
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json)
Hash identifier: Xr4I7OnSSdnNQH7ObaoeJm1dOBQQKAw1A6X/yUmlDpQ=
Subject key identifier: ED:A2:11:CE:69:AA:E0:05:0B:B3:0C:A5:A8:C6:BB:35:7B:48:F4:50
Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Certificate serial: 0A35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
Manifest number: 0A2C
Signing time: Sat 14 Nov 2026 19:35:57 +0000
Manifest this update: Sat 14 Nov 2026 19:35:57 +0000
Manifest next update: Sat 21 Nov 2026 19:35:57 +0000
Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: 5KDyjeMRPW1KvVu3veF7XPM1PY4vXK3k77hnMefa0r0=)
2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: drREk/OAiw4nw+aB1RVjD5zbqv5hAnk1VMgyPcenfqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 19:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Validity
Not Before: Nov 14 19:35:57 2026 GMT
Not After : Nov 21 19:35:57 2026 GMT
Subject: CN=6af8b81d-9bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:ea:e0:83:c0:71:45:76:7c:98:61:53:5f:
45:61:cf:7b:64:ff:53:2e:f0:43:74:e5:42:32:ff:
fe:5c:f4:1f:07:fc:36:04:01:5a:54:7d:e3:b2:5d:
a2:16:6c:89:81:a4:2e:4a:18:62:3c:67:de:fb:eb:
01:ba:79:3f:e2:a9:6e:99:5c:50:d5:63:aa:ae:4c:
54:cd:34:ea:1b:9c:ad:b4:c3:7f:20:a3:87:69:38:
3d:6b:f4:5c:bd:bf:c8:20:82:50:34:06:65:4d:ad:
2e:70:1a:82:0a:ee:5f:14:ae:cd:c5:19:b3:a8:d1:
59:b6:ba:7d:b1:8d:89:aa:e0:49:63:d2:27:08:cd:
1e:45:3c:c1:b1:7b:df:db:54:e0:db:36:1b:66:5f:
87:dd:65:24:02:7b:76:23:21:ee:16:e2:fd:0d:65:
60:e1:7e:93:b3:c9:c7:45:bf:36:8f:f7:bc:79:1e:
d5:f8:82:e9:fc:c2:59:4f:5c:21:5e:b8:64:13:ec:
f8:38:05:f0:a4:24:58:15:58:cf:e2:27:9d:d9:e4:
3e:4e:ab:dc:82:94:8c:7b:dc:3b:e6:c2:ee:4c:b9:
fd:b7:2f:45:ed:02:9e:67:2b:c8:b7:ae:ce:e3:2b:
ec:30:fc:18:f2:06:60:df:04:a5:79:25:5a:5c:c0:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A2:11:CE:69:AA:E0:05:0B:B3:0C:A5:A8:C6:BB:35:7B:48:F4:50
X509v3 Authority Key Identifier:
keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:94:98:c5:34:7c:ee:fd:60:c3:3f:c4:30:2f:3b:17:f9:
a5:af:bd:2e:57:67:db:a9:f0:f5:1a:34:2f:2d:bc:ea:98:9a:
38:85:8c:fa:13:be:9d:24:3f:2d:46:03:e9:83:3a:3d:03:2f:
78:d5:10:ab:7c:d6:6e:6f:4c:e4:a0:ad:84:de:6b:ed:78:86:
ec:43:61:3d:b2:6a:fe:66:df:0f:a0:4d:8e:8f:44:5a:a3:e7:
ab:75:2f:2c:fe:9f:50:40:70:34:de:c6:66:62:fc:27:f8:54:
d9:c7:a7:43:35:b5:53:0e:bd:21:a2:7e:4f:09:9b:b0:ae:09:
65:4b:c2:8a:e2:94:25:a9:a8:2c:ae:bc:8f:5e:e0:57:b4:c9:
4e:88:99:70:ad:ca:35:7f:5d:87:18:58:77:a4:29:0e:d0:e7:
aa:ea:55:45:78:f1:f5:89:6d:cb:c2:ec:68:21:52:7c:17:f6:
7d:cf:64:aa:71:c5:da:f2:1b:72:f9:7e:b6:42:2a:6e:46:ec:
ba:76:b2:52:11:33:ca:ef:6e:86:90:f8:8a:99:7d:b3:6a:2a:
9b:78:2f:ad:65:8c:c8:02:35:36:e8:c0:00:04:72:47:91:50:
d8:f0:2a:7c:4b:bd:81:e8:8d:7f:15:32:ec:4b:88:02:39:3d:
f4:7d:08:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx
ODY1QTAwREQwHhcNMjYxMTE0MTkzNTU3WhcNMjYxMTIxMTkzNTU3WjAYMRYwFAYD
VQQDEw02YWY4YjgxZC05YmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTLq4IPAcUV2fJhhU19FYc97ZP9TLvBDdOVCMv/+XPQfB/w2BAFaVH3jsl2i
FmyJgaQuShhiPGfe++sBunk/4qlumVxQ1WOqrkxUzTTqG5yttMN/IKOHaTg9a/Rc
vb/IIIJQNAZlTa0ucBqCCu5fFK7NxRmzqNFZtrp9sY2JquBJY9InCM0eRTzBsXvf
21Tg2zYbZl+H3WUkAnt2IyHuFuL9DWVg4X6Ts8nHRb82j/e8eR7V+ILp/MJZT1wh
XrhkE+z4OAXwpCRYFVjP4ied2eQ+TqvcgpSMe9w75sLuTLn9ty9F7QKeZyvIt67O
4yvsMPwY8gZg3wSleSVaXMBijQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO2iEc5p
quAFC7MMpajGuzV7SPRQMB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz
Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ
UmdobUQ1b2dUbEVZWmFBTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiIiUmMU0fO79YMM/xDAvOxf5pa+9Lldn26nw9Ro0Ly286piaOIWM+hO+nSQ/
LUYD6YM6PQMveNUQq3zWbm9M5KCthN5r7XiG7ENhPbJq/mbfD6BNjo9EWqPnq3Uv
LP6fUEBwNN7GZmL8J/hU2cenQzW1Uw69IaJ+TwmbsK4JZUvCiuKUJamoLK68j17g
V7TJToiZcK3KNX9dhxhYd6QpDtDnqupVRXjx9Ylty8LsaCFSfBf2fc9kqnHF2vIb
cvl+tkIqbkbsunayUhEzyu9uhpD4ipl9s2oqm3gvrWWMyAI1NujAAARyR5FQ2PAq
fEu9geiNfxUy7EuIAjk99H0IIQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:58:34 2026 by rpki-client