
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier: 0lpxskTivdx/Txn7yJlQ9OBw50PYHYGbMoHLIW0BvrY=
Subject key identifier: 2B:B3:C0:20:4D:61:F1:DB:54:3F:A4:7D:8C:51:37:1D:A9:45:D5:6E
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial: 10E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number: 10E3
Signing time: Sun 20 Sep 2026 17:16:14 +0000
Manifest this update: Sun 20 Sep 2026 17:16:14 +0000
Manifest next update: Sun 27 Sep 2026 17:16:14 +0000
Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: p+dXKsMomdlgGc1vSrgiKBzUhFhOhTUqvUf7H+sVnSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4323 (0x10e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Validity
Not Before: Sep 20 17:16:14 2026 GMT
Not After : Sep 27 17:16:14 2026 GMT
Subject: CN=6ab014de-57a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:1a:9b:03:29:1a:84:48:57:a6:d6:8a:ba:
57:94:e9:3e:4f:5a:b1:34:59:07:56:9b:8f:eb:8d:
1e:74:d0:bd:d5:ec:e8:6a:b6:a3:96:a2:73:f8:69:
72:05:40:69:1b:07:e4:ab:e4:e6:1c:12:43:45:5c:
9b:7a:ba:ac:0b:15:2e:b9:a5:1f:bd:61:fa:97:b8:
27:6b:1e:bf:03:a3:9e:44:a7:65:9f:52:21:66:fa:
28:34:57:16:d8:a0:c1:db:d4:8f:d5:38:aa:fa:2d:
ff:3d:41:5c:44:df:d4:74:f0:5a:fb:64:46:55:91:
e2:11:b2:5f:a9:b2:00:ae:0a:50:48:98:50:61:26:
27:b7:cf:f4:30:7d:12:9a:89:5d:bd:d4:d8:68:f3:
fe:e5:60:a4:41:bd:5e:42:63:72:30:c5:80:b8:7e:
85:a6:8f:ed:53:86:f4:75:92:27:86:ca:90:26:63:
fc:05:65:9f:1e:24:4f:0d:e7:36:c9:df:09:5b:45:
45:64:25:41:c2:27:58:26:06:3a:f6:b3:4b:93:9f:
fb:8b:1b:36:f1:d8:0b:ab:60:40:e7:11:1b:3f:36:
d0:44:dd:e7:ab:fe:a0:39:4b:1a:a2:ef:89:a6:c0:
2b:49:ff:93:f8:a9:66:d7:aa:4e:9f:71:95:c9:bf:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:C0:20:4D:61:F1:DB:54:3F:A4:7D:8C:51:37:1D:A9:45:D5:6E
X509v3 Authority Key Identifier:
keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:36:01:a2:eb:15:fb:c7:7a:86:5b:9b:d5:78:46:42:be:
73:30:fc:b7:25:33:07:73:f5:4b:f1:95:40:1e:72:b7:a2:e0:
1b:cf:67:07:e5:9d:e2:db:b0:c2:f1:69:ee:b9:28:77:89:1a:
ec:33:02:45:14:ec:31:f7:3b:64:45:93:d1:a9:45:f8:91:db:
88:06:80:1e:74:20:bb:b8:d0:ce:55:20:2a:e1:db:2c:da:bb:
d7:b6:7a:c5:f2:50:9f:52:e6:d0:88:47:0e:ce:65:9d:57:8e:
ac:00:d4:75:06:c2:e1:36:4a:bc:d4:be:22:df:1b:af:1a:43:
68:23:79:e0:64:7e:8d:c5:66:f8:f5:1b:62:3d:bd:72:af:cf:
60:be:0c:2e:c9:a0:bc:dc:0a:e7:f0:70:7b:2c:e0:c3:d1:33:
13:a5:e2:16:7d:8c:37:53:b8:ba:cf:c1:cf:7d:b0:66:be:73:
3a:a3:03:d4:66:7a:52:3b:5c:1f:87:39:e6:08:62:00:1c:bd:
90:50:98:76:9f:2b:8a:eb:17:19:33:a4:52:b9:21:f3:55:81:
e4:74:bf:61:3c:2a:ae:04:2d:49:0f:39:3d:14:7e:ce:a5:92:
47:82:52:28:61:ac:07:a2:0b:3c:ac:4f:86:70:6c:b5:d5:76:
df:f1:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:35:45 2026 by rpki-client