
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json)
Hash identifier: Q6ARVOa6EGHnegqYtCvssc1RKgP513DrzMAWAhSZvgs=
Subject key identifier: 21:1E:C3:F5:FD:54:CB:85:F4:00:64:2A:7A:D8:07:A0:42:7B:F4:CA
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
Manifest number: EE
Signing time: Sat 13 Jun 2026 06:38:23 +0000
Manifest this update: Sat 13 Jun 2026 06:38:23 +0000
Manifest next update: Sat 20 Jun 2026 06:38:23 +0000
Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: s7LujYwHWDLOYeUcfTpLBjpSrXzIvjmjRE5FABWrcIA=)
2: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=)
3: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=)
4: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=)
5: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Jun 13 06:38:23 2026 GMT
Not After : Jun 20 06:38:23 2026 GMT
Subject: CN=6a2cfadf-6b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:4f:51:7d:e0:ad:43:bf:bf:27:9b:79:4c:
b6:19:9e:ec:5f:fe:d5:17:d6:2e:14:05:35:e5:f0:
ba:2b:8d:77:9f:c7:81:3b:9b:92:2f:47:15:13:1f:
4f:21:8e:fa:05:bc:fd:6d:8c:32:19:22:4c:02:71:
70:1e:42:9b:b2:57:fd:d0:b6:02:98:36:b8:1b:58:
3e:0d:fb:0c:fe:aa:d8:eb:e5:ec:88:9a:99:d9:75:
dc:28:2e:2c:6f:f5:71:18:83:ed:44:db:f9:6d:2a:
0f:13:e7:da:a4:81:8d:ec:12:4a:f3:74:41:24:f4:
23:25:2f:cd:94:6c:6a:03:c1:bd:e0:93:3f:75:9b:
c5:17:ed:d1:7c:b1:ce:d5:44:66:ca:f9:6a:31:e5:
80:1e:05:5a:a6:ae:e3:45:5a:cb:ac:34:0b:2f:3a:
3b:32:b8:c7:b4:84:75:e4:88:2b:94:bb:c0:7d:71:
82:86:de:2b:59:fa:2c:56:b5:79:e3:5b:e8:66:85:
a6:6a:f5:2a:f4:45:f9:32:6c:9f:41:59:33:aa:1b:
fc:c5:5e:a7:1f:6c:eb:e5:58:38:41:c3:00:a8:2f:
e3:e9:c0:03:6c:5f:0b:cc:6a:b8:97:7a:43:23:cf:
4f:09:7c:92:62:5e:be:f9:46:24:81:8d:38:44:03:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:C3:F5:FD:54:CB:85:F4:00:64:2A:7A:D8:07:A0:42:7B:F4:CA
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:be:79:fb:d0:5c:09:1f:6c:57:12:b8:1d:15:26:cf:89:be:
c9:e0:85:7c:f9:f0:4a:23:1e:b7:f6:1b:22:0c:c2:6b:91:18:
d6:8b:20:91:bc:36:a7:bd:4d:ed:6c:aa:79:4f:23:11:00:0a:
03:76:6b:7f:58:fd:2f:29:93:8d:56:46:49:e8:ef:bc:76:cb:
d3:38:f0:09:0d:15:60:52:95:ab:bc:56:39:25:d7:27:c6:69:
b6:8a:a1:42:35:53:f0:b1:a0:e3:52:9b:93:cf:e7:42:31:a2:
83:a6:84:46:4d:60:26:c7:41:85:48:ad:65:2a:39:a4:ee:76:
3f:08:e8:34:ae:e2:b0:e1:e6:9e:4d:01:06:99:3f:58:ec:31:
93:39:8d:eb:0c:df:59:66:b9:7d:d1:cc:20:ac:ea:77:ae:a8:
c6:a6:d4:59:e2:1c:b6:8d:f0:93:a7:7c:c4:3f:b4:3b:81:74:
7f:38:97:85:f1:06:86:a3:0f:62:9e:db:85:25:14:7d:fd:5a:
86:99:c1:89:33:94:c6:74:e9:85:79:df:3f:fe:f4:be:5c:c0:
97:d5:88:84:08:84:75:4d:06:68:68:a3:54:0b:ca:aa:66:96:
9e:5f:a5:12:31:8d:74:e4:cb:ba:a0:6f:b8:11:f2:33:0a:c6:
35:d9:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:36 2026 by rpki-client