
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: CECmC6WuotL9xljeJfDrps4+OPXbbC4nam/Rxy8GaLA=
Subject key identifier: 5B:3A:4E:34:6B:AB:B7:9A:B1:6B:38:B2:BE:EA:30:54:7B:0E:01:91
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 069C
Signing time: Tue 22 Sep 2026 22:10:00 +0000
Manifest this update: Tue 22 Sep 2026 22:09:59 +0000
Manifest next update: Tue 29 Sep 2026 22:09:59 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: bMSuTIbgulyVPXj8lNZ1NnzK8pyB8l+0fdj0G0NFK14=)
2: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
3: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
4: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
5: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Sep 22 22:09:59 2026 GMT
Not After : Sep 29 22:09:59 2026 GMT
Subject: CN=6ab2fcb8-53d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:10:c2:6a:a9:df:bb:01:c4:5d:c7:ab:81:
f8:52:3e:f7:bc:f9:c1:cf:24:4b:c8:ce:b2:0e:58:
bf:8e:59:ee:45:5f:fe:fc:d2:5b:b7:61:1c:01:53:
01:43:c5:06:43:34:bb:2b:c9:4a:be:ad:b3:9f:f0:
40:75:47:8d:4b:e5:a8:54:4c:6a:d5:90:b0:b3:76:
1f:0a:e0:24:77:ba:f0:88:f6:d2:40:06:4b:8a:1c:
91:f0:5c:b0:b5:b5:f3:aa:4a:57:68:fe:56:fd:ac:
26:3b:78:bc:68:36:87:16:d2:93:56:6a:32:dd:7e:
0f:90:4d:67:1c:c6:6a:8f:e1:bc:17:c2:ab:06:04:
84:6c:c6:11:86:c3:76:f1:36:91:25:3e:8d:89:58:
5b:ed:1a:b7:5e:4c:1c:78:0b:02:f5:11:45:ee:de:
64:45:4f:38:ca:c0:78:58:fe:25:4e:9d:b5:b3:13:
2a:be:85:f9:ea:09:7f:94:c4:f5:c5:0f:f3:d2:41:
9e:1a:b2:f7:0a:2e:54:ae:22:40:78:2b:be:1a:92:
56:34:4f:9c:a3:62:dd:25:71:f7:a4:93:f2:3e:e6:
01:23:df:76:9f:6c:c9:60:33:1f:5d:08:bf:b3:69:
de:9f:e2:03:bb:c6:3d:88:de:d4:9b:03:81:4a:cb:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:4E:34:6B:AB:B7:9A:B1:6B:38:B2:BE:EA:30:54:7B:0E:01:91
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:e1:2d:15:3d:69:8e:18:3c:af:c6:88:23:2a:f2:24:de:4c:
b6:0e:27:5d:f0:31:62:42:fb:ab:b8:bb:78:f3:09:95:fb:19:
d9:d3:f5:7b:39:fa:59:87:06:44:df:ad:6a:c3:ae:d5:c1:08:
3c:9e:a7:28:de:9e:5b:fe:67:81:d0:44:ad:af:ba:c0:62:cc:
ae:43:59:00:20:d3:b9:e3:87:8a:85:f0:af:18:09:fa:86:10:
5a:01:69:4a:41:c4:0c:b1:57:21:0c:61:23:bc:5b:51:da:3d:
75:9e:42:cf:2c:35:df:05:da:04:48:c4:7e:7f:39:b6:42:43:
3a:b0:c1:13:88:88:da:01:03:b4:3d:de:ea:70:a6:5e:88:a6:
67:38:57:ac:6d:85:7f:13:b7:1c:16:c1:88:9d:23:7f:68:9b:
08:e7:3b:66:87:d3:eb:19:95:1b:cf:da:3b:2e:ea:b1:27:d9:
29:6a:2b:b7:9c:38:d0:b1:86:a6:e3:71:70:10:dd:fd:ee:19:
48:d2:31:c4:74:97:ef:ad:62:32:b4:e0:ba:53:95:21:b5:b8:
b7:27:74:6e:ca:62:5f:12:a8:57:be:ca:09:28:c6:56:26:e4:
d3:77:0f:c0:8f:e5:d3:3f:30:f2:8e:c3:e9:2e:2e:51:54:a4:
da:06:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:40:36 2026 by rpki-client