
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json)
Hash identifier: scjLYbD8wkOZGg01QmdTzlzh+DMK458/GH6kTyH83So=
Subject key identifier: 7B:12:3B:A0:32:BE:CA:DC:C6:E5:E1:FE:AC:45:F7:55:DC:82:13:22
Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
Manifest number: F4
Signing time: Sat 13 Jun 2026 06:26:06 +0000
Manifest this update: Sat 13 Jun 2026 06:26:05 +0000
Manifest next update: Sat 20 Jun 2026 06:26:05 +0000
Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: vTFxq0z+yPbO+ALC1TMBHNIELb59adnQTMcDVmnG8mk=)
2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Validity
Not Before: Jun 13 06:26:05 2026 GMT
Not After : Jun 20 06:26:05 2026 GMT
Subject: CN=6a2cf7fe-0f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:40:78:21:aa:23:b1:e1:fb:c1:d7:96:37:
c7:8e:a1:8b:9f:e2:c5:b5:97:ac:09:d4:53:12:f4:
64:77:03:62:75:ae:60:a0:db:9d:97:d8:c1:c5:1a:
3e:12:2a:af:fb:f7:9e:e0:bb:3c:fe:38:a1:44:f7:
6e:f1:d8:7f:19:63:66:3b:82:99:cd:d1:2d:39:f3:
00:3d:1c:fd:1b:d5:d9:4b:5b:e7:bd:a7:f1:11:c4:
2c:c0:1e:a1:d4:20:48:96:bc:f5:fc:de:8a:e6:ee:
ce:bf:1d:d1:2a:e1:b2:ed:db:f0:92:aa:c5:26:9a:
01:af:08:49:46:83:d1:98:7f:75:59:56:e1:06:4c:
14:f5:ab:66:3a:b8:e3:9d:a0:15:cb:33:26:4b:21:
52:f8:f1:7d:92:fc:1e:8b:7d:e3:6c:ab:fb:8b:43:
f0:36:41:a2:70:12:51:bb:41:5e:64:ef:1b:a1:f0:
48:92:de:10:26:96:32:75:a2:e5:08:c2:ac:f4:d1:
d5:28:53:fe:08:b5:c9:70:53:45:fe:db:71:67:fa:
c5:e9:1a:b5:b9:d5:1d:8a:de:78:f1:11:2a:56:09:
4d:eb:27:bf:55:79:a7:66:8b:36:fa:40:ad:ec:89:
8a:9b:e7:5f:76:70:b0:5f:a2:62:42:05:0c:e4:34:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:12:3B:A0:32:BE:CA:DC:C6:E5:E1:FE:AC:45:F7:55:DC:82:13:22
X509v3 Authority Key Identifier:
keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:24:52:72:e1:57:e8:b9:45:91:50:34:f8:19:60:ed:08:61:
f3:e3:ea:82:f3:b1:f3:bc:f1:f7:e0:27:6a:63:25:12:1c:92:
a3:3f:9b:2d:50:43:4c:d2:dc:86:d0:74:f1:91:99:a5:5b:1c:
a0:58:44:d8:f5:66:59:76:6f:e7:29:57:e1:64:71:fb:1e:d4:
ca:4a:94:09:c8:77:0b:10:13:ae:08:37:97:53:68:c2:c8:b3:
c7:d6:65:3d:be:be:8f:eb:a0:91:92:b0:e9:6e:6b:de:47:03:
19:2f:e0:20:61:76:5c:02:d7:2d:d4:4f:d3:4c:6f:8d:bf:66:
c1:b9:2c:28:6c:08:32:e8:5f:be:ea:42:ce:d7:d5:db:7b:83:
0a:cd:9c:65:d6:5b:d7:99:4a:fc:3c:78:6e:22:97:be:18:4a:
94:f1:46:cb:d5:98:e3:4b:e4:76:1b:a2:8b:01:53:ac:7d:01:
34:9f:99:15:a8:e7:ee:00:e1:31:00:24:de:42:64:08:e6:fa:
46:35:be:4f:55:92:50:77:36:5e:07:a0:f6:f7:fc:5b:7f:dc:
fd:1b:ae:df:df:be:78:b4:ca:d2:14:e4:cc:61:89:37:6b:78:
ee:ce:bc:a9:12:8d:e9:e9:03:94:24:dc:82:cc:a8:b4:ed:3d:
69:2a:da:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:45 2026 by rpki-client