
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier: r4dINM/u9BNsU1oh8Q4apP/uTfs89vXxhwCVuh+mpZo=
Subject key identifier: 5D:B8:AF:07:C2:DD:06:3A:F2:CF:E4:4C:7B:BE:FB:14:91:23:0D:53
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number: 027C
Signing time: Sat 13 Jun 2026 02:01:51 +0000
Manifest this update: Sat 13 Jun 2026 02:01:50 +0000
Manifest next update: Sat 20 Jun 2026 02:01:50 +0000
Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: Ln4l4wknVBI6TBl7bWYXm5i9FGHfsDl43NMQeOhuUyU=)
2: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: tHSDJxi9sVsTRoz1reKONBiKsyiwl7G8bqwueLtrVHQ=)
3: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Jun 13 02:01:50 2026 GMT
Not After : Jun 20 02:01:50 2026 GMT
Subject: CN=6a2cba0e-fa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:de:e5:c8:ec:96:62:39:f5:7a:5b:b6:31:
65:ea:c0:96:b3:70:0b:a3:c5:5e:48:6f:b2:4a:26:
37:55:b8:05:4a:9c:a6:1d:e2:47:b7:3e:40:3d:11:
e4:0b:c9:94:1f:a6:6d:3f:c2:08:42:e3:4e:10:9d:
d7:3a:7d:91:ce:69:98:51:50:54:5b:57:05:63:57:
9f:67:5b:ab:4d:1a:a2:bf:f7:1a:47:ac:24:88:66:
60:5f:7f:3d:29:fd:69:f5:60:63:37:6e:e9:d8:55:
05:92:52:f0:db:22:94:ee:18:29:31:af:8a:81:91:
2a:b7:57:72:af:d1:8c:61:15:74:31:ed:dd:a4:2a:
fa:99:37:f0:c2:44:19:af:20:eb:c9:a8:df:7d:76:
33:6c:24:a6:3e:6c:70:1f:39:8c:32:f5:46:68:72:
aa:e5:da:a3:e4:42:41:81:87:d0:b5:16:8b:9d:c7:
53:d2:24:71:e8:a7:25:4b:64:f1:fd:b1:a2:97:2a:
a6:63:72:e7:4b:80:4e:13:02:2a:e3:ea:05:3a:8d:
c0:12:84:08:33:16:55:af:a5:8a:f3:f4:8e:5a:9e:
df:27:36:e8:a9:f7:cc:df:0b:ed:35:8e:5d:99:96:
e6:5f:d5:06:e6:cf:ef:b5:b5:14:10:ff:29:e6:e4:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:AF:07:C2:DD:06:3A:F2:CF:E4:4C:7B:BE:FB:14:91:23:0D:53
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b4:51:c1:21:43:6e:cc:a8:18:87:09:82:a5:4c:80:7f:01:
cb:67:fc:47:a2:7c:19:3f:e9:89:ac:c9:55:21:92:4d:ff:9f:
70:51:8c:b8:b1:f7:04:e3:57:db:48:89:d1:88:b4:b4:c7:a4:
5a:1e:ff:c5:cb:54:52:d4:5a:46:21:8d:59:40:f6:5e:cc:b6:
fb:3e:bd:06:a2:04:1e:4e:ae:2c:19:d4:47:5b:08:a1:12:4c:
6a:32:26:4c:e2:58:a2:01:a5:e9:5c:c9:b5:cd:15:ca:a3:69:
11:d8:1c:d9:6f:0c:ce:0e:65:b3:17:eb:2e:21:99:99:20:cc:
3f:6b:e1:62:ff:74:b8:b8:a2:3a:75:25:e2:50:86:ca:5b:23:
c3:ae:7e:7b:46:77:6e:d9:08:69:14:6c:d2:c4:b1:df:c1:1e:
81:4c:c7:79:1d:7b:3c:30:2c:aa:37:4f:78:2d:81:d5:1a:c5:
76:88:c9:17:22:8f:55:01:dc:1c:a8:fb:be:20:52:39:c7:01:
40:20:78:03:df:dd:9d:07:73:92:c4:6e:fe:7e:28:d0:0e:1c:
d4:24:4a:23:36:5d:e3:2d:1f:78:1a:96:64:df:44:fd:f4:ad:
58:22:37:8c:63:e7:cf:f6:cb:08:90:95:0d:63:86:7c:a3:2f:
94:94:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:05 2026 by rpki-client