
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier: /cc8oqYKPAZUrQ6EgXQwJd5QGZrRnpxq4GvQQT6wpWE=
Subject key identifier: EE:93:89:41:33:06:3E:5B:C5:4B:2D:06:95:CC:BE:FC:7B:8F:97:77
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial: 0AE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number: 0AD1
Signing time: Sat 28 Feb 2026 19:41:55 +0000
Manifest this update: Sat 28 Feb 2026 19:41:55 +0000
Manifest next update: Sat 07 Mar 2026 19:41:55 +0000
Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: p3Ul4vIElh77EcjTTBkloydsTfuJGEJgOYH6UPT8gy4=)
2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=)
3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Validity
Not Before: Feb 28 19:41:55 2026 GMT
Not After : Mar 7 19:41:55 2026 GMT
Subject: CN=69a34503-1ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:d3:99:52:64:85:95:ad:51:a5:02:73:32:
2c:3c:fb:82:01:94:93:9d:62:3f:c8:10:e7:8f:73:
8a:77:de:e4:a7:13:3b:ac:f0:13:ed:1a:2b:04:ba:
06:d9:cd:2c:7c:99:e8:74:54:f3:88:b1:30:fb:52:
81:6b:03:4a:8a:2a:25:6a:4a:32:0b:d9:a6:db:8b:
e6:90:04:70:6a:8b:eb:a4:04:97:5f:db:51:68:7f:
c4:32:cd:ef:26:7f:e8:23:e5:d5:c9:55:cb:d1:03:
f9:fd:7f:7b:d8:5a:05:70:5c:19:5d:af:b1:9e:1e:
c6:38:ec:17:81:8f:b1:74:87:a5:d8:bc:bd:f7:1a:
94:45:35:7d:33:f6:e7:57:d0:ab:ce:e9:ca:11:09:
ef:44:a2:e6:c4:c8:be:d0:24:44:be:24:42:72:0f:
47:f8:77:71:0e:80:df:4a:2d:2f:09:3b:50:4a:e5:
91:61:02:bc:78:ab:43:4d:e2:ce:cf:4b:16:ce:43:
b4:86:4d:2f:d3:5f:76:c4:d0:ea:1d:3e:f0:d7:a4:
42:5a:71:40:f4:e4:45:cb:5e:08:40:01:dd:a2:59:
d9:de:07:ba:90:24:e5:b0:98:55:fd:16:c2:a6:16:
fc:87:3d:ee:bb:1a:b5:7f:86:a4:59:dc:89:15:57:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:93:89:41:33:06:3E:5B:C5:4B:2D:06:95:CC:BE:FC:7B:8F:97:77
X509v3 Authority Key Identifier:
keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:55:8b:b2:c4:de:49:8d:b9:55:aa:a6:5e:96:ab:c3:f2:
1a:22:ad:29:de:dd:c8:a9:c6:9e:53:cc:7a:f8:e4:11:61:c4:
0d:99:57:a8:1d:f5:21:9a:25:f4:76:6d:4d:e4:16:27:83:ec:
49:a9:e2:32:1a:90:4a:3c:f7:ef:b0:b4:08:eb:36:af:51:67:
f5:df:98:81:92:7e:5a:c5:c4:26:1c:1a:b2:6f:fb:22:1a:49:
fd:24:97:ec:c8:ed:7d:81:1a:85:f8:16:04:12:4a:b9:a0:68:
57:86:4f:c4:73:69:2d:65:59:2e:5b:7a:f2:97:07:7a:82:73:
9e:05:a8:52:8c:b2:97:ec:13:13:0d:70:3b:96:09:17:16:bb:
17:2c:6b:66:a8:59:34:b7:48:ff:9c:21:8f:d8:27:67:cb:53:
08:af:e3:0d:17:6f:a3:33:14:5d:db:78:c4:b9:24:1f:f2:93:
d2:b0:0c:11:4d:85:72:df:9a:6d:64:cb:34:09:d7:59:46:18:
2e:bd:69:48:5c:de:4f:0e:fb:0e:f5:1d:57:89:0c:e6:b1:d9:
a4:b7:02:0d:e7:ce:fe:83:c3:06:04:75:f8:e4:26:50:c7:e7:
09:6e:6e:c2:ab:8d:4c:ff:8f:72:18:a9:57:10:75:5f:fc:61:
5a:a1:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:14 2026 by rpki-client