
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json)
Hash identifier: NL+C0Kt5ImmuNvu7oVOpD41b/t/lnhDkX13NeeBIbn0=
Subject key identifier: 62:D4:64:F3:43:5E:AD:ED:78:62:46:EE:BA:38:C7:CE:6C:6D:A5:15
Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
Manifest number: 06E0
Signing time: Tue 12 May 2026 22:02:19 +0000
Manifest this update: Tue 12 May 2026 22:02:19 +0000
Manifest next update: Tue 19 May 2026 22:02:19 +0000
Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: BBVH5hTyRj8ko18dWpP7ijYVoUEtp9vteDdiAbPyd9g=)
2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: l4uYU+uPf8JPateYFt5+JYWdyGHASfl72ELVvU8+Sso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Validity
Not Before: May 12 22:02:19 2026 GMT
Not After : May 19 22:02:19 2026 GMT
Subject: CN=6a03a36b-bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:ff:45:85:7f:2d:87:19:94:dc:12:0d:37:
aa:89:fd:fe:6f:8d:72:8d:e1:91:ec:9c:fd:78:47:
ed:19:77:13:e2:ae:6e:ab:cc:75:d3:ab:ee:40:fe:
83:bd:b1:30:4d:44:dc:f9:8e:62:f1:2b:1e:01:4c:
1c:1f:7a:9e:8e:50:6f:83:f2:9b:e3:a7:52:cc:f5:
b7:d9:e1:e3:ca:57:e7:1c:0e:c3:dd:b4:f9:30:5a:
49:d8:af:a9:d9:2d:f0:6d:f2:6b:1e:87:13:da:d9:
16:b6:c6:f0:20:35:80:9c:d4:04:82:28:3f:1d:e8:
8d:b3:64:80:88:14:c4:c8:09:7c:1e:20:a7:c3:48:
89:eb:3e:68:b2:72:37:10:23:22:11:27:d8:15:b1:
97:34:d8:b9:50:79:85:6d:67:f6:c5:58:52:0a:db:
69:3f:6a:a7:70:8e:51:53:81:a7:d5:b7:b1:63:ca:
a6:dd:76:b2:9f:61:5e:50:a5:d1:61:44:19:f4:fb:
11:26:c8:a9:89:56:ed:f4:8f:6c:d0:df:98:43:1e:
97:cd:5e:24:3e:b7:4d:65:f6:c1:c5:0c:9f:98:ff:
15:0e:6f:2a:52:ed:38:35:75:e3:01:b9:47:f4:39:
2f:87:ca:aa:4e:4f:8c:7d:61:8e:2e:0e:a8:b6:35:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:64:F3:43:5E:AD:ED:78:62:46:EE:BA:38:C7:CE:6C:6D:A5:15
X509v3 Authority Key Identifier:
keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:21:17:b9:3d:8c:5a:4c:7a:a3:5b:07:ca:02:2e:da:7a:
7d:e6:2c:4c:93:03:aa:26:ab:85:eb:53:9b:75:54:7d:68:db:
3d:d7:13:5d:ac:a3:3e:9d:63:42:03:c0:b8:4f:8d:3f:42:c1:
17:71:cd:e4:69:4c:ba:08:4b:e9:67:a8:02:97:a0:e9:1e:18:
88:02:b7:20:43:a3:f9:ea:4f:0c:0c:2b:37:cb:29:28:5e:d6:
4d:b3:68:e2:b1:d8:5e:75:d8:96:14:3b:d0:82:19:d5:1f:6d:
4e:62:b7:b7:97:88:cf:0e:39:8d:aa:af:53:80:c8:ed:d5:ba:
88:12:9f:80:71:ff:18:7d:e6:34:47:94:13:c5:df:c0:55:e7:
22:3d:70:f9:5e:a7:5a:02:d9:c5:7e:e7:b0:4c:1e:1f:f6:f1:
f2:a4:a3:ae:e9:30:ad:d6:f1:bb:72:55:60:27:0d:bd:34:b1:
e0:33:2a:b8:95:b0:f6:b7:2c:b3:2e:d3:8d:cb:d5:ca:fe:98:
cb:08:e5:d4:c2:da:2f:d3:8f:0d:49:50:37:ec:e1:eb:59:49:
e1:5c:e5:a9:4e:f0:e0:4c:86:1e:6b:5e:6a:53:d1:8b:71:6c:
f6:e7:c9:76:f6:cd:2f:96:74:e3:01:fe:bf:69:d9:b2:38:3e:
9d:85:c2:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk1Q0ExMTAvBgNVBAUTKDkxNzkxNTE5NUM5NzFBQjQ0MUZEREVERTZGRjNDRDM3
MkU3NTRDQjUwHhcNMjYwNTEyMjIwMjE5WhcNMjYwNTE5MjIwMjE5WjAYMRYwFAYD
VQQDEw02YTAzYTM2Yi1iYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hb/RYV/LYcZlNwSDTeqif3+b41yjeGR7Jz9eEftGXcT4q5uq8x106vuQP6D
vbEwTUTc+Y5i8SseAUwcH3qejlBvg/Kb46dSzPW32eHjylfnHA7D3bT5MFpJ2K+p
2S3wbfJrHocT2tkWtsbwIDWAnNQEgig/HeiNs2SAiBTEyAl8HiCnw0iJ6z5osnI3
ECMiESfYFbGXNNi5UHmFbWf2xVhSCttpP2qncI5RU4Gn1bexY8qm3Xayn2FeUKXR
YUQZ9PsRJsipiVbt9I9s0N+YQx6XzV4kPrdNZfbBxQyfmP8VDm8qUu04NXXjAblH
9Dkvh8qqTk+MfWGOLg6otjVhiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLUZPND
Xq3teGJG7ro4x85sbaUVMB8GA1UdIwQYMBaAFJF5FRlclxq0Qf3e3m/zzTcudUy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS82MzQ3Mzc1Njk4
MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdyUkJfZDdlYl9QTk55NTFU
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2tYa1ZHVnlYR3JSQl9kN2ViX1BOTnk1MVRMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTVDQS82MzQ3Mzc1Njk4MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdy
UkJfZDdlYl9QTk55NTFUTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjVghF7k9jFpMeqNbB8oCLtp6feYsTJMDqiarhetTm3VUfWjbPdcTXayjPp1j
QgPAuE+NP0LBF3HN5GlMughL6WeoApeg6R4YiAK3IEOj+epPDAwrN8spKF7WTbNo
4rHYXnXYlhQ70IIZ1R9tTmK3t5eIzw45jaqvU4DI7dW6iBKfgHH/GH3mNEeUE8Xf
wFXnIj1w+V6nWgLZxX7nsEweH/bx8qSjrukwrdbxu3JVYCcNvTSx4DMquJWw9rcs
sy7TjcvVyv6Yywjl1MLaL9OPDUlQN+zh61lJ4VzlqU7w4EyGHmtealPRi3Fs9ufJ
dvbNL5Z04wH+v2nZsjg+nYXCoQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:39:10 2026 by rpki-client