
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier: eccbSS4+g6tLWbzw90mrL/bx7NlhONtwEG5yWyyCga4=
Subject key identifier: FC:BB:67:5C:8F:A6:17:16:06:57:7E:7C:33:44:16:F3:55:E3:40:49
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number: 011C
Signing time: Sat 13 Jun 2026 05:59:16 +0000
Manifest this update: Sat 13 Jun 2026 05:59:15 +0000
Manifest next update: Sat 20 Jun 2026 05:59:15 +0000
Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: Q8DMLal/QUeDtSuJQiu9v3Tilo1Cp8uPdTRxZIwVkkE=)
2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Jun 13 05:59:15 2026 GMT
Not After : Jun 20 05:59:15 2026 GMT
Subject: CN=6a2cf1b4-7fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:e2:68:8c:68:92:7c:a8:72:7e:55:c2:6a:
e1:ef:3e:83:f1:ca:4a:91:05:63:a3:70:14:92:65:
d4:88:b6:0c:cd:44:34:b1:05:a4:4a:35:a0:93:62:
8f:2b:d6:9e:cc:77:e4:2f:94:ec:e4:7b:0e:d9:e9:
63:27:72:cf:1f:8a:08:7c:5b:80:cd:73:41:ff:56:
07:ec:88:00:87:52:5f:e8:46:f5:13:76:6d:54:26:
49:93:c8:c3:bf:0e:ab:bf:96:fd:c1:06:27:47:46:
84:a5:7c:14:33:f0:75:38:46:e4:5c:56:ac:7a:23:
63:56:1b:58:f5:4a:51:16:88:48:8b:97:73:7d:8d:
43:2d:da:b1:c9:63:ff:7b:e0:83:83:1d:85:78:82:
2c:08:f3:e3:f8:b5:b8:f0:4c:d8:6c:d9:30:8f:be:
24:a2:2f:c3:2f:6b:0d:5b:bd:8f:0c:0d:83:e7:7b:
aa:2d:20:52:c9:01:01:db:fd:b1:84:44:49:1a:5e:
73:00:cc:10:65:5f:22:48:24:c4:b4:7f:46:e9:09:
90:33:10:4b:a7:5b:e5:6e:57:13:d3:45:bf:31:ee:
1f:e0:e5:02:a8:54:e4:f7:88:5f:7f:f7:5b:a8:03:
91:7e:a3:4e:0f:b2:24:49:b5:ae:39:e2:f1:33:da:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:67:5C:8F:A6:17:16:06:57:7E:7C:33:44:16:F3:55:E3:40:49
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:93:1a:ed:31:e5:65:f3:18:7f:19:6e:ce:98:0e:21:cc:
39:3d:05:a6:10:44:d0:f5:4e:0c:d7:83:5e:4c:23:31:05:0c:
de:69:39:23:36:a2:07:85:17:c3:4a:c7:3a:ac:7c:5a:b6:06:
79:d8:f9:16:e6:06:d9:cf:b0:42:67:dc:d5:05:5a:33:f9:f5:
7a:7f:25:7b:a4:5c:ce:75:96:ba:21:9a:7f:d2:b0:27:ce:30:
a6:23:c0:9b:12:1a:88:94:b8:90:d0:bc:41:75:ef:a5:71:24:
3b:f8:ab:8e:37:dc:d2:d9:bc:0a:1b:bc:97:59:cd:97:99:73:
c0:05:f3:06:b1:7d:92:92:4b:cd:88:4d:3e:48:96:28:cc:75:
e6:60:bf:3f:44:a5:ae:81:b3:c2:38:89:cf:92:db:37:49:4e:
bb:e4:d2:be:c8:c0:61:9c:32:10:f2:fc:cb:59:90:c8:f0:e0:
a6:7a:27:a9:ed:2a:a7:c6:60:b2:e1:15:d7:3d:2c:e4:03:cd:
44:d1:48:90:59:d4:29:39:6d:24:b2:67:d2:3a:b1:bc:72:37:
4c:92:db:48:69:1e:bf:7e:0a:d8:65:50:bc:f6:bc:62:56:33:
96:00:4a:eb:a7:50:d3:88:c4:b7:9c:28:b8:1b:75:2e:53:f5:
af:ea:ed:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD
QTJDOEQxRDkwHhcNMjYwNjEzMDU1OTE1WhcNMjYwNjIwMDU1OTE1WjAYMRYwFAYD
VQQDEw02YTJjZjFiNC03ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0qviaIxoknyocn5Vwmrh7z6D8cpKkQVjo3AUkmXUiLYMzUQ0sQWkSjWgk2KP
K9aezHfkL5Ts5HsO2eljJ3LPH4oIfFuAzXNB/1YH7IgAh1Jf6Eb1E3ZtVCZJk8jD
vw6rv5b9wQYnR0aEpXwUM/B1OEbkXFaseiNjVhtY9UpRFohIi5dzfY1DLdqxyWP/
e+CDgx2FeIIsCPPj+LW48EzYbNkwj74koi/DL2sNW72PDA2D53uqLSBSyQEB2/2x
hERJGl5zAMwQZV8iSCTEtH9G6QmQMxBLp1vlblcT00W/Me4f4OUCqFTk94hff/db
qAORfqNOD7IkSbWuOeLxM9pRkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPy7Z1yP
phcWBld+fDNEFvNV40BJMB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5
OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts
X0VrYmZMNi1hT19LTEkwZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdNOTGu0x5WXzGH8Zbs6YDiHMOT0FphBE0PVODNeDXkwjMQUM3mk5IzaiB4UX
w0rHOqx8WrYGedj5FuYG2c+wQmfc1QVaM/n1en8le6RcznWWuiGaf9KwJ84wpiPA
mxIaiJS4kNC8QXXvpXEkO/irjjfc0tm8Chu8l1nNl5lzwAXzBrF9kpJLzYhNPkiW
KMx15mC/P0SlroGzwjiJz5LbN0lOu+TSvsjAYZwyEPL8y1mQyPDgpnonqe0qp8Zg
suEV1z0s5APNRNFIkFnUKTltJLJn0jqxvHI3TJLbSGkev34K2GVQvPa8YlYzlgBK
66dQ04jEt5wouBt1LlP1r+rtsw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:57 2026 by rpki-client