7gBnje6Z
eZ83oTB7uAIo+B/TxTp3hMgtuGI7MWIPbgwzqi00v2IVq3Ry5KKwUdNB8eH9Ot/d
5Ui7wkwooFx5tYDidqbWFP+pcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZpx7GU
Axc0vLYRRVervhQqXuiKMB8GA1UdIwQYMBaAFDAChbEoy425Xx5B/70uvCKNRT78
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ENDRFMzZEMDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpibGZIa0hfdlM2OElvMUZQ
dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01BS0ZzU2pMamJsZkhrSF92UzY4SW8xRlB2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDM5RC9ENDRFMzZEMDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpi
bGZIa0hfdlM2OElvMUZQdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiZ88ZbOBIlB57AR4RnZfclrShcRJkWwgC9qa7CUfLGPPjfSjgSmvelBSfjKG
hI9IRZvxNvyUs2RE9JstP7yI15meJFvcyLdh8is25EweliKabPwO46C6a6g5Ggxh
MALDV/7Cz03MZTEIuD9yCtPQcupF5a9Dqcvj8zR93W8ZmW+ZprLzFxzHHcK7rkCg
K6qD7J2FNvuoafsrKmLAHZT1W7VG+OJtBVEqqpWvNKwmKZd28AULC3hjUGX7+cxj
qKTZ5+vudMbMZyi5tTws3Uqsc0MFn0L/GRRh8a1pqVeS14DBAxGoaeH/oNcuPai4
pxH17lQI9dJGehjCnaWam7pFJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:13:21 2026 by rpki-client