
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier: nSI5mLYaq7h6DlEomYnt0lu4HfB7F3H0dERHG1FxaUU=
Subject key identifier: 67:0B:A3:E2:FC:60:E6:C8:A9:0A:DA:59:E1:94:A9:B1:13:F5:7C:2B
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number: A8
Signing time: Mon 27 Jul 2026 09:19:46 +0000
Manifest this update: Mon 27 Jul 2026 09:19:46 +0000
Manifest next update: Mon 03 Aug 2026 09:19:46 +0000
Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: jCoZ28DwXPHU/eGA6WQnWujUmxQI00Ghc9tt+KvfhcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Validity
Not Before: Jul 27 09:19:46 2026 GMT
Not After : Aug 3 09:19:46 2026 GMT
Subject: CN=6a6722b2-d807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:7c:a3:d6:1c:43:bd:20:64:0a:6b:2e:24:
0d:02:cb:93:76:c9:b7:ec:71:c4:76:e6:fe:3a:d7:
7a:fb:3e:1e:cc:73:da:7c:d5:df:e4:d0:ae:3b:0e:
87:1f:e4:be:c5:7d:85:5f:c4:00:ad:1c:ac:cf:ba:
19:7a:52:4b:3d:7f:fb:af:4b:c4:db:1b:b1:47:ae:
f9:ae:d9:dd:28:35:42:19:25:52:4c:a6:b6:fd:e7:
53:f3:55:f1:c2:df:93:02:57:b6:7d:7d:f1:87:d9:
3e:af:30:8b:07:ef:a7:be:72:24:fd:c6:0e:d7:60:
89:be:4b:d3:df:66:8c:04:32:bc:4b:b6:2d:5d:70:
59:82:00:85:0d:9c:c5:9f:2c:e1:af:dd:4f:92:23:
52:88:53:36:fe:24:85:ed:e4:9f:a1:75:46:39:e2:
91:54:51:c5:92:05:b8:41:ad:a3:59:e1:9c:dd:10:
48:8e:e7:59:25:22:e0:33:f7:69:e8:b7:0c:0d:60:
83:41:ca:c3:0e:af:37:ee:24:23:52:3c:9e:13:98:
69:42:0e:70:a0:21:b5:9a:d0:1f:40:29:db:ed:82:
ab:12:72:d4:f6:82:4b:16:09:2a:37:66:41:55:40:
0b:16:ad:53:a3:12:df:51:94:1e:09:f0:2f:30:9a:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:A3:E2:FC:60:E6:C8:A9:0A:DA:59:E1:94:A9:B1:13:F5:7C:2B
X509v3 Authority Key Identifier:
keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:23:9b:0e:2b:08:65:b8:8a:cd:38:69:bd:10:79:8b:c3:
40:d0:f1:bc:75:98:e2:e9:c1:3a:75:ec:ff:1a:55:1a:99:2d:
e3:f7:13:19:48:bc:11:1a:3f:eb:97:8a:68:48:c3:3e:ee:a0:
c0:64:87:01:64:18:6d:ce:1f:ce:6e:4a:1d:bc:6f:03:80:cd:
74:93:cd:ef:64:12:2b:4a:48:08:59:c7:fe:2e:36:99:ea:c9:
45:de:68:7d:04:a9:a2:9f:1c:ec:86:9c:82:7a:b5:a8:97:1a:
54:05:5c:72:b6:fc:3b:9e:4b:e7:0e:a0:79:01:2f:f5:1b:8a:
d2:e2:4c:b8:9d:c1:58:d2:4e:4e:1e:27:65:64:50:ab:47:e0:
64:f0:0b:26:f7:9e:fe:14:4a:6a:b0:13:a4:76:6b:d3:fc:65:
8a:24:1c:f2:6f:0e:13:ac:17:3c:49:00:ab:a1:b5:e1:fe:e1:
9e:08:4c:19:8c:a6:83:25:38:bf:fe:d8:93:29:c9:de:11:0d:
70:c8:da:ca:b4:30:fe:ad:89:0e:f1:e4:f0:a1:52:9b:76:05:
ee:ab:31:bb:e2:b0:1b:25:66:2d:82:d8:7f:db:b2:14:a2:0d:
c2:53:61:3d:66:fb:84:4a:d8:68:18:95:e0:97:40:bc:3e:41:
89:34:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:13:57 2026 by rpki-client