
$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json)
Hash identifier: 6CnkQftUpmBY5D4evy2cC4q28i9hj7NopO///1Mi4tQ=
Subject key identifier: 6D:4D:08:EA:B3:1A:02:1E:DA:39:E8:45:48:2F:00:24:0C:84:0B:2A
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
Manifest number: 025C
Signing time: Mon 27 Jul 2026 03:53:40 +0000
Manifest this update: Mon 27 Jul 2026 03:53:39 +0000
Manifest next update: Mon 03 Aug 2026 03:53:39 +0000
Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: oRoT5rErhpbG5h3Q/x9UtcKpK6oBliOkXjkraaZbK1s=)
2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: vs2Gbdu50+XToE8E4WRhYDNiQq7PIlKd89VDKs3X2wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Validity
Not Before: Jul 27 03:53:39 2026 GMT
Not After : Aug 3 03:53:39 2026 GMT
Subject: CN=6a66d643-a0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:6b:60:ad:1f:d5:2f:85:b6:18:15:d1:66:
df:1d:10:91:9d:e3:24:f2:a1:d3:3e:e5:cf:fc:ae:
bd:eb:d3:ab:43:25:73:8b:63:3b:f2:49:55:9b:45:
e2:12:c0:dd:26:86:ab:93:68:bd:9a:26:3d:ac:fc:
c1:e5:33:6f:20:50:63:01:07:87:2a:94:66:39:72:
b3:52:e1:9e:51:7a:cd:b5:f5:19:21:be:90:82:54:
ab:3e:cc:37:f9:b6:ea:09:62:26:63:cb:8d:04:f8:
b4:1c:8b:79:55:f3:19:23:93:14:c8:a4:22:94:9d:
11:38:b9:6a:34:f9:d5:65:e2:49:0d:7f:45:50:c5:
8c:de:ec:00:d1:08:f0:cc:55:c4:77:f3:d9:d2:90:
05:dd:97:0e:12:07:51:e1:d8:8a:77:63:6c:5a:de:
b1:bf:02:d2:ff:29:8e:fc:30:5b:7d:e0:6c:4d:33:
09:2d:82:e5:68:1f:f6:53:8e:1e:56:8e:50:c3:1c:
03:4e:27:d2:76:69:fe:ef:b4:e8:b2:93:7c:7f:35:
80:a9:40:93:06:b0:00:db:e5:ba:d0:77:c9:80:d9:
c9:fe:8d:f8:26:8f:05:55:bb:a7:f7:d8:f5:10:1f:
6a:2c:b2:f3:75:6b:ce:89:b8:ef:38:7a:07:7e:51:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4D:08:EA:B3:1A:02:1E:DA:39:E8:45:48:2F:00:24:0C:84:0B:2A
X509v3 Authority Key Identifier:
keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f9:0c:96:40:56:f8:19:e5:ca:20:6a:85:53:4c:d7:ff:56:
0c:8e:2e:3b:11:d1:b3:99:67:7c:86:e3:39:14:ce:c7:93:6b:
95:6e:cb:e0:5f:ea:1f:82:5b:dc:c2:fc:13:eb:4c:1d:cf:eb:
f8:50:ec:70:f2:62:4f:ec:7f:21:e9:1f:45:13:ab:b4:95:2b:
5c:37:9e:9f:74:60:8a:ff:f0:32:1a:42:d9:1c:d5:87:b7:5e:
77:f2:92:d4:6d:e2:d0:b4:f9:97:27:96:2c:66:b2:00:cd:a8:
53:d6:c7:8a:46:5b:58:43:77:30:da:77:56:97:35:58:4b:49:
bd:9c:13:fa:7a:4f:b7:b3:af:e5:77:e9:5e:af:93:7d:23:09:
7e:06:97:8f:62:28:9f:eb:35:c5:fb:69:af:d0:63:80:b4:01:
73:aa:5c:b9:47:e1:0f:10:44:cc:e4:8c:da:50:41:0f:0b:14:
53:34:5f:48:75:7c:6b:f8:ed:c1:95:bc:5c:65:0b:1c:76:84:
6d:d6:97:9d:ac:11:d3:9a:c2:43:a9:a3:e7:a8:06:07:4d:66:
03:3d:4a:88:80:2c:18:c0:34:7a:52:b0:ae:00:50:8c:26:ec:
9d:cf:04:e8:86:9c:96:4c:d6:29:3b:c4:6a:92:13:3c:76:5b:
78:77:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:37 2026 by rpki-client