
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json)
Hash identifier: xS7OXtoRuxYcBb+Dsr/JL204Miiy+9SuXWjciHITP1g=
Subject key identifier: 1F:FB:1E:46:63:C4:39:66:84:00:ED:F1:77:71:D3:FC:5D:2B:BE:69
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 0627
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
Manifest number: 05CB
Signing time: Fri 12 Jun 2026 23:15:21 +0000
Manifest this update: Fri 12 Jun 2026 23:15:20 +0000
Manifest next update: Fri 19 Jun 2026 23:15:20 +0000
Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: bCQqNmtcV8il9W/NjRUpA0qtEiQBjpeyIZBIdk4PC1E=)
2: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=)
3: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=)
4: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=)
5: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=)
6: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=)
7: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Jun 12 23:15:20 2026 GMT
Not After : Jun 19 23:15:20 2026 GMT
Subject: CN=6a2c9309-f9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:8e:4a:b1:c3:60:b3:d5:bb:39:6c:c7:81:
ab:5a:ca:d8:80:07:f8:a0:4d:24:af:13:72:be:fc:
76:a2:4e:4b:5f:af:1a:64:d6:76:e3:cb:f5:f0:1b:
ad:df:c0:5f:d5:e2:7f:b9:9e:0b:29:6b:22:f2:62:
f4:bd:9f:ca:18:a7:02:d5:8a:e0:bc:58:8c:16:50:
3e:8c:ad:fc:17:c3:01:55:99:ea:0c:98:4d:8f:6f:
9d:06:c3:1c:56:c9:5e:8f:f2:3d:b6:eb:d3:60:69:
5f:20:f6:3a:63:d3:99:47:75:c6:b9:d6:0e:6a:34:
fc:4d:7d:38:b6:63:15:c7:de:ba:76:61:1a:c4:cd:
d0:fc:13:23:16:ff:e5:02:9f:5e:3f:d4:c1:7e:6a:
d5:77:69:9d:9a:ee:f4:a4:ff:c2:88:56:61:1a:50:
db:aa:a0:ff:92:e0:e9:bb:9d:f9:0f:8f:79:5e:b8:
a5:e3:65:89:cb:b3:1c:3f:07:e4:5e:6e:5c:04:6f:
05:be:32:4b:e9:92:10:f1:34:23:bb:ec:85:40:02:
4a:7e:43:f8:46:ac:b7:1d:9d:d7:05:48:8d:21:7e:
bf:f1:31:86:91:f2:cf:4e:57:ba:b3:7d:45:0f:3b:
0f:85:48:26:99:fa:32:cd:d6:61:ca:7b:1c:9c:c4:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FB:1E:46:63:C4:39:66:84:00:ED:F1:77:71:D3:FC:5D:2B:BE:69
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b6:42:b0:a1:20:5a:e9:4d:7e:be:12:ff:f7:44:2b:9b:e2:
e0:8b:ba:8e:11:32:25:a5:45:bc:bf:71:ac:44:4a:de:38:da:
26:ee:db:a4:fd:5f:2a:19:bf:80:85:3f:7e:d7:dd:7b:54:ee:
1a:6b:f0:85:50:26:fa:e1:d9:7e:c9:b9:7b:6f:f6:7e:66:91:
35:ae:82:d6:6c:95:65:c4:35:d7:07:ac:45:28:f2:f0:b1:05:
35:22:e9:cd:1b:f2:73:59:d5:ae:05:1a:af:bb:e8:24:48:14:
54:3d:95:f8:0a:69:dd:82:f4:87:0b:31:36:0d:c6:75:af:d9:
07:d2:7c:67:11:7d:83:4b:ac:5d:85:93:5b:05:99:25:12:19:
be:20:87:fa:e9:24:f3:44:41:f0:97:ee:4f:52:c9:0b:c3:47:
1c:de:a3:e0:ba:15:be:dc:0b:dc:d8:6d:6b:a5:a3:f3:fc:88:
cb:65:57:a9:a2:b5:8b:75:cb:7d:c2:f3:aa:33:54:6a:b2:44:
95:a2:29:c8:ea:05:a8:9f:b5:e0:9d:30:99:38:e3:b7:95:71:
ec:45:68:63:63:2e:39:9e:d6:f9:a8:6e:e1:0e:1c:f5:72:ab:
b3:3e:0c:c9:3a:bb:62:e6:4d:a6:b8:35:74:d0:ec:c8:85:a3:
ee:4b:35:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1
MUNDQUQ4NTcwHhcNMjYwNjEyMjMxNTIwWhcNMjYwNjE5MjMxNTIwWjAYMRYwFAYD
VQQDEw02YTJjOTMwOS1mOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqoWOSrHDYLPVuzlsx4GrWsrYgAf4oE0krxNyvvx2ok5LX68aZNZ248v18But
38Bf1eJ/uZ4LKWsi8mL0vZ/KGKcC1YrgvFiMFlA+jK38F8MBVZnqDJhNj2+dBsMc
Vslej/I9tuvTYGlfIPY6Y9OZR3XGudYOajT8TX04tmMVx966dmEaxM3Q/BMjFv/l
Ap9eP9TBfmrVd2mdmu70pP/CiFZhGlDbqqD/kuDpu535D495Xril42WJy7McPwfk
Xm5cBG8FvjJL6ZIQ8TQju+yFQAJKfkP4Rqy3HZ3XBUiNIX6/8TGGkfLPTle6s31F
DzsPhUgmmfoyzdZhynscnMTYrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/7HkZj
xDlmhADt8Xdx0/xdK75pMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx
OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi
dV9pemVXSkwtUk5SeksyRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0rZCsKEgWulNfr4S//dEK5vi4Iu6jhEyJaVFvL9xrERK3jjaJu7bpP1fKhm/
gIU/ftfde1TuGmvwhVAm+uHZfsm5e2/2fmaRNa6C1myVZcQ11wesRSjy8LEFNSLp
zRvyc1nVrgUar7voJEgUVD2V+App3YL0hwsxNg3Gda/ZB9J8ZxF9g0usXYWTWwWZ
JRIZviCH+ukk80RB8JfuT1LJC8NHHN6j4LoVvtwL3Nhta6Wj8/yIy2VXqaK1i3XL
fcLzqjNUarJElaIpyOoFqJ+14J0wmTjjt5Vx7EVoY2MuOZ7W+ahu4Q4c9XKrsz4M
yTq7YuZNprg1dNDsyIWj7ks11w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:52:47 2026 by rpki-client