
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json)
Hash identifier: yR7wvoJ75ahpPYCgs4bbscu8hz3z/4QY4zz7uxKUB1I=
Subject key identifier: 82:D7:C7:77:A6:B1:95:C6:74:48:8B:C8:86:32:E4:D6:65:E7:6A:82
Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
Manifest number: 01FA
Signing time: Mon 21 Sep 2026 03:12:01 +0000
Manifest this update: Mon 21 Sep 2026 03:12:01 +0000
Manifest next update: Mon 28 Sep 2026 03:12:01 +0000
Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: +zkqZ8VirkQHsecT3kGBVgMvuXGTQ2TzLpi+xNGakA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Validity
Not Before: Sep 21 03:12:01 2026 GMT
Not After : Sep 28 03:12:01 2026 GMT
Subject: CN=6ab0a081-a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:90:f1:18:78:a6:3b:a7:1e:da:73:ac:aa:
6d:41:11:a6:f0:6a:08:5a:e7:76:55:a6:57:6c:3c:
5d:65:3b:58:03:33:3a:98:20:a0:57:a6:35:79:9a:
df:b6:00:4a:0a:fc:87:1e:61:de:cb:30:c7:d1:9a:
e3:4a:93:04:3d:66:8f:26:b3:ec:65:b6:ea:0a:30:
40:98:61:94:5a:a4:9d:37:cb:19:8f:70:8c:79:a2:
f7:41:12:2e:a5:15:5e:8a:72:8a:ba:18:45:16:4a:
e5:4f:df:a7:f9:ae:67:b8:62:ac:8e:a4:d9:2b:4e:
63:8b:3f:e0:08:79:0b:72:66:e3:e4:fc:87:86:f6:
03:b2:93:d8:28:bb:f6:11:a2:1e:b0:70:dd:80:09:
32:68:f4:bc:38:13:80:e4:bd:b2:f7:b9:1a:d5:dd:
80:b6:73:21:a7:58:e8:4f:2b:1f:80:f7:59:63:6f:
dc:5d:98:d6:5b:7f:5c:20:08:a9:5e:46:fa:77:57:
c5:19:a8:89:00:b5:37:01:34:d2:93:cf:14:f4:a8:
cf:5f:32:bc:77:44:70:c5:9e:cf:e3:d8:1b:07:35:
dd:1c:fb:e6:92:3b:fc:7a:4a:eb:f5:5c:c3:aa:65:
5e:90:e2:6b:84:bc:e7:74:23:9a:33:4a:51:f3:a5:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D7:C7:77:A6:B1:95:C6:74:48:8B:C8:86:32:E4:D6:65:E7:6A:82
X509v3 Authority Key Identifier:
keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:ea:64:22:0d:93:80:70:d1:d9:eb:c5:34:76:b9:cf:f0:
e6:6e:35:63:6b:4f:16:0f:f0:6b:f0:9b:dc:b9:73:52:03:3d:
b1:e8:cb:41:86:8b:a0:cd:d2:12:d9:c0:c2:e8:61:13:71:16:
b2:b7:57:3d:c5:ea:48:f1:c1:4e:98:32:a4:2c:24:e3:36:f1:
4d:95:1d:92:b7:dc:10:85:26:e4:21:3a:d1:48:f3:0a:ef:8e:
d8:d9:1d:c8:4e:f3:d8:4d:2b:46:68:9a:0f:b0:96:94:3d:1f:
ad:de:16:6d:e5:56:0f:6e:d0:1b:d4:93:2c:1a:34:4f:43:8a:
98:8b:38:09:77:39:f4:76:f2:7e:15:27:8b:f7:1d:e1:73:ef:
b0:7f:4f:02:cf:84:c1:9d:7f:71:1d:03:a6:8d:bb:87:8b:17:
b5:86:00:cd:16:43:11:7d:df:b5:e6:96:33:65:d1:cc:bb:74:
c7:ee:44:15:07:fa:a1:5e:17:df:2a:1a:f3:54:dd:9a:5d:a1:
cb:a2:a3:b2:da:73:81:cb:49:e0:e2:01:31:f1:9c:63:79:7d:
ef:35:89:dd:a4:82:e0:00:f7:2e:b2:0f:03:5d:25:cf:08:c6:
94:a9:03:97:7c:ab:bb:f1:e1:21:90:7a:59:00:09:f5:dc:c9:
ba:b7:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:47:29 2026 by rpki-client