
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json)
Hash identifier: lgVnlmfG48E+H5NZ6Dh5e/0WwqzaDenCfNpdyHH0NGw=
Subject key identifier: B6:AE:72:E8:2D:C6:86:A5:22:11:C4:2D:08:27:63:FD:DB:A3:38:1E
Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Certificate serial: 09BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
Manifest number: 09B5
Signing time: Thu 26 Mar 2026 19:49:29 +0000
Manifest this update: Thu 26 Mar 2026 19:49:28 +0000
Manifest next update: Thu 02 Apr 2026 19:49:28 +0000
Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: VPnmvJ8ZIyFVu5GXRw6WXrvbYDaL73DqLBocRZo5vFM=)
2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: drREk/OAiw4nw+aB1RVjD5zbqv5hAnk1VMgyPcenfqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2494 (0x9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Validity
Not Before: Mar 26 19:49:28 2026 GMT
Not After : Apr 2 19:49:28 2026 GMT
Subject: CN=69c58dc9-6875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:53:19:b8:2e:7d:61:7e:8d:58:f4:ab:9c:
bc:7b:33:44:26:36:06:d8:b7:09:ce:72:0d:fe:3a:
0e:97:f4:f0:51:9d:99:36:de:53:14:74:8c:87:42:
c5:f2:a1:77:1c:82:a1:07:58:c0:63:7d:95:a0:e1:
d1:ed:c7:d7:61:66:ca:52:b5:2d:26:80:c0:f8:15:
71:44:0d:ae:0d:c1:e9:2d:eb:be:c7:ec:15:c6:2f:
be:78:1b:d1:2c:b7:43:3b:e2:55:5a:80:1f:aa:bc:
1f:f7:2a:55:d6:d9:c6:b9:bd:c0:23:51:fe:31:37:
16:c3:4d:27:d9:12:d6:b2:66:b7:b2:f9:3a:07:b1:
e8:5f:76:8e:b7:94:c1:f3:8c:1c:dd:f3:f6:54:d4:
3e:03:e0:0f:fe:d9:a6:30:3f:d3:19:2e:12:43:78:
d7:c0:7f:70:fc:6e:31:60:6f:0d:17:1c:de:ed:12:
97:6c:fe:96:75:85:d5:d5:8a:98:10:cd:12:df:5a:
b2:19:52:28:a8:cc:e3:c9:d1:1f:06:88:13:26:48:
d0:f8:af:d3:18:62:36:41:72:43:a3:28:d2:26:2f:
2b:d7:84:ca:aa:ce:97:a7:78:58:85:cb:41:f5:6f:
eb:bc:0e:69:8f:7c:59:51:44:d7:a4:55:a8:9d:36:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:72:E8:2D:C6:86:A5:22:11:C4:2D:08:27:63:FD:DB:A3:38:1E
X509v3 Authority Key Identifier:
keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:c1:d1:ff:58:3f:0e:bc:b3:c0:3c:f1:f3:e7:e4:7e:1a:
b7:7d:75:ba:7c:e4:e6:f4:64:97:52:c9:7a:27:05:e2:70:95:
cc:51:d0:fd:a8:c1:81:88:39:a8:7f:68:22:bc:78:ae:f9:88:
5a:6c:0c:c5:0b:9d:89:1f:b8:3c:45:4c:62:94:71:51:20:10:
85:3e:17:a5:6e:b1:ae:b7:a2:8f:bf:4e:b3:31:d0:fc:99:ef:
0d:40:80:5e:53:94:0d:e9:27:95:be:05:09:03:71:1a:86:89:
a9:d9:33:22:bb:08:e6:c0:45:51:8e:96:a3:88:ca:3d:53:44:
36:66:e9:14:ba:e0:21:8b:8c:89:73:ad:be:65:9d:ee:3d:0b:
b3:f2:b9:39:e3:d4:33:b4:2e:89:2d:5d:bb:77:e1:33:41:e3:
67:ca:ab:37:90:58:0c:43:be:eb:db:e5:79:3d:a4:62:16:52:
5c:1c:0e:6e:d1:fb:61:47:e0:7a:aa:9a:fb:96:32:37:f6:00:
ab:7d:36:cc:e1:d7:7d:87:8a:1e:13:a0:73:d3:8d:0b:84:61:
04:de:17:10:a8:cb:a2:da:73:a9:9c:6f:58:50:be:0a:84:58:
3c:fe:0a:61:4d:f0:1c:77:a5:00:26:35:a9:9c:71:06:6d:23:
7e:88:65:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx
ODY1QTAwREQwHhcNMjYwMzI2MTk0OTI4WhcNMjYwNDAyMTk0OTI4WjAYMRYwFAYD
VQQDEw02OWM1OGRjOS02ODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQtTGbgufWF+jVj0q5y8ezNEJjYG2LcJznIN/joOl/TwUZ2ZNt5TFHSMh0LF
8qF3HIKhB1jAY32VoOHR7cfXYWbKUrUtJoDA+BVxRA2uDcHpLeu+x+wVxi++eBvR
LLdDO+JVWoAfqrwf9ypV1tnGub3AI1H+MTcWw00n2RLWsma3svk6B7HoX3aOt5TB
84wc3fP2VNQ+A+AP/tmmMD/TGS4SQ3jXwH9w/G4xYG8NFxze7RKXbP6WdYXV1YqY
EM0S31qyGVIoqMzjydEfBogTJkjQ+K/TGGI2QXJDoyjSJi8r14TKqs6Xp3hYhctB
9W/rvA5pj3xZUUTXpFWonTakBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaucugt
xoalIhHELQgnY/3bozgeMB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz
Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ
UmdobUQ1b2dUbEVZWmFBTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALvDB0f9YPw68s8A88fPn5H4at311unzk5vRkl1LJeicF4nCVzFHQ/ajBgYg5
qH9oIrx4rvmIWmwMxQudiR+4PEVMYpRxUSAQhT4XpW6xrreij79OszHQ/JnvDUCA
XlOUDeknlb4FCQNxGoaJqdkzIrsI5sBFUY6Wo4jKPVNENmbpFLrgIYuMiXOtvmWd
7j0Ls/K5OePUM7QuiS1du3fhM0HjZ8qrN5BYDEO+69vleT2kYhZSXBwObtH7YUfg
eqqa+5YyN/YAq302zOHXfYeKHhOgc9ONC4RhBN4XEKjLotpzqZxvWFC+CoRYPP4K
YU3wHHelACY1qZxxBm0jfohlJA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:24 2026 by rpki-client