
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier: 0imCgxj0ZfqwT4BcuXi/el5/3a9zQDlB0rEpG1ppXNA=
Subject key identifier: 86:86:C8:4E:31:92:00:5D:A7:B2:53:05:67:86:D0:C2:E3:EE:AA:44
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial: 0B06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number: 0AFD
Signing time: Sun 26 Jul 2026 19:48:23 +0000
Manifest this update: Sun 26 Jul 2026 19:48:23 +0000
Manifest next update: Sun 02 Aug 2026 19:48:23 +0000
Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: F8qQMA/Uq/vHtAn/TzcDE72irFyvTQeZjLr7NG/DoSQ=)
2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: AkREMdUY9iw5osiiQhe7w1xnANjcqb+Bqi344RCqSk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2822 (0xb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Validity
Not Before: Jul 26 19:48:23 2026 GMT
Not After : Aug 2 19:48:23 2026 GMT
Subject: CN=6a666487-252f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:85:71:f4:af:34:cd:52:bf:9c:b6:1e:11:
1f:fc:ba:b6:1a:0e:f8:65:02:ee:5d:fd:f5:4a:63:
af:5f:29:b8:9d:c6:7e:cf:7b:d3:36:c2:3b:45:6b:
a3:16:c5:d8:69:8b:8f:60:e4:0a:b3:73:28:ca:67:
f2:c5:95:4e:aa:1e:0a:f4:05:9c:0b:24:92:18:f6:
3b:a7:74:ba:7b:60:63:d7:87:6b:40:f1:f4:8c:6b:
b3:c1:bd:ac:41:7c:07:c8:42:3f:75:b2:87:0b:45:
54:17:f0:0f:03:b9:4d:59:03:61:ae:c5:80:9f:64:
49:4b:95:5b:03:c8:c5:87:01:dc:d4:d1:5f:1f:0b:
e4:c5:94:f6:9e:56:ae:13:e8:9d:99:16:18:ea:75:
3d:b1:34:ee:8c:87:db:a7:91:74:99:c4:7a:ac:9f:
37:20:02:0b:67:4c:c3:e1:00:ac:28:95:b6:7b:0a:
c3:02:e9:c3:bc:59:f7:46:6a:0e:84:3f:11:91:75:
13:3e:34:3c:58:65:86:9a:86:d4:cd:13:8b:62:9e:
90:7f:e6:18:8e:0e:2e:2e:f3:59:18:fa:25:d2:74:
74:aa:17:7e:f8:8f:11:df:b1:2b:ab:97:69:4d:e6:
f8:52:ed:1c:56:65:b5:4a:77:83:e1:b2:cd:23:de:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:C8:4E:31:92:00:5D:A7:B2:53:05:67:86:D0:C2:E3:EE:AA:44
X509v3 Authority Key Identifier:
keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:8f:cb:90:01:ac:27:73:10:bc:4c:b7:9d:d5:22:db:bf:71:
81:08:b5:ff:14:9a:b8:6d:11:c9:74:09:9a:9d:ed:64:c5:c6:
75:08:6f:ef:9e:d1:9a:4b:79:db:bc:36:f4:da:06:ec:d2:81:
df:75:42:f8:18:08:e6:3d:32:12:b5:c7:da:dc:61:da:8a:28:
51:a1:3b:74:a8:f8:e4:a3:46:4c:2a:1a:a4:6d:3a:46:73:db:
17:1f:34:cb:57:c8:67:21:7c:f4:46:4f:77:1b:96:18:5c:ac:
10:ec:09:af:e7:7d:d5:60:98:37:e3:de:27:74:9c:51:d1:7d:
e6:52:df:6e:8f:3b:06:0b:c8:e0:d2:b4:9a:4d:f5:fe:41:71:
7f:b3:15:32:08:d5:39:a0:0f:f0:9a:bc:fc:a8:ca:98:9f:16:
32:50:26:06:28:6f:2e:85:bc:99:fa:55:84:80:69:de:2a:25:
39:16:ce:38:89:df:5d:0b:66:a8:cf:5c:c2:a9:fe:45:3a:7d:
1e:e4:db:03:15:dd:e4:9b:de:e4:da:8c:e4:02:67:89:d0:8e:
3e:06:07:82:22:16:45:1b:25:6f:0b:49:2f:22:1f:34:0e:d7:
6a:2c:f3:7a:29:cc:fd:ba:eb:c3:f4:1b:8b:7a:f4:15:13:fa:
fc:4d:c5:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw
NjBEREUwOUEwHhcNMjYwNzI2MTk0ODIzWhcNMjYwODAyMTk0ODIzWjAYMRYwFAYD
VQQDEw02YTY2NjQ4Ny0yNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0nyFcfSvNM1Sv5y2HhEf/Lq2Gg74ZQLuXf31SmOvXym4ncZ+z3vTNsI7RWuj
FsXYaYuPYOQKs3MoymfyxZVOqh4K9AWcCySSGPY7p3S6e2Bj14drQPH0jGuzwb2s
QXwHyEI/dbKHC0VUF/APA7lNWQNhrsWAn2RJS5VbA8jFhwHc1NFfHwvkxZT2nlau
E+idmRYY6nU9sTTujIfbp5F0mcR6rJ83IAILZ0zD4QCsKJW2ewrDAunDvFn3RmoO
hD8RkXUTPjQ8WGWGmobUzROLYp6Qf+YYjg4uLvNZGPol0nR0qhd++I8R37Erq5dp
Teb4Uu0cVmW1SneD4bLNI942OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaGyE4x
kgBdp7JTBWeG0MLj7qpEMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG
ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6
WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV4/LkAGsJ3MQvEy3ndUi279xgQi1/xSauG0RyXQJmp3tZMXGdQhv757Rmkt5
27w29NoG7NKB33VC+BgI5j0yErXH2txh2oooUaE7dKj45KNGTCoapG06RnPbFx80
y1fIZyF89EZPdxuWGFysEOwJr+d91WCYN+PeJ3ScUdF95lLfbo87BgvI4NK0mk31
/kFxf7MVMgjVOaAP8Jq8/KjKmJ8WMlAmBihvLoW8mfpVhIBp3iolORbOOInfXQtm
qM9cwqn+RTp9HuTbAxXd5Jve5NqM5AJnidCOPgYHgiIWRRslbwtJLyIfNA7Xaizz
einM/brrw/Qbi3r0FRP6/E3Fgw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:14 2026 by rpki-client