
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
File: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json)
Hash identifier: OXy5wbZyJKFJWFgC27/c/AOn2OLGsJYFlOXOfAih9fg=
Subject key identifier: F9:C4:90:0F:E0:D2:23:A7:22:09:34:69:14:9A:C9:BE:1B:CF:32:7C
Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
Certificate issuer: /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Certificate serial: 0884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
Manifest number: 0878
Signing time: Fri 12 Jun 2026 20:44:15 +0000
Manifest this update: Fri 12 Jun 2026 20:44:15 +0000
Manifest next update: Fri 19 Jun 2026 20:44:15 +0000
Files and hashes: 1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: DZ2ZKogLGtY7sAoVz3ue2DssO0W0VlcX89KKjVOkQWE=)
2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: pEoVeSKvZWCj0YeLOAFbn4+nyrnm4dpfDhs+6j8mLhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Validity
Not Before: Jun 12 20:44:15 2026 GMT
Not After : Jun 19 20:44:15 2026 GMT
Subject: CN=6a2c6f9f-d2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:e4:91:f9:27:e6:f4:d7:c5:b6:c6:7e:c6:
70:39:d6:0b:5d:e7:f7:da:25:00:5e:ee:f5:4c:d8:
ec:cb:8a:27:aa:bd:12:be:57:26:54:ae:7a:41:a2:
b4:f0:04:85:ec:75:d2:98:3f:d3:40:4e:dc:ae:90:
af:9e:e1:53:11:5a:73:c1:69:6c:75:ed:31:b7:4d:
33:3c:5c:0d:33:74:73:3c:4b:68:b1:1a:22:1e:3b:
2f:a0:4c:cb:cc:d1:59:7a:2a:ff:46:06:c8:ba:75:
42:b7:70:3f:3e:33:ab:51:68:fa:ce:84:31:e3:1b:
0f:08:08:e0:5f:3f:8f:fd:6a:62:c8:01:1c:56:30:
c2:06:a2:f1:58:37:0a:a0:7b:98:bd:0d:c9:50:90:
de:de:b5:a4:08:89:df:ef:76:00:a4:aa:a1:7c:81:
1d:7d:d0:f5:1c:4e:e4:c1:9f:ff:0e:2f:a3:49:43:
86:ee:3b:14:68:8a:a2:de:e5:32:78:e4:bd:b8:a5:
80:dd:e7:2c:fb:da:d6:37:42:77:e5:2a:8f:79:a3:
72:19:ad:42:51:04:a7:6c:91:ea:04:0a:bd:29:8e:
07:02:f8:75:eb:08:12:75:10:56:8d:9c:8d:41:9e:
f1:e3:4e:25:4a:02:f1:c8:e7:9a:b8:c2:fe:8c:0f:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C4:90:0F:E0:D2:23:A7:22:09:34:69:14:9A:C9:BE:1B:CF:32:7C
X509v3 Authority Key Identifier:
keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a6:e5:3c:51:f5:2e:74:f5:41:06:b5:58:e9:04:e7:47:94:
ca:cf:89:2a:5a:0a:e6:d6:44:35:53:1e:bb:66:2d:03:b6:17:
44:1c:a6:0d:5c:ba:dd:6d:99:de:14:21:85:c6:cf:73:e3:2e:
57:46:cd:d5:01:37:18:7c:42:6d:32:51:2b:01:e9:cf:ab:77:
63:59:4c:e2:99:ba:c6:5b:81:a2:3c:69:be:31:f7:69:24:0b:
05:f1:0a:9d:f8:b4:96:56:bc:aa:37:99:04:f4:f1:fa:1d:07:
92:4c:0c:84:cf:06:85:e3:e5:40:09:cf:3a:d9:53:05:ac:7a:
30:1b:e3:a8:ba:70:7e:e7:e7:ae:64:bb:e4:8b:d5:29:84:c3:
95:40:cc:2c:4a:e9:4f:c5:d5:a6:65:18:d3:2e:70:a6:2a:d0:
b7:e7:fd:eb:a9:44:a2:a1:0a:da:d8:32:35:fc:77:7b:31:2f:
96:c0:ab:15:97:eb:ce:2e:71:d1:89:0f:5c:87:19:e8:03:84:
bf:81:d4:ca:4b:1e:8c:fd:fb:0a:5f:88:c4:7f:e8:c9:c3:41:
2b:77:50:38:a4:4c:e6:c4:7f:94:2d:d6:b4:fa:68:e2:13:7e:
d1:6e:ba:be:04:7b:24:77:26:12:08:22:b2:e9:ad:87:79:c9:
5b:7d:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:05 2026 by rpki-client