
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json)
Hash identifier: 7qFx2JOp71VD9zjKYiaa47882YB0ttEJYJRWWJhmrKM=
Subject key identifier: 07:A6:7E:4F:F9:CD:BB:4B:D3:07:75:9D:55:BC:A2:59:D2:FA:AA:E5
Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91
Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
Certificate serial: 0B11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
Manifest number: 0B08
Signing time: Mon 12 Oct 2026 19:27:58 +0000
Manifest this update: Mon 12 Oct 2026 19:27:57 +0000
Manifest next update: Mon 19 Oct 2026 19:27:57 +0000
Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: firytsFVRniLcXRS9imGmwzQu0VASAQZByvZDzpqVgA=)
2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: 5a8TVVdrw/+4vsHJHHXRP7IOyl2GuV2EDLHdFdT51BE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl
rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 19:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2833 (0xb11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
Validity
Not Before: Oct 12 19:27:57 2026 GMT
Not After : Oct 19 19:27:57 2026 GMT
Subject: CN=6acd34be-ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:11:09:3b:b6:3c:62:e2:66:dd:b7:bf:13:
18:a4:66:30:71:05:ba:5f:dd:46:db:f2:f1:42:8e:
34:96:ab:63:86:fc:60:fc:40:49:87:16:37:6b:4e:
90:0a:a7:12:b6:6d:4c:50:59:6c:cd:8c:e5:85:4d:
1b:d5:2b:8f:ec:2f:d0:91:c6:15:d0:cb:c3:e6:28:
51:6e:78:78:f6:f9:5d:c5:87:67:73:7f:d5:fe:7c:
aa:5d:ef:6a:96:7d:5e:be:1f:f0:5f:3b:ca:30:18:
eb:18:7f:ee:f0:f8:e4:1b:c1:70:82:ce:91:d3:75:
a9:a0:3e:c1:bc:4f:05:51:cc:58:fa:f8:84:05:dc:
ac:49:56:e5:0a:2e:32:7a:ee:81:54:d0:59:51:7a:
f0:c2:c3:ff:2e:b3:b7:07:31:46:17:6f:d5:0d:16:
c5:e0:9c:4f:c0:93:8c:d7:77:f5:48:a4:6d:1b:ae:
d1:5e:99:60:8e:d4:c8:ab:dc:80:5b:ad:ab:40:7b:
4f:19:10:c4:bc:9a:f4:90:51:08:59:dc:ca:8d:de:
86:47:a7:71:2c:57:24:70:f3:08:9a:e0:ed:10:1e:
20:fc:85:23:4b:42:21:f1:d8:b4:02:cb:5c:e0:8c:
46:b0:88:bf:4b:af:8a:dd:ba:45:1a:0d:f0:07:93:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:7E:4F:F9:CD:BB:4B:D3:07:75:9D:55:BC:A2:59:D2:FA:AA:E5
X509v3 Authority Key Identifier:
keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:ad:a2:1e:52:f8:2a:06:52:db:02:4f:21:c1:d9:d3:57:
30:7b:87:93:f7:21:90:d7:66:be:70:98:88:6d:da:5e:48:a4:
b4:89:48:6c:28:f6:d4:3e:0a:b1:67:67:4d:30:86:8a:3b:42:
3a:13:a8:b1:89:18:9d:7c:3f:cd:7a:77:27:7b:7b:50:f2:8b:
07:9c:db:12:c0:db:5b:08:ee:4a:65:62:e9:10:54:9e:0a:83:
89:1f:3f:03:52:38:35:f2:ad:61:dc:7a:4c:47:be:f6:05:6c:
95:99:f2:bd:68:4b:f6:2f:36:70:34:48:0c:aa:4d:88:3c:8c:
89:5d:eb:1e:24:ea:94:be:bb:b0:4c:a6:1d:67:c0:4d:22:e9:
bb:51:ea:20:22:2b:eb:e9:de:f0:d3:d9:a7:1a:af:a8:19:92:
b4:a7:0a:92:0f:c5:a5:51:84:0f:1b:94:3f:c4:38:95:06:89:
3a:c7:46:63:bd:b0:c4:8c:0e:da:96:63:d1:10:5f:b6:86:93:
bf:03:89:3f:e8:d4:5a:40:7a:f4:ea:61:73:8b:6b:0a:8a:e5:
34:6d:93:3c:70:98:30:75:1d:f4:7c:a6:83:a3:e6:dd:0e:52:
3e:dd:6e:16:13:7c:0f:be:db:64:8f:37:11:9d:74:4d:e0:1a:
d5:a7:0e:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB
Qzk2Q0E0OTEwHhcNMjYxMDEyMTkyNzU3WhcNMjYxMDE5MTkyNzU3WjAYMRYwFAYD
VQQDEw02YWNkMzRiZS1mZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBcRCTu2PGLiZt23vxMYpGYwcQW6X91G2/LxQo40lqtjhvxg/EBJhxY3a06Q
CqcStm1MUFlszYzlhU0b1SuP7C/QkcYV0MvD5ihRbnh49vldxYdnc3/V/nyqXe9q
ln1evh/wXzvKMBjrGH/u8PjkG8Fwgs6R03WpoD7BvE8FUcxY+viEBdysSVblCi4y
eu6BVNBZUXrwwsP/LrO3BzFGF2/VDRbF4JxPwJOM13f1SKRtG67RXplgjtTIq9yA
W62rQHtPGRDEvJr0kFEIWdzKjd6GR6dxLFckcPMImuDtEB4g/IUjS0Ih8di0Astc
4IxGsIi/S6+K3bpFGg3wB5O5WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAemfk/5
zbtL0wd1nVW8olnS+qrlMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1
NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4
eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP+mtoh5S+CoGUtsCTyHB2dNXMHuHk/chkNdmvnCYiG3aXkiktIlIbCj21D4K
sWdnTTCGijtCOhOosYkYnXw/zXp3J3t7UPKLB5zbEsDbWwjuSmVi6RBUngqDiR8/
A1I4NfKtYdx6TEe+9gVslZnyvWhL9i82cDRIDKpNiDyMiV3rHiTqlL67sEymHWfA
TSLpu1HqICIr6+ne8NPZpxqvqBmStKcKkg/FpVGEDxuUP8Q4lQaJOsdGY72wxIwO
2pZj0RBftoaTvwOJP+jUWkB69Ophc4trCorlNG2TPHCYMHUd9Hymg6Pm3Q5SPt1u
FhN8D77bZI83EZ10TeAa1acO/w==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:50:37 2026 by rpki-client