
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json)
Hash identifier: Zj2Q39rT4oILeNvRLw4XFz3KxFvUX1pYpW2VIdzgN3E=
Subject key identifier: 72:AD:C8:56:2B:8B:5A:53:D2:0A:B3:97:8D:04:25:9A:12:8F:92:68
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
Manifest number: 011B
Signing time: Sun 01 Mar 2026 06:51:41 +0000
Manifest this update: Sun 01 Mar 2026 06:51:41 +0000
Manifest next update: Sun 08 Mar 2026 06:51:41 +0000
Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: /xiR5PJ2Hi9O7T5MLmnUn5P3N7U0r7Bh2yN08VXjsMY=)
2: C37A8D80DC9411F0B18EF655406F56BC.roa (hash: qnCZU7C59oQWFeEtmfxzdPCrAt6hK/fzPVfYtt26rIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Validity
Not Before: Mar 1 06:51:41 2026 GMT
Not After : Mar 8 06:51:41 2026 GMT
Subject: CN=69a3e1fd-abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:23:81:fc:9c:fd:3d:4e:ff:8e:4b:94:2c:
8b:b4:c0:ed:36:2c:f1:4e:0e:4e:aa:f8:ba:2c:40:
f5:d1:c4:ac:4c:df:6c:aa:d2:46:2e:9e:44:0c:e2:
dd:ea:d2:83:c0:43:3c:b1:64:f1:4e:02:4c:85:66:
bf:77:f3:28:cf:89:7f:8e:e1:c4:d8:35:74:ab:92:
2d:8d:d6:3f:7a:d1:a5:c8:59:9f:27:69:90:4a:f4:
81:fa:68:aa:44:e4:3f:93:29:a4:83:37:4c:99:e7:
77:25:cd:f5:e8:5e:65:c5:c0:90:c3:8a:ca:d6:56:
ad:4d:5c:fe:3a:ba:8e:30:42:37:18:3d:d4:4c:52:
07:9a:d7:96:b8:f9:9e:fb:74:22:96:f3:fd:49:23:
55:3b:bc:e7:5b:2b:cb:f5:74:bd:19:ed:14:c8:4d:
a9:d2:68:7b:e8:59:eb:9e:d0:e7:2f:ae:55:2e:ad:
5d:d0:7a:d2:58:13:d6:b8:d0:86:a3:8f:4f:9c:1b:
68:d7:2e:80:38:98:73:ea:78:86:be:93:cc:7d:f7:
5e:2d:b4:eb:dc:c6:03:d9:fd:b3:fc:66:8d:cb:8b:
5c:70:f9:49:d1:12:6d:ac:5b:6d:2b:43:f3:20:ae:
e0:d1:a0:3c:43:f8:76:b3:cb:f8:f8:c9:22:37:f3:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:C8:56:2B:8B:5A:53:D2:0A:B3:97:8D:04:25:9A:12:8F:92:68
X509v3 Authority Key Identifier:
keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:1e:13:45:2c:e6:48:ce:70:ca:62:7f:5c:ba:5d:92:a7:6d:
c5:0a:46:16:97:1e:ef:b9:c2:5c:fd:70:8f:de:2c:36:b9:7c:
32:31:82:79:ce:aa:ee:a8:e5:e5:2f:e4:a2:01:94:60:78:df:
11:27:71:f7:27:ca:87:9c:06:82:43:f7:92:d0:20:2f:65:7a:
d7:f3:f5:69:5a:8c:6c:3f:a5:ea:96:65:b3:6e:7d:41:6b:f8:
4f:bf:53:66:b0:9d:50:15:b0:39:fc:63:27:19:8a:42:6a:b8:
75:b6:36:ff:7b:1c:22:65:11:76:27:bf:ee:bd:55:4c:8c:4a:
d6:12:86:0b:f1:30:ed:f2:6f:43:6f:12:19:e5:1f:dc:6e:1f:
a2:ea:46:36:16:94:a6:6a:03:42:53:b9:24:b3:6d:0a:63:4e:
c7:05:a5:14:82:13:74:08:75:31:5b:d9:10:3f:a7:30:42:ad:
ee:40:97:08:a7:0c:04:7c:c6:74:dd:ca:d8:cc:66:c3:bb:91:
61:a2:88:5b:83:fa:c7:3d:0d:de:b5:12:ef:f4:bf:11:62:22:
ce:dd:14:de:1c:66:d8:43:eb:90:dc:9b:56:34:f3:1b:98:f8:
09:82:bb:87:37:8b:8b:c6:d5:b9:ae:40:a0:a1:44:ad:29:d4:
39:d5:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:30 2026 by rpki-client