
$ rpki-client -vvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
File: kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json)
Hash identifier: C0IdAFcjUnEIhyiCARnpjMd9UOpuM7aE/yQ0r/bODeY=
Subject key identifier: EE:6A:1C:94:CE:15:C9:CB:5C:32:07:3D:19:D9:2E:82:3E:C9:27:A1
Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
Certificate issuer: /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Certificate serial: 036E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
Manifest number: 0363
Signing time: Mon 27 Jul 2026 02:00:49 +0000
Manifest this update: Mon 27 Jul 2026 02:00:48 +0000
Manifest next update: Mon 03 Aug 2026 02:00:48 +0000
Files and hashes: 1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: /2qqaH71xoffBsVmdzK3A/KaLv2AWBzO/oA+/nfY490=)
2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: 5pvog1WaQXSx08gAbCNPBFn3bbF20IQKZ1DUM6ITIJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl
rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919879C, serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Validity
Not Before: Jul 27 02:00:48 2026 GMT
Not After : Aug 3 02:00:48 2026 GMT
Subject: CN=6a66bbd1-fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:15:3f:2c:e7:e9:0d:c6:6f:7c:42:96:d7:
d8:7c:e0:98:b3:05:f8:c2:82:ef:19:bc:d9:ec:75:
55:e9:f2:19:5c:6c:d8:ee:5b:e6:61:ba:58:bc:27:
3f:bc:f0:93:b9:30:de:dd:8e:cd:2e:29:cd:dc:9a:
e8:03:93:a6:82:2f:63:7b:dd:65:76:b4:58:66:2c:
63:d3:08:b6:dd:b8:ec:48:34:84:63:3f:76:c2:74:
0d:c2:ae:45:7a:fe:5b:86:f6:13:fe:62:37:7b:80:
03:49:40:ae:8c:81:f0:36:87:81:1e:6f:fb:e8:42:
74:06:db:70:57:4f:27:7f:48:07:f5:45:df:89:0a:
cc:4f:3b:e4:61:21:98:ae:b2:42:8e:a3:71:fd:87:
cc:4a:0b:65:f7:64:51:4a:c8:d6:d9:7f:30:30:79:
98:7e:0b:a5:a7:dc:6a:28:61:a4:68:31:0b:08:9e:
bb:e7:ac:fc:6d:26:95:46:49:e9:c5:c4:37:6e:ce:
49:ed:96:72:bc:83:2d:c8:a2:05:5d:12:ad:72:6c:
d6:f2:2b:3c:e5:d2:09:4c:49:12:0f:a8:4e:38:23:
47:02:61:81:f7:f9:3b:a1:a4:03:90:37:f6:64:0e:
65:97:a4:5c:6c:fe:ef:9b:62:c6:88:c2:42:21:d8:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:1C:94:CE:15:C9:CB:5C:32:07:3D:19:D9:2E:82:3E:C9:27:A1
X509v3 Authority Key Identifier:
keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:88:a2:a2:cc:b4:cd:c7:42:32:cf:90:cf:52:2a:3d:c1:78:
d0:fb:51:c1:82:12:c5:cc:4a:b9:28:7f:ab:26:55:7e:7a:e9:
98:d2:8a:a1:5e:5a:cf:49:7d:47:47:cd:c2:33:1a:e0:eb:c9:
ca:f9:ed:5c:6b:19:3c:05:92:04:2d:87:d8:b5:69:54:f4:f7:
2d:10:01:d9:25:6a:ef:c7:ec:2b:64:6c:1c:51:45:c6:6e:f8:
37:3d:42:a8:b2:5d:44:dd:c0:12:30:22:c5:fd:84:c3:fd:b6:
e3:26:8f:ce:1b:08:68:c0:c1:d7:77:85:2c:08:e6:87:8f:9c:
41:ba:a5:3d:68:70:41:c1:3f:5d:01:3d:fd:57:84:1c:87:b7:
04:62:61:e1:dc:ff:9f:db:46:56:07:79:91:8a:11:64:57:47:
fc:fe:42:68:43:93:59:74:a7:6d:41:09:e1:c0:c0:67:12:c2:
4b:2d:3e:82:8e:a5:3c:be:9f:51:9c:7d:da:d8:8a:b9:3f:85:
90:7f:10:fd:11:c7:5a:51:e8:a8:9b:00:af:90:ef:d5:c8:01:
e8:61:e7:86:50:18:95:65:45:21:b7:70:a4:5b:ce:af:2b:cc:
bd:48:f2:3f:ab:74:ca:2e:8a:cc:da:de:93:d5:14:09:91:33:
f4:90:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:01 2026 by rpki-client