
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
File: K6Guk7v1am9sllCE8EiBe7epjw8.mft (raw, json)
Hash identifier: 3eECRjm+abZaGFfkA10fASiN/YbJEh3HKwVAgrhw4vk=
Subject key identifier: E9:A9:E2:6C:B5:38:B3:D6:21:F3:F0:0B:67:7A:43:3C:33:5F:27:8C
Authority key identifier: 2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
Certificate issuer: /CN=A91F65C7/serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
Manifest number: 01F2
Signing time: Fri 25 Sep 2026 03:24:58 +0000
Manifest this update: Fri 25 Sep 2026 03:24:58 +0000
Manifest next update: Fri 02 Oct 2026 03:24:58 +0000
Files and hashes: 1: K6Guk7v1am9sllCE8EiBe7epjw8.crl (hash: hM64ieR++K5u2IiDDCVGyqQt3T1Mjgl8iRX8aZJu030=)
2: 44673792C3E511EEA9660E85C4F9AE02.roa (hash: EDr2C5zmUOcum1n6gE7rMsntZnWBPMLUPXoaimVppcs=)
3: E2744874415311F18FDF4C4ECA833773.roa (hash: PUZmZiXbjmMIFND5bLENedBo7DL7DmtBzQSSVuNs/c0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65C7, serialNumber=2BA1AE93BBF56A6F6C965084F048817BB7A98F0F
Validity
Not Before: Sep 25 03:24:58 2026 GMT
Not After : Oct 2 03:24:58 2026 GMT
Subject: CN=6ab5e98a-03fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:6f:10:8c:13:57:11:80:99:88:e4:81:8a:
c2:06:b5:c6:6c:de:e1:e0:4b:0b:11:94:cc:79:9c:
9d:33:90:e7:62:59:9c:53:ea:5a:cc:dd:5c:21:6c:
e3:db:21:51:ea:15:8e:bb:9f:da:0a:53:21:86:60:
51:5e:ab:fc:91:68:c8:75:e5:fe:99:19:f3:0f:e0:
b8:d1:9b:10:47:9c:60:0e:bf:0c:ff:71:6e:ce:9d:
a0:a6:60:4f:ac:51:e0:ee:ba:95:e4:04:e6:de:bf:
b0:63:a2:68:31:39:26:43:2f:71:21:66:dc:9b:4e:
20:7b:af:6b:f7:65:fd:09:87:88:9e:3f:e0:cb:12:
d3:2b:c3:9e:a0:0a:36:61:75:a7:28:b1:e3:d3:9f:
d0:d5:f7:bd:05:e5:77:bc:df:bd:bd:a8:c5:86:77:
1c:86:ae:89:1e:77:1e:2b:69:d2:52:05:55:43:dc:
c2:8e:14:ec:71:ea:a7:69:57:e5:d8:97:4f:9a:43:
16:f0:4d:98:a6:b8:b3:fc:e4:21:ee:14:61:e6:d2:
41:32:08:80:43:ce:c3:82:d2:a0:e5:42:43:a1:33:
e5:5c:67:b9:f2:fc:f0:81:ef:0a:40:0a:4e:b6:71:
fc:c6:97:d1:83:07:96:26:9c:d2:10:ca:0f:26:c8:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:E2:6C:B5:38:B3:D6:21:F3:F0:0B:67:7A:43:3C:33:5F:27:8C
X509v3 Authority Key Identifier:
keyid:2B:A1:AE:93:BB:F5:6A:6F:6C:96:50:84:F0:48:81:7B:B7:A9:8F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/K6Guk7v1am9sllCE8EiBe7epjw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/E3BEA47AC3E411EE9613F583C4F9AE02/K6Guk7v1am9sllCE8EiBe7epjw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:ca:37:f6:ca:0e:42:75:47:f2:6d:bc:50:95:b7:e9:75:
98:ca:92:c7:26:78:1d:23:8b:56:b7:17:ba:3d:0e:12:15:6f:
40:22:1d:8c:3e:84:01:cf:7c:97:32:32:85:37:fb:2b:87:03:
6a:04:76:ed:12:d2:fb:61:ca:10:bd:56:2f:fb:e7:4d:88:2e:
17:82:3d:52:00:77:3e:79:d0:e4:2b:25:eb:42:7d:67:4d:91:
49:6f:9d:8d:77:1b:01:91:04:bc:05:16:40:18:16:e8:25:8f:
93:e6:0c:fe:ed:35:83:7e:77:31:24:c2:3d:3c:ba:b3:75:91:
2b:63:26:89:ab:06:4c:43:55:c5:37:26:de:4a:db:e8:71:f4:
1c:20:09:5e:7b:21:35:1f:53:f2:9a:dc:c3:b6:e6:bf:20:f6:
70:55:37:46:4d:b8:d1:99:cd:ba:81:5e:a9:9b:50:0d:13:e7:
21:1c:c1:4a:0d:4d:a8:f0:69:55:ca:f1:73:67:35:cf:e0:ab:
c7:13:0d:97:af:dd:02:c7:a3:c9:9b:3c:ec:3c:a9:12:b3:4b:
1b:2e:87:a8:fe:df:59:d3:69:be:38:cc:f5:ed:74:e4:c1:54:
b4:5d:84:37:37:03:73:4a:a3:9a:5d:1c:f1:f4:43:01:18:13:
4e:d6:b6:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY1QzcxMTAvBgNVBAUTKDJCQTFBRTkzQkJGNTZBNkY2Qzk2NTA4NEYwNDg4MTdC
QjdBOThGMEYwHhcNMjYwOTI1MDMyNDU4WhcNMjYxMDAyMDMyNDU4WjAYMRYwFAYD
VQQDEw02YWI1ZTk4YS0wM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnR5vEIwTVxGAmYjkgYrCBrXGbN7h4EsLEZTMeZydM5DnYlmcU+pazN1cIWzj
2yFR6hWOu5/aClMhhmBRXqv8kWjIdeX+mRnzD+C40ZsQR5xgDr8M/3Fuzp2gpmBP
rFHg7rqV5ATm3r+wY6JoMTkmQy9xIWbcm04ge69r92X9CYeInj/gyxLTK8OeoAo2
YXWnKLHj05/Q1fe9BeV3vN+9vajFhncchq6JHnceK2nSUgVVQ9zCjhTsceqnaVfl
2JdPmkMW8E2Ypriz/OQh7hRh5tJBMgiAQ87DgtKg5UJDoTPlXGe58vzwge8KQApO
tnH8xpfRgweWJpzSEMoPJshhwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmp4my1
OLPWIfPwC2d6QzwzXyeMMB8GA1UdIwQYMBaAFCuhrpO79WpvbJZQhPBIgXu3qY8P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FM0JFQTQ3QUMz
RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFtOXNsbENFOEVpQmU3ZXBq
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0s2R3VrN3YxYW05c2xsQ0U4RWlCZTdlcGp3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjVDNy9FM0JFQTQ3QUMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9LNkd1azd2MWFt
OXNsbENFOEVpQmU3ZXBqdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPQjKN/bKDkJ1R/JtvFCVt+l1mMqSxyZ4HSOLVrcXuj0OEhVvQCIdjD6EAc98
lzIyhTf7K4cDagR27RLS+2HKEL1WL/vnTYguF4I9UgB3PnnQ5Csl60J9Z02RSW+d
jXcbAZEEvAUWQBgW6CWPk+YM/u01g353MSTCPTy6s3WRK2MmiasGTENVxTcm3krb
6HH0HCAJXnshNR9T8prcw7bmvyD2cFU3Rk240ZnNuoFeqZtQDRPnIRzBSg1NqPBp
Vcrxc2c1z+CrxxMNl6/dAsejyZs87DypErNLGy6HqP7fWdNpvjjM9e105MFUtF2E
NzcDc0qjml0c8fRDARgTTta23w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:36:51 2026 by rpki-client