
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
File: km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json)
Hash identifier: LPnXXkhrTRyzUNBcWYsMoD5AxVI/QPERpg9KDXfqVSU=
Subject key identifier: AC:42:CA:29:40:86:2F:2C:59:BA:64:30:16:AD:98:BC:D2:A3:C1:A2
Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17
Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
Manifest number: 0271
Signing time: Sat 13 Jun 2026 02:09:52 +0000
Manifest this update: Sat 13 Jun 2026 02:09:51 +0000
Manifest next update: Sat 20 Jun 2026 02:09:51 +0000
Files and hashes: 1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: 9s5k/LZBKscSTOyrxMrcmg0gwp9rBjJRmCxZGBEog0g=)
2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: fY7nCOHqK93oVhC5DmscMwb888TwpZD1ZSvnmNHDxkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl
rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA0E, serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17
Validity
Not Before: Jun 13 02:09:51 2026 GMT
Not After : Jun 20 02:09:51 2026 GMT
Subject: CN=6a2cbbef-3411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:81:1c:10:01:95:77:3b:3a:21:88:09:d2:
81:cc:0c:2b:17:bb:5f:85:58:8d:ce:9a:4c:3e:3f:
d9:cd:ce:1c:fc:2a:8a:6e:e4:ab:f5:7f:68:74:09:
ef:ed:ee:41:e2:36:93:e3:2f:e9:1f:4e:aa:51:ea:
d1:56:61:0f:dc:79:4e:26:a8:bf:21:c5:b6:93:94:
80:ae:58:fa:14:c5:49:09:55:3b:77:70:03:96:1c:
e8:27:93:c1:1f:e4:bf:f7:55:17:4b:3f:5c:bc:7d:
5c:b0:7d:7a:5f:ec:c0:a0:d5:ba:76:10:f2:26:45:
b1:a9:26:74:2a:73:d7:b5:5e:4b:b7:14:8f:8c:ac:
d2:ef:a6:70:9a:12:58:a7:f1:3c:dc:5d:d6:56:ed:
8c:bf:ba:0d:93:5e:d0:8b:8b:8d:66:dd:4c:fb:95:
4f:b9:c2:86:9b:78:dc:53:cb:c8:24:f7:02:ef:08:
f9:11:df:ce:1b:a1:f9:30:c2:1a:b4:3b:8c:97:5a:
42:38:f9:ba:e3:bf:4e:2e:63:b0:d0:2f:58:af:05:
7b:20:de:fd:70:34:64:15:b0:cd:20:8d:5a:fa:7e:
cd:d2:29:24:e7:77:03:d7:ac:a4:75:58:8d:ac:dc:
88:0b:f4:0d:37:79:ef:25:a0:cb:cd:25:7e:82:d1:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:42:CA:29:40:86:2F:2C:59:BA:64:30:16:AD:98:BC:D2:A3:C1:A2
X509v3 Authority Key Identifier:
keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:10:30:7e:95:81:41:b8:7a:6c:ed:f7:6e:cd:bb:f3:77:e7:
af:31:72:c6:48:96:42:57:71:55:c9:17:06:08:f7:68:4d:bb:
3d:ff:a3:c6:b6:98:cc:b8:d0:cf:e2:c9:bc:39:13:42:7e:13:
d3:f0:4e:fd:e1:3e:32:50:c5:37:11:aa:2c:18:7b:25:93:f6:
2d:3f:c4:1d:c3:74:f0:96:52:8d:7e:00:66:f7:eb:43:d3:55:
b9:25:f9:ac:2d:4a:46:66:95:8c:b6:60:de:f6:51:68:e5:da:
46:4d:17:af:2a:0b:2f:83:7d:f4:1c:d5:4e:07:fa:a2:e3:b2:
05:96:34:95:46:10:72:cc:c2:2a:86:44:22:38:28:e5:ce:3e:
a6:78:38:74:1f:3f:db:c4:9f:d9:49:43:cd:3e:90:4b:68:c6:
aa:93:f8:13:ca:df:51:24:4c:f1:96:9a:ae:3e:69:54:33:8e:
93:d0:99:c6:4d:41:0b:0b:ff:97:af:26:53:b5:15:96:6b:89:
aa:bf:08:23:ea:41:cd:28:9a:8b:f3:e7:13:dd:fa:42:ab:05:
3a:06:c0:19:3c:30:bc:74:86:a0:d9:a3:af:6d:e1:63:36:9e:
d8:f1:25:cd:32:5a:b6:39:d9:33:bc:ec:7b:88:1f:df:29:d6:
4d:62:41:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx
MTg0NkVFMTcwHhcNMjYwNjEzMDIwOTUxWhcNMjYwNjIwMDIwOTUxWjAYMRYwFAYD
VQQDEw02YTJjYmJlZi0zNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgiBHBABlXc7OiGICdKBzAwrF7tfhViNzppMPj/Zzc4c/CqKbuSr9X9odAnv
7e5B4jaT4y/pH06qUerRVmEP3HlOJqi/IcW2k5SArlj6FMVJCVU7d3ADlhzoJ5PB
H+S/91UXSz9cvH1csH16X+zAoNW6dhDyJkWxqSZ0KnPXtV5LtxSPjKzS76ZwmhJY
p/E83F3WVu2Mv7oNk17Qi4uNZt1M+5VPucKGm3jcU8vIJPcC7wj5Ed/OG6H5MMIa
tDuMl1pCOPm6479OLmOw0C9YrwV7IN79cDRkFbDNII1a+n7N0ikk53cD16ykdViN
rNyIC/QNN3nvJaDLzSV+gtFk3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxCyilA
hi8sWbpkMBatmLzSo8GiMB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw
MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkEwRS9EQkJFRDIwNkMwMDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5
ZGx1MEVpY29EQjhSaEc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdhAwfpWBQbh6bO33bs2783fnrzFyxkiWQldxVckXBgj3aE27Pf+jxraYzLjQ
z+LJvDkTQn4T0/BO/eE+MlDFNxGqLBh7JZP2LT/EHcN08JZSjX4AZvfrQ9NVuSX5
rC1KRmaVjLZg3vZRaOXaRk0XryoLL4N99BzVTgf6ouOyBZY0lUYQcszCKoZEIjgo
5c4+png4dB8/28Sf2UlDzT6QS2jGqpP4E8rfUSRM8Zaarj5pVDOOk9CZxk1BCwv/
l68mU7UVlmuJqr8II+pBzSiai/PnE936QqsFOgbAGTwwvHSGoNmjr23hYzae2PEl
zTJatjnZM7zse4gf3ynWTWJBGA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:28:32 2026 by rpki-client