
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json)
Hash identifier: WF8xq9DqcbNjOIW9cho3m0Fk/iRE+b1Wubyojognd9I=
Subject key identifier: F1:BB:67:60:23:75:06:F0:3F:1F:6A:49:1B:2A:9F:32:DC:39:B9:A4
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
Manifest number: 60
Signing time: Thu 23 Jul 2026 10:18:44 +0000
Manifest this update: Thu 23 Jul 2026 10:18:43 +0000
Manifest next update: Thu 30 Jul 2026 10:18:43 +0000
Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: +4y6v+69ejp41qr2uzXnph5KMMFr7Uzh02jXX1cbcio=)
2: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Validity
Not Before: Jul 23 10:18:43 2026 GMT
Not After : Jul 30 10:18:43 2026 GMT
Subject: CN=6a61ea84-bfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:45:d4:49:11:bd:ec:4e:18:4f:a3:f0:cb:
c7:d6:96:53:78:49:52:d0:21:ae:a0:1d:b7:49:f6:
89:5f:df:46:e5:a8:0b:8f:78:29:80:d6:b2:7c:00:
26:2c:6f:fc:6e:d3:a9:5d:14:c5:94:f2:ab:53:0b:
a1:e6:8f:a1:d4:c7:86:1e:1c:1e:ee:a4:4e:d4:6a:
2a:10:fa:e5:e7:9f:6d:16:8f:63:b1:73:54:20:2b:
d2:65:0b:93:63:15:ad:ac:45:8d:c7:86:8a:d0:2d:
6e:e2:25:51:f5:67:f3:e8:d4:de:1f:39:d6:fa:79:
3b:83:6d:01:a6:d2:fb:28:92:51:02:ab:cc:33:99:
ee:e4:b3:43:60:77:5d:df:ef:af:4b:c9:b2:88:19:
c0:ba:93:36:f6:0b:ba:6d:ce:a8:02:25:4c:13:97:
18:94:ff:5a:60:e3:e0:9c:df:74:91:0a:9d:b0:3d:
f2:2c:bb:29:c6:23:77:09:4d:17:7e:11:32:b1:0f:
05:d1:c1:d2:80:cf:78:20:1d:b3:e8:e8:eb:90:67:
5f:f7:a5:1c:9b:ac:e0:99:13:37:9c:a8:b7:65:c6:
bd:05:d6:de:f0:dc:00:c9:0b:10:15:37:c9:46:1d:
82:60:d5:1d:f3:16:00:ea:2f:13:0b:99:7e:84:11:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:67:60:23:75:06:F0:3F:1F:6A:49:1B:2A:9F:32:DC:39:B9:A4
X509v3 Authority Key Identifier:
keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:f5:85:01:5d:b8:d7:39:8b:a6:4d:e6:19:7a:50:5f:7c:12:
7a:c9:27:f7:2b:f2:43:a3:a1:44:d3:61:fd:bd:a1:e5:0b:9c:
06:be:bd:52:00:62:eb:c7:ac:ab:25:6d:a4:00:b5:c4:80:30:
f1:d3:b3:0d:09:ef:56:4b:db:bd:3a:b4:e8:b4:9a:b0:87:36:
fa:f8:3c:b1:5b:6c:9a:78:a1:2f:eb:f9:35:ef:6a:fa:8f:3a:
6d:3c:4d:5a:6a:d7:b4:43:6a:c6:f2:09:9d:ff:ba:12:19:c1:
10:45:ed:01:73:ff:ea:c1:7a:7e:39:db:cb:88:57:c2:5b:e6:
bc:00:c4:d3:00:07:5c:b6:d8:c1:ef:c6:33:2a:86:a6:9b:9a:
ae:80:32:de:1e:67:a9:54:12:f7:81:8b:35:57:7a:de:6c:58:
e3:8f:71:8a:60:fe:22:dc:d3:f7:d2:93:4a:4e:0e:3a:fb:49:
3a:80:7f:a2:44:e5:84:c6:f8:79:c1:c6:a0:07:e8:ba:68:f5:
21:df:25:fe:b3:fb:6b:e2:60:44:4f:53:47:63:b6:bb:f2:33:
c0:c3:11:3b:75:74:37:80:3b:a0:32:f1:57:2c:35:39:23:08:
a4:48:51:e2:40:17:36:c6:33:08:bf:61:31:3c:77:23:58:fd:
2f:e9:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:47 2026 by rpki-client