
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json)
Hash identifier: N80Zk3aEiqul+q0UXiDPz6QMkkBTIQo1F2txNtvUAnA=
Subject key identifier: 69:20:57:BD:5E:23:26:64:AE:38:87:E5:29:18:E9:EA:71:41:A5:99
Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E
Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
Certificate serial: 07C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
Manifest number: 07B5
Signing time: Sun 20 Sep 2026 21:22:37 +0000
Manifest this update: Sun 20 Sep 2026 21:22:37 +0000
Manifest next update: Sun 27 Sep 2026 21:22:37 +0000
Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: i1i0XTBdqHSaUgsOSWPOovGrVtgIG6YK+sXVeO9gnIA=)
2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vHORlkoJ6Ru5YMWSWLfbW4NJ8zoTLLXavRd5Bn2PcOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl
rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1988 (0x7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
Validity
Not Before: Sep 20 21:22:37 2026 GMT
Not After : Sep 27 21:22:37 2026 GMT
Subject: CN=6ab04e9d-f69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:58:e9:6d:14:fb:cb:79:ec:35:3e:2e:ee:
6d:63:24:24:9e:9d:99:a9:a3:b9:e7:78:3e:77:f3:
ee:9b:b1:5b:8f:ed:31:67:73:91:9b:ef:1e:16:c7:
8c:3c:cc:3a:05:cc:77:e3:ef:03:52:90:b4:95:c1:
88:5f:b7:c2:7f:7b:72:ca:84:ee:f7:47:aa:b2:02:
26:3f:08:82:c5:a4:26:76:47:24:ab:11:36:be:56:
10:0d:47:c3:a1:6c:e4:98:dd:db:e3:bd:91:c0:ac:
77:4f:4b:5d:0d:ce:77:d4:37:4a:bf:cf:77:09:73:
8d:a7:7c:05:e1:76:95:88:80:5d:12:72:24:cc:64:
10:a4:38:bb:00:4c:c6:d8:d8:5f:6c:f0:73:fb:d9:
ce:f2:00:21:ba:d6:e8:d5:74:b5:0f:dd:31:1d:ca:
fe:d1:b4:13:fd:e9:8c:bd:12:fd:f0:33:6b:d1:91:
36:a9:9b:7f:ec:5d:8b:bc:a5:e3:f5:a9:c1:22:d1:
76:fe:9e:ba:b7:b0:3b:89:14:43:79:ab:4e:27:c0:
b3:b3:37:43:db:d3:e9:d1:b8:59:2c:5e:3d:ef:52:
32:6d:35:9f:88:cf:76:5e:f8:b3:d8:3a:8b:b2:25:
ff:62:fd:f2:d2:eb:7c:54:5d:4d:3e:1a:6c:ce:2e:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:57:BD:5E:23:26:64:AE:38:87:E5:29:18:E9:EA:71:41:A5:99
X509v3 Authority Key Identifier:
keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:89:f9:88:9d:65:ca:98:96:3e:f4:b0:df:e4:e2:2e:1b:
15:2a:1b:63:b0:18:fc:b9:47:63:d2:d8:33:54:12:52:29:3e:
98:9b:f5:b4:9b:6b:80:0a:9c:ae:70:63:47:36:71:88:61:01:
64:f8:22:59:a9:fa:a1:d7:aa:2e:8f:9e:f6:bb:c6:ec:47:33:
34:85:cb:e9:a4:2a:7a:53:73:2e:4e:7c:dd:dd:b2:45:ab:a0:
82:44:9e:83:44:c7:72:fe:00:14:43:65:c5:25:bf:fb:e0:5e:
bf:d7:ab:69:7f:7d:75:d7:f0:93:94:19:33:30:3e:92:36:36:
df:e1:63:7c:9a:42:ea:84:41:af:3f:ce:9e:97:15:04:4e:f9:
2c:1b:a7:22:9f:b0:16:ee:13:86:a7:3a:ed:bc:d7:34:16:c3:
e1:49:47:33:1d:54:08:bb:54:ea:cd:ec:73:be:ef:b4:40:c3:
91:60:7c:3a:89:e2:5d:e9:6d:7e:fe:9c:6a:a0:7e:2b:c7:07:
a8:d0:eb:98:17:41:a0:83:dd:6c:4f:8e:d6:d1:b6:08:28:ef:
72:d7:45:3f:af:d0:5b:9d:c9:8b:dd:7e:f4:5c:a9:21:be:0d:
33:1a:59:12:a8:73:58:93:6e:26:93:5b:36:89:be:90:5c:26:
c9:96:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:11:39 2026 by rpki-client