
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json)
Hash identifier: 6yXxuK9UApjwr9WSetHRJC42jRgEPnakSAUCe98a+Do=
Subject key identifier: 25:A0:EA:C8:1E:9D:AF:CA:84:23:0F:93:E5:F5:9C:3B:5C:1A:B1:69
Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
Manifest number: 01D3
Signing time: Mon 27 Jul 2026 05:21:24 +0000
Manifest this update: Mon 27 Jul 2026 05:21:24 +0000
Manifest next update: Mon 03 Aug 2026 05:21:24 +0000
Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: /Jf5sVOGFdf62kMdqoK9pQKMI7+AfyA7ARW2nS4nBMg=)
2: E2744874415311F18FDF4C4ECA833773.roa (hash: PUZmZiXbjmMIFND5bLENedBo7DL7DmtBzQSSVuNs/c0=)
3: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: EDr2C5zmUOcum1n6gE7rMsntZnWBPMLUPXoaimVppcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Validity
Not Before: Jul 27 05:21:24 2026 GMT
Not After : Aug 3 05:21:24 2026 GMT
Subject: CN=6a66ead4-f04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:68:12:dc:8f:0f:a0:b6:e2:15:b0:8e:95:
72:e1:a1:f2:79:35:a1:78:f6:93:98:23:e4:00:aa:
dd:25:36:e7:82:44:7e:df:24:aa:e8:fe:57:f9:93:
c7:1f:19:6c:fb:22:2f:0b:48:b8:15:3b:98:ae:68:
0f:b1:ef:cc:28:e5:9e:e4:b1:83:00:18:a2:23:38:
bf:67:83:4b:d0:0a:ba:df:bb:62:19:31:b1:91:15:
ed:e4:97:48:bd:4e:a5:15:ec:5c:e6:f8:d2:7a:f6:
bd:4a:05:b5:b7:54:69:44:2d:0f:1e:a9:a6:5a:8f:
a1:8d:83:08:c5:38:fa:8e:f9:05:3b:3a:25:4f:57:
fd:e0:b9:cb:a0:1b:b1:38:77:b9:ab:ae:e7:9d:4d:
5d:bb:3e:1a:05:e7:4c:3d:ec:7a:bc:6c:99:b9:a8:
42:7c:29:9e:5d:65:d7:94:f3:6e:35:15:f2:94:5a:
a3:cd:e6:01:c1:6a:42:de:32:50:00:1e:3d:cd:ce:
86:c7:b8:ff:5c:b4:05:77:95:15:a6:ad:c8:44:84:
72:a8:53:71:5a:d8:6e:40:ee:08:6c:5d:94:ce:d4:
31:40:65:62:79:df:0d:3d:34:96:ea:43:a6:43:0f:
ab:54:8a:15:1a:b0:e4:25:c1:c1:88:db:44:d2:3e:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:EA:C8:1E:9D:AF:CA:84:23:0F:93:E5:F5:9C:3B:5C:1A:B1:69
X509v3 Authority Key Identifier:
keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:d3:bc:b0:98:6e:14:1c:2b:b3:dd:b5:af:a3:9f:46:79:75:
83:a6:f7:da:78:3f:b9:db:50:9f:0e:0c:5e:02:23:77:2f:d3:
50:f4:95:18:95:5d:bb:0c:bb:91:58:19:85:2c:19:9b:17:66:
d3:bf:43:e9:42:35:c7:36:c3:dd:1b:6f:62:9a:5b:b7:72:86:
d8:7e:b0:40:8b:fe:62:e7:4c:6b:a5:07:b9:c7:29:3d:df:6c:
84:6f:64:80:7d:c2:1e:38:8c:0f:33:9b:77:c4:53:8d:7c:a3:
98:8e:74:ab:48:80:0e:f0:5c:84:8b:86:5e:e4:fc:01:5d:c8:
50:e5:cd:ac:31:24:43:6f:df:76:14:de:42:f2:e1:39:be:b3:
c4:f7:1d:1a:69:79:54:23:15:c2:c6:eb:c9:c2:00:1d:eb:ca:
02:11:d1:df:5f:c3:a1:e8:8e:6a:84:1f:68:8a:c1:c1:d6:4b:
a5:f7:6b:b3:87:a3:d1:1e:40:44:65:49:14:5f:ec:61:96:76:
81:c1:25:33:2d:ad:91:07:83:c5:70:bd:a5:21:1a:e4:73:0f:
a6:70:12:c6:93:86:e2:5d:2f:ee:7b:df:f4:fd:f7:69:db:1b:
a7:22:71:38:6c:8d:b2:ed:2b:f1:d9:6e:da:45:20:d7:79:e6:
36:21:ed:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC
QjdBOThGMEYwHhcNMjYwNzI3MDUyMTI0WhcNMjYwODAzMDUyMTI0WjAYMRYwFAYD
VQQDEw02YTY2ZWFkNC1mMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiHxoEtyPD6C24hWwjpVy4aHyeTWhePaTmCPkAKrdJTbngkR+3ySq6P5X+ZPH
Hxls+yIvC0i4FTuYrmgPse/MKOWe5LGDABiiIzi/Z4NL0Aq637tiGTGxkRXt5JdI
vU6lFexc5vjSeva9SgW1t1RpRC0PHqmmWo+hjYMIxTj6jvkFOzolT1f94LnLoBux
OHe5q67nnU1duz4aBedMPex6vGyZuahCfCmeXWXXlPNuNRXylFqjzeYBwWpC3jJQ
AB49zc6Gx7j/XLQFd5UVpq3IRIRyqFNxWthuQO4IbF2UztQxQGVied8NPTSW6kOm
Qw+rVIoVGrDkJcHBiNtE0j7idQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWg6sge
na/KhCMPk+X1nDtcGrFpMB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz
RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt
OXNsbENFOEVpQmU3ZXBqdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV9O8sJhuFBwrs921r6OfRnl1g6b32ng/udtQnw4MXgIjdy/TUPSVGJVduwy7
kVgZhSwZmxdm079D6UI1xzbD3RtvYppbt3KG2H6wQIv+YudMa6UHuccpPd9shG9k
gH3CHjiMDzObd8RTjXyjmI50q0iADvBchIuGXuT8AV3IUOXNrDEkQ2/fdhTeQvLh
Ob6zxPcdGml5VCMVwsbrycIAHevKAhHR31/DoeiOaoQfaIrBwdZLpfdrs4ej0R5A
RGVJFF/sYZZ2gcElMy2tkQeDxXC9pSEa5HMPpnASxpOG4l0v7nvf9P33adsbpyJx
OGyNsu0r8dlu2kUg13nmNiHteQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:40 2026 by rpki-client