
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier: Z32glgmTJkQBBGn8rz8lx5PI1RlKPZWn+uRJm2NgsD4=
Subject key identifier: 4C:74:20:E7:93:E0:4D:5E:72:1D:C7:47:57:12:AF:44:0B:AF:01:C7
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number: C5
Signing time: Mon 21 Sep 2026 06:47:04 +0000
Manifest this update: Mon 21 Sep 2026 06:47:03 +0000
Manifest next update: Mon 28 Sep 2026 06:47:03 +0000
Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: 1L6oolascSUu2oz/CF61QHJ1CRqRUKfRTL5ZJbjWTlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Validity
Not Before: Sep 21 06:47:03 2026 GMT
Not After : Sep 28 06:47:03 2026 GMT
Subject: CN=6ab0d2e7-1603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:f3:85:fc:c6:d9:99:52:d6:95:f8:3a:23:
ee:fc:5f:50:ea:30:5f:b4:0e:a6:8b:80:55:a5:f3:
cd:2d:eb:93:49:77:7c:f4:74:f9:19:72:54:d8:45:
8f:a3:cc:05:a2:28:bb:91:15:f8:c9:85:f5:1b:07:
64:78:65:ef:d0:56:0d:31:dd:98:fd:30:3c:e3:8d:
55:1f:9f:eb:8f:a6:76:e2:78:26:0b:c9:d2:1a:59:
69:c1:b7:ce:64:f9:ae:44:d9:ff:52:b6:2a:e2:b1:
86:b4:93:49:8c:fa:48:8c:c4:d8:54:f3:ec:04:17:
23:a7:55:87:58:10:bb:61:a5:f0:c2:d4:93:5e:52:
cf:3b:ea:69:40:a6:94:6e:15:1b:ae:1a:fe:12:de:
8b:04:5b:56:fc:7a:d4:f7:2a:ef:82:52:99:f2:dd:
b2:6f:92:f0:ef:d1:3a:ed:04:fb:4a:b0:b4:0a:e8:
f4:88:3d:1a:1a:ac:ea:f9:08:9b:b0:01:e0:ca:88:
fc:49:c8:dc:4b:c5:09:dc:0e:b5:8b:d4:63:11:05:
c7:85:03:fc:a8:86:8b:0a:ee:97:a3:c0:5a:34:0b:
cc:47:b0:2c:41:f8:d5:02:98:f5:fa:65:38:13:3d:
14:60:80:a0:e4:9b:f4:04:26:0e:76:91:4d:b6:1f:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:74:20:E7:93:E0:4D:5E:72:1D:C7:47:57:12:AF:44:0B:AF:01:C7
X509v3 Authority Key Identifier:
keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:60:b4:21:d9:cf:80:57:6a:c1:16:61:80:8d:4c:45:d3:cb:
51:8a:b9:d8:cb:e3:3c:84:46:93:23:e4:ac:82:ee:aa:f7:97:
08:b6:7e:52:1e:32:19:31:7e:e2:61:20:67:47:fc:f4:82:98:
c5:4f:c9:92:d6:a7:76:5c:05:ea:60:08:25:18:b8:45:49:bd:
3d:ef:90:6c:2c:33:eb:9e:77:b1:b6:79:a8:e5:26:ee:49:c9:
d5:8b:39:a5:a6:9e:45:72:28:8f:ba:7f:71:dc:a5:00:93:32:
36:1e:a4:ce:14:25:1e:db:98:18:5f:5d:22:54:17:96:bf:3b:
e2:d1:f0:89:53:f6:20:21:ca:d6:e0:83:14:6f:2e:08:ae:25:
92:2a:21:43:56:32:75:82:88:d3:f2:c7:39:45:5a:5b:02:57:
e0:eb:61:c6:fd:bc:ed:07:6f:fc:03:f3:24:c1:54:21:c3:79:
51:cd:12:a9:d4:fe:1a:56:bd:9c:d9:00:a7:87:04:dd:32:8d:
77:20:9e:15:1d:90:8f:93:0e:4e:30:b3:4a:bb:fd:36:dd:25:
b3:b2:f0:5b:80:1c:78:47:03:b9:c8:85:7a:fe:7c:27:76:96:
37:bf:2e:d1:19:e8:4c:58:75:86:e5:c9:80:92:fa:73:36:7f:
8b:49:f4:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ3RUMxMTAvBgNVBAUTKEFDQTA1QkY5NjI5NUI2MUMyRTQ0RTlERDNDNEM0OEM0
NTlCOUU5NUMwHhcNMjYwOTIxMDY0NzAzWhcNMjYwOTI4MDY0NzAzWjAYMRYwFAYD
VQQDEw02YWIwZDJlNy0xNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZTzhfzG2ZlS1pX4OiPu/F9Q6jBftA6mi4BVpfPNLeuTSXd89HT5GXJU2EWP
o8wFoii7kRX4yYX1GwdkeGXv0FYNMd2Y/TA8441VH5/rj6Z24ngmC8nSGllpwbfO
ZPmuRNn/UrYq4rGGtJNJjPpIjMTYVPPsBBcjp1WHWBC7YaXwwtSTXlLPO+ppQKaU
bhUbrhr+Et6LBFtW/HrU9yrvglKZ8t2yb5Lw79E67QT7SrC0Cuj0iD0aGqzq+Qib
sAHgyoj8ScjcS8UJ3A61i9RjEQXHhQP8qIaLCu6Xo8BaNAvMR7AsQfjVApj1+mU4
Ez0UYICg5Jv0BCYOdpFNth90aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEx0IOeT
4E1ech3HR1cSr0QLrwHHMB8GA1UdIwQYMBaAFKygW/lilbYcLkTp3TxMSMRZuelc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yRTY1OTc5Njg3
REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9yS0JiLVdLVnRod3VST25kUEV4SXhGbTU2
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLQmItV0tWdGh3dVJPbmRQRXhJeEZtNTZWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDdFQy8yRTY1OTc5Njg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9yS0JiLVdLVnRo
d3VST25kUEV4SXhGbTU2VncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEmC0IdnPgFdqwRZhgI1MRdPLUYq52MvjPIRGkyPkrILuqveXCLZ+Uh4yGTF+
4mEgZ0f89IKYxU/JktandlwF6mAIJRi4RUm9Pe+QbCwz6553sbZ5qOUm7knJ1Ys5
paaeRXIoj7p/cdylAJMyNh6kzhQlHtuYGF9dIlQXlr874tHwiVP2ICHK1uCDFG8u
CK4lkiohQ1YydYKI0/LHOUVaWwJX4Othxv287Qdv/APzJMFUIcN5Uc0SqdT+Gla9
nNkAp4cE3TKNdyCeFR2Qj5MOTjCzSrv9Nt0ls7LwW4AceEcDuciFev58J3aWN78u
0RnoTFh1huXJgJL6czZ/i0n0lg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:51:56 2026 by rpki-client