
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier: XuoEKOPFyDyh43WNgfku3DxHv7pPQrbzyVRLttU1o3E=
Subject key identifier: 69:90:F9:27:EB:1B:DA:73:16:11:7B:ED:07:C0:99:BD:3E:D0:F8:DE
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial: 10C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number: 10C6
Signing time: Tue 28 Jul 2026 17:24:51 +0000
Manifest this update: Tue 28 Jul 2026 17:24:51 +0000
Manifest next update: Tue 04 Aug 2026 17:24:51 +0000
Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: haOMOwbmV7gw1BRFT34a86Ep8kS9DcvFyEBXoeXLxAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4294 (0x10c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Validity
Not Before: Jul 28 17:24:51 2026 GMT
Not After : Aug 4 17:24:51 2026 GMT
Subject: CN=6a68e5e3-1854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:23:30:cd:e8:da:e2:22:7a:dc:9b:a3:f7:
33:1f:6d:48:58:30:8c:83:2c:d4:b3:29:22:d8:b9:
0f:49:82:89:38:8c:07:61:d1:b2:f6:04:bb:ca:8d:
a2:d0:86:ac:29:27:66:93:ce:b4:48:3b:07:eb:8b:
0c:02:94:2b:b6:f6:e7:d6:f0:8a:81:fb:66:18:52:
0a:69:b7:86:b7:ca:c4:30:45:b8:90:47:9d:40:37:
65:9f:b6:04:aa:ec:33:8b:69:e6:21:79:dc:3a:93:
ce:c1:a5:16:76:d8:5f:d1:87:c6:0d:74:97:b7:51:
ed:f5:1e:a0:28:01:3e:9e:7f:39:f4:41:14:27:d1:
c3:26:07:3f:1a:dc:4f:1e:85:51:89:e6:13:50:db:
af:be:c9:55:46:b9:05:66:70:25:1e:29:18:11:cf:
da:77:06:9f:b0:76:7d:7f:f6:57:65:17:44:6a:db:
f9:47:26:2b:20:8e:dc:3f:d0:b1:4a:42:c9:b8:59:
14:e4:9f:d9:3e:ef:86:5b:85:91:2f:03:53:12:7e:
1f:4b:97:e9:c9:db:fb:77:af:c5:0e:33:34:f9:a4:
31:c6:94:74:73:c7:b8:3a:8e:6e:51:86:fd:64:05:
91:5b:93:d3:bc:30:de:cc:75:b2:c5:03:39:d8:c3:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:90:F9:27:EB:1B:DA:73:16:11:7B:ED:07:C0:99:BD:3E:D0:F8:DE
X509v3 Authority Key Identifier:
keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:80:68:a4:2d:a3:96:56:c3:cf:e8:69:89:00:c6:90:8f:
7d:f4:81:26:f1:49:0d:c8:4a:e4:5d:7e:82:b7:a0:c6:15:33:
f7:5e:39:c5:d3:b2:f2:bb:8d:85:63:a3:f1:5b:95:bf:2a:8d:
bb:b3:29:25:dd:c4:48:ce:49:41:a8:89:f8:8b:36:42:b5:a8:
7b:04:ee:24:da:d3:72:bb:ca:18:a5:72:1a:27:76:ae:2f:e1:
c2:5d:b8:59:7c:e6:22:92:c0:7e:01:a7:f3:ba:89:39:eb:8c:
2a:79:7e:60:b9:32:e6:5f:01:d2:fb:57:18:77:98:fd:83:fa:
b0:14:e7:fc:09:df:8c:3f:88:4b:7a:d2:ee:8f:72:98:8e:a7:
3f:a7:0a:37:ce:1c:3d:77:4e:30:54:1c:0b:c5:cb:37:41:61:
61:ba:d9:55:b8:6f:17:35:a5:3a:54:90:b5:42:ed:d0:f1:32:
24:ad:cb:df:8b:48:75:7d:5c:63:ac:f6:47:8c:9e:4d:d6:b7:
3d:59:ba:4c:bd:6d:2e:12:36:76:f0:d1:2b:55:f7:dc:b8:fd:
d1:fa:39:3e:b4:ad:f4:21:f4:66:0e:5e:84:de:f3:40:b2:74:
ec:38:e2:d3:3c:ba:d9:61:02:a5:58:32:13:0d:02:4d:9e:f9:
bb:b9:91:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw
QTBDRDJEQkEwHhcNMjYwNzI4MTcyNDUxWhcNMjYwODA0MTcyNDUxWjAYMRYwFAYD
VQQDEw02YTY4ZTVlMy0xODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbIjMM3o2uIietybo/czH21IWDCMgyzUsyki2LkPSYKJOIwHYdGy9gS7yo2i
0IasKSdmk860SDsH64sMApQrtvbn1vCKgftmGFIKabeGt8rEMEW4kEedQDdln7YE
quwzi2nmIXncOpPOwaUWdthf0YfGDXSXt1Ht9R6gKAE+nn859EEUJ9HDJgc/GtxP
HoVRieYTUNuvvslVRrkFZnAlHikYEc/adwafsHZ9f/ZXZRdEatv5RyYrII7cP9Cx
SkLJuFkU5J/ZPu+GW4WRLwNTEn4fS5fpydv7d6/FDjM0+aQxxpR0c8e4Oo5uUYb9
ZAWRW5PTvDDezHWyxQM52MM91QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmQ+Sfr
G9pzFhF77QfAmb0+0PjeMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC
MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK
cWdvUXliTExLQTBLRE5MYm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfWCAaKQto5ZWw8/oaYkAxpCPffSBJvFJDchK5F1+gregxhUz9145xdOy8ruN
hWOj8VuVvyqNu7MpJd3ESM5JQaiJ+Is2QrWoewTuJNrTcrvKGKVyGid2ri/hwl24
WXzmIpLAfgGn87qJOeuMKnl+YLky5l8B0vtXGHeY/YP6sBTn/AnfjD+IS3rS7o9y
mI6nP6cKN84cPXdOMFQcC8XLN0FhYbrZVbhvFzWlOlSQtULt0PEyJK3L34tIdX1c
Y6z2R4yeTda3PVm6TL1tLhI2dvDRK1X33Lj90fo5PrSt9CH0Zg5ehN7zQLJ07Dji
0zy62WECpVgyEw0CTZ75u7mRJA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:10 2026 by rpki-client