
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier: hOH/0QyKelQfAdOijKYKtribxzoyCqkvKFgssGjyHvs=
Subject key identifier: DA:51:EA:75:F2:C2:23:41:50:48:D8:BC:CC:6A:19:FD:AB:AA:2A:D7
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number: 0244
Signing time: Mon 02 Mar 2026 01:16:02 +0000
Manifest this update: Mon 02 Mar 2026 01:16:00 +0000
Manifest next update: Mon 09 Mar 2026 01:16:00 +0000
Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: Z5HzbQtMavnqlR3h5TLn2OVauXJ/G65/lBwrojZjPsw=)
2: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: qY2oWQ6O24uLiBQ0TycUS4IgcjTJHFLS3QInlmGLA34=)
3: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: jRvafP6NvF0333PZOi2JG/WbiklUoPDz6/v/1RBF/LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Mar 2 01:16:00 2026 GMT
Not After : Mar 9 01:16:00 2026 GMT
Subject: CN=69a4e4d2-4b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:ba:f4:80:09:92:23:5b:f9:83:79:93:e9:
9b:ae:76:e4:5a:9c:fc:20:d6:74:41:67:67:e4:89:
08:36:11:23:ee:ac:12:8f:ce:9b:2a:26:69:61:f4:
9b:d8:83:15:b6:f2:3a:ae:e3:99:17:78:75:39:d3:
cb:34:27:21:4a:d1:d3:12:e1:6d:e0:c7:1e:c9:ba:
dd:d9:c0:8f:22:7d:97:74:ac:8f:2b:bf:b5:2b:f0:
37:39:e2:43:8a:e4:57:6a:8f:ca:bd:82:b8:9a:b3:
bb:04:5f:e3:7c:bd:0f:7a:67:76:9b:0c:00:0d:73:
07:0a:c4:70:45:4e:82:9c:5c:52:57:95:42:88:c1:
a1:3c:45:e1:c7:4d:81:a3:47:aa:0a:bb:02:69:db:
18:0a:04:2f:85:a2:62:57:54:8c:95:c3:fa:a8:32:
b4:5b:5c:96:ad:23:ae:fa:15:ea:ff:ea:e6:80:40:
6b:59:cd:44:21:93:6f:2b:ff:08:43:e0:da:5e:bd:
f1:9b:17:ac:f2:56:82:f7:44:fd:af:cd:70:15:4c:
0f:f0:23:b0:60:d1:1e:2b:11:be:97:0d:6d:51:75:
68:5b:a5:88:96:7b:d0:05:bd:fe:f8:38:d6:30:e4:
ba:70:5c:3d:a6:11:c5:0f:f4:01:c6:dd:fc:54:c9:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:51:EA:75:F2:C2:23:41:50:48:D8:BC:CC:6A:19:FD:AB:AA:2A:D7
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:95:82:e5:13:6c:26:0b:70:23:8b:38:32:7e:f2:e0:a3:43:
9d:03:4b:c7:59:42:23:ea:f8:57:24:85:0c:f8:24:ff:05:25:
81:96:ed:55:10:19:5d:15:05:86:a6:9c:db:bf:ac:6d:65:98:
18:3a:09:0a:ad:30:1e:c9:ba:b1:90:74:bc:ae:1a:b5:18:fd:
d0:66:1c:e3:c1:db:46:69:3b:0f:bf:dd:7e:e5:51:a2:81:e3:
93:ed:ce:96:29:fe:df:0d:85:55:32:2e:4a:71:c8:ad:75:b1:
58:fc:d4:44:1b:f0:d2:3f:b9:7c:05:bf:58:64:bf:0b:82:d7:
60:30:6e:f6:32:df:83:14:db:01:1f:53:4c:75:f3:68:26:61:
f5:4d:88:a6:46:f4:b6:97:5f:cd:c5:5b:5a:4c:08:d5:4a:33:
26:a1:24:71:66:87:3d:3d:a7:41:f7:91:21:3a:08:96:50:bf:
1d:93:bc:0b:0c:d7:cb:f9:26:6b:b3:fc:28:d9:1f:ab:87:98:
22:ee:ed:1d:af:94:ad:d3:05:8b:4c:74:38:ab:7c:63:9e:cc:
53:eb:73:d4:14:e6:ff:16:07:31:8a:44:dd:8f:fe:cd:db:3e:
e4:c5:71:12:82:d7:36:bb:31:ac:7f:be:cd:bb:19:89:bd:0d:
2a:61:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:57 2026 by rpki-client