
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier: pvRwGVUltGuT8/JmhggSKcrvzEDykA+a7cfA68nIQV4=
Subject key identifier: 82:53:73:AE:07:71:22:A4:23:0C:49:79:3B:BA:36:58:16:FB:3D:ED
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number: 066B
Signing time: Sat 28 Feb 2026 23:19:31 +0000
Manifest this update: Sat 28 Feb 2026 23:19:31 +0000
Manifest next update: Sat 07 Mar 2026 23:19:31 +0000
Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: jVUHzS3xkVQ8lKmhIdO/rHLGDdhYR7720Fw3dRD09FI=)
2: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: sGBsBvvjVOXcMSvoZxggTWP1eTxexWQrQGaZYHB+t3U=)
3: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: LhygQeRm6YFYDIJnZGRWnfS4FcTKob82snKec/R1Ja0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Validity
Not Before: Feb 28 23:19:31 2026 GMT
Not After : Mar 7 23:19:31 2026 GMT
Subject: CN=69a37803-0b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:79:6d:42:2f:c5:05:d4:93:c7:1b:12:fc:
76:ad:7b:81:50:fd:db:b4:a3:fc:c3:68:8f:2c:19:
c8:8c:bb:cf:19:73:b2:88:59:c0:36:d9:90:3a:f1:
67:ca:a3:d1:2f:c6:34:b5:81:b3:0e:3f:db:dd:2d:
90:05:85:06:92:09:84:bb:9e:6c:b6:60:62:a7:70:
fa:62:38:3b:90:7b:1b:fe:89:f3:3e:7a:01:4b:fb:
f9:99:3d:39:66:ec:3b:6b:1e:68:4c:5b:6b:08:fb:
67:4c:10:6d:f2:97:5b:aa:5b:06:41:15:7f:74:88:
ab:85:a4:12:7b:38:b0:31:f6:ed:4a:46:0e:98:7b:
33:6b:3f:c1:9e:91:c2:c0:58:10:cb:28:de:2d:8c:
01:92:7d:46:50:c8:4a:dd:e9:26:69:a5:11:31:9f:
4e:92:99:69:d4:4d:4a:8a:fe:3e:3b:b4:84:04:22:
ab:e1:80:68:14:22:b0:bd:ad:a2:e7:e9:1e:84:79:
a0:49:04:3c:24:5d:71:f7:47:d7:9f:bb:20:4e:11:
ad:3b:15:ae:45:53:ed:63:d9:89:92:39:53:77:ff:
eb:9f:fe:92:ad:4b:8d:bb:09:79:c5:68:47:80:05:
0f:33:1c:77:2f:56:12:ab:d3:62:02:85:d4:40:10:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:73:AE:07:71:22:A4:23:0C:49:79:3B:BA:36:58:16:FB:3D:ED
X509v3 Authority Key Identifier:
keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:22:e2:94:48:dc:fb:b2:ef:c9:44:50:60:46:d3:0e:f2:
2c:a8:94:f4:6b:3b:3c:f0:a7:cc:1c:e5:05:01:ae:a8:31:e2:
01:6e:d4:18:c7:cb:6f:33:1c:a6:40:04:bd:18:ab:fa:ea:f0:
48:18:45:20:0e:ec:08:83:84:30:74:11:ba:46:da:22:86:6a:
64:ae:82:51:67:53:78:9c:bc:45:f8:ab:02:1a:8b:6c:1b:e1:
ad:47:10:d1:c5:74:0b:7f:de:59:ea:cd:e2:a8:8d:fe:68:4a:
21:4e:b0:55:71:7b:3a:e6:98:20:d3:90:15:45:12:c2:b9:d4:
03:a0:f2:e2:50:94:f5:0f:17:a1:d6:c1:2c:04:65:23:dd:4f:
95:a0:bb:4f:27:b7:64:e9:86:1f:49:65:73:95:68:3b:cf:9e:
a8:b7:9a:b9:ba:fe:22:85:6a:9e:f3:6d:80:cc:dd:78:f5:f1:
5e:f9:cd:52:f5:35:f4:36:9a:49:03:82:6b:81:48:1c:b4:fd:
3f:1d:16:84:d7:6f:da:b8:c8:00:b9:85:ff:5c:e9:d2:8b:dc:
de:a2:60:6e:a1:ad:8d:33:8e:1e:a9:ec:ff:06:36:41:7a:ca:
ce:05:73:bd:7b:9a:ea:4a:33:c0:fc:44:df:a2:71:b6:59:72:
09:35:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:17 2026 by rpki-client