
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json)
Hash identifier: q2Ff0U/khIgN+VMZIqN+o8Ns3mSbSa4CyPvEI+Xr9s8=
Subject key identifier: 56:53:CA:E3:0A:BC:E5:FF:FC:36:9B:58:04:F4:0C:B7:D0:C3:47:68
Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
Manifest number: 06B9
Signing time: Sat 28 Feb 2026 22:33:47 +0000
Manifest this update: Sat 28 Feb 2026 22:33:46 +0000
Manifest next update: Sat 07 Mar 2026 22:33:46 +0000
Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: S/4ksICaZ9XWjcVagUtLEHKYalFcC4kdvrZERU+HQYA=)
2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: aHkHq3prWV8PYM6R/1n0/cS3AolHN3tQt/aLI9yRoNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Validity
Not Before: Feb 28 22:33:46 2026 GMT
Not After : Mar 7 22:33:46 2026 GMT
Subject: CN=69a36d4b-0931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:ad:92:91:63:65:bc:b0:ba:56:f1:a2:ec:
f3:ad:8d:86:e7:24:91:a0:59:00:fd:2d:5e:8f:5a:
d9:8c:49:df:27:bc:bb:25:b2:e9:01:82:b9:a7:c0:
d0:2a:0d:29:aa:9b:a0:b2:be:a4:65:bd:27:d6:c1:
91:bb:dc:13:41:e3:c8:02:2e:b5:c1:cf:9b:34:3f:
90:7f:d8:2e:79:df:8e:9d:91:9e:9a:eb:a1:ae:39:
9b:bf:48:d6:16:e4:31:f0:75:ba:c7:e6:e7:2a:56:
c2:e8:b3:6f:fa:4e:0c:ed:1d:f3:45:ec:a3:fe:fa:
0c:05:30:1a:50:d0:22:73:4c:54:57:2c:be:1e:9b:
db:43:81:b2:e5:8b:93:78:55:c7:71:23:f9:9f:e4:
30:94:6b:e7:b3:e1:2c:e2:09:fe:73:bc:da:e8:b8:
dc:e6:37:c9:78:f0:b4:d0:11:b8:cd:c2:e6:7b:dc:
39:95:18:21:20:48:18:d9:45:ba:f6:16:9b:5e:e9:
e1:98:48:e8:d5:e8:85:3d:50:cc:39:54:be:eb:1b:
83:cc:24:9c:98:59:3f:ab:fe:b7:12:d5:67:dc:0c:
0d:b2:ae:ab:06:75:b6:75:ee:74:61:72:6f:21:4c:
98:68:3f:c7:6e:4f:f8:91:93:75:e9:ce:c7:3e:a8:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:CA:E3:0A:BC:E5:FF:FC:36:9B:58:04:F4:0C:B7:D0:C3:47:68
X509v3 Authority Key Identifier:
keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:c1:3a:8c:2d:72:72:3b:ad:40:d3:9f:6e:26:f4:71:13:
01:c0:4c:53:20:ee:68:0c:cf:ff:03:4f:92:6e:31:4a:0d:57:
57:85:29:39:6f:76:a8:fe:fd:bb:fc:ed:db:01:68:d5:56:bb:
98:7d:77:7c:d7:da:18:87:20:14:1a:0d:cd:0b:16:93:c0:4d:
e1:4e:5f:5b:44:b2:b1:4c:e6:30:88:d6:53:3f:29:d9:47:e7:
c7:b8:38:88:65:9b:c1:16:42:06:9c:d0:71:82:7c:46:f1:2f:
b6:af:ab:61:88:96:d9:09:e6:a4:95:6a:c5:de:8a:2a:03:d4:
6a:11:e2:7b:4e:0e:fb:0f:7b:69:66:07:7c:81:20:09:34:02:
9a:40:44:2d:32:28:38:0c:d8:57:f4:62:ba:ac:ee:6b:fe:a7:
cf:07:64:e4:74:d7:2e:31:a7:ca:11:6a:cd:89:ae:59:08:79:
be:c0:7d:72:07:dc:29:73:ad:9e:e8:82:be:76:4c:8f:12:78:
c6:69:35:60:6a:9e:93:9a:77:95:e6:b0:b3:a3:45:20:8c:f1:
2a:e8:68:ba:1e:ae:6b:b5:92:f1:4d:b8:c0:b2:e9:5f:3c:a9:
1b:6b:69:19:8f:32:98:e6:bd:0b:62:f6:8f:60:c6:da:11:a4:
78:c7:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:11 2026 by rpki-client