
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier: du9Tc/Hi+OPZcoYEKfuqPNzzaoY4KZRTEwz9VG4ubuo=
Subject key identifier: B3:8D:70:E0:14:DE:58:CD:F2:7F:A3:53:D1:7A:4E:4C:03:E4:DE:A0
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 038E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number: 0386
Signing time: Mon 02 Mar 2026 03:13:37 +0000
Manifest this update: Mon 02 Mar 2026 03:13:35 +0000
Manifest next update: Mon 09 Mar 2026 03:13:35 +0000
Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: D7pf+y1n7AtDoLEG/bS2Q+2+RtEfQyE6XU/9M6yX49s=)
2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: AZzmhb9FVZ6sVPePFzPP6WjiosliqMZXkIcAJw0H7ng=)
3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: MXOW6q55eZKyv8hf3L3veKqAyv+lJXJJZ7u7OMt1z00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Validity
Not Before: Mar 2 03:13:35 2026 GMT
Not After : Mar 9 03:13:35 2026 GMT
Subject: CN=69a50061-0513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:88:f3:4e:fd:6c:69:4e:9e:19:dd:4d:05:
8b:0d:28:99:cf:2a:18:79:56:62:28:2e:ae:a2:e3:
3b:29:10:ad:fd:62:96:5c:e1:3a:c3:99:b3:a3:3d:
ce:84:ec:e0:e6:33:16:81:90:4e:10:3e:e4:b4:b5:
e2:e6:9d:97:6e:c3:e5:9f:aa:da:1e:f1:2a:04:43:
4f:87:b1:4d:bb:17:16:91:79:63:ba:cd:b8:39:5b:
f2:8a:c8:f1:d0:4e:d0:9b:cc:7f:bb:45:af:c6:e3:
e6:2b:88:49:1b:96:bc:0b:11:15:a0:44:5d:c6:55:
2f:79:6c:e6:32:28:6d:f3:cd:4b:22:ef:31:0a:7b:
c9:f1:3f:a4:0a:ac:7b:88:32:36:d4:71:b0:d9:69:
03:9b:c8:5f:9b:25:e6:da:66:94:52:e8:e7:0d:69:
9b:da:68:c4:cf:d3:fc:41:bb:aa:4d:24:f8:26:44:
14:85:d2:6d:d2:d7:69:d6:5f:dc:f5:49:94:76:04:
04:80:9e:7e:97:61:8b:e1:25:d4:44:74:99:21:8f:
58:e3:48:7a:c1:fe:38:ea:d9:c7:25:21:4b:a6:2f:
41:a4:41:cb:cf:97:a5:ec:d7:91:f1:5d:b7:5a:a6:
69:04:d1:f9:ac:5f:a6:27:39:9b:34:f9:26:c8:5c:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:70:E0:14:DE:58:CD:F2:7F:A3:53:D1:7A:4E:4C:03:E4:DE:A0
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ef:e2:48:f2:e1:bc:0b:53:19:f1:5c:1e:73:6b:e7:7d:01:
1f:44:86:c1:23:fe:38:2d:72:7e:ea:f4:cb:3d:13:b9:fe:a6:
15:5c:79:9e:93:d9:6c:d4:45:43:21:3f:c6:72:78:1d:be:4b:
f8:a7:39:dc:e1:da:65:65:12:06:57:7e:5f:6a:74:f5:1c:5a:
4f:57:6e:52:fc:b6:e0:81:c0:13:49:6f:8a:2c:f1:c8:83:58:
13:25:f7:d1:f0:36:3b:ed:85:c2:07:b0:90:4e:b1:c6:25:9a:
88:69:dd:4e:7c:72:e5:ab:fa:b2:48:a4:8f:cc:70:51:a5:31:
e6:99:56:c4:15:da:7a:a1:23:d7:cf:cc:7d:7a:af:53:4a:0a:
e3:78:e4:90:ac:5d:0f:94:7a:e4:f3:29:ac:d0:f7:a2:be:0e:
69:2e:31:45:c3:d5:47:3a:11:cb:e8:95:82:f5:12:41:90:d6:
3e:14:70:4e:15:3b:e7:91:67:51:0c:e5:32:45:29:c5:d3:58:
c3:9c:53:3a:d6:75:9e:2d:5d:1e:51:45:c6:0f:96:9f:04:b8:
d0:3a:9e:45:55:67:bd:6a:15:93:5a:f1:ff:08:74:5f:3c:d6:
99:bb:3b:8a:cb:64:9d:60:9d:e2:90:0b:89:23:80:dd:67:07:
d7:fd:24:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC
MURERDg5OEQwHhcNMjYwMzAyMDMxMzM1WhcNMjYwMzA5MDMxMzM1WjAYMRYwFAYD
VQQDEw02OWE1MDA2MS0wNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0MCI8079bGlOnhndTQWLDSiZzyoYeVZiKC6uouM7KRCt/WKWXOE6w5mzoz3O
hOzg5jMWgZBOED7ktLXi5p2XbsPln6raHvEqBENPh7FNuxcWkXljus24OVvyisjx
0E7Qm8x/u0WvxuPmK4hJG5a8CxEVoERdxlUveWzmMiht881LIu8xCnvJ8T+kCqx7
iDI21HGw2WkDm8hfmyXm2maUUujnDWmb2mjEz9P8QbuqTST4JkQUhdJt0tdp1l/c
9UmUdgQEgJ5+l2GL4SXURHSZIY9Y40h6wf446tnHJSFLpi9BpEHLz5el7NeR8V23
WqZpBNH5rF+mJzmbNPkmyFzZrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLONcOAU
3ljN8n+jU9F6TkwD5N6gMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB
REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ
Yml4N3V5MklxNjJ4M2RpWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFe/iSPLhvAtTGfFcHnNr530BH0SGwSP+OC1yfur0yz0Tuf6mFVx5npPZbNRF
QyE/xnJ4Hb5L+Kc53OHaZWUSBld+X2p09RxaT1duUvy24IHAE0lviizxyINYEyX3
0fA2O+2FwgewkE6xxiWaiGndTnxy5av6skikj8xwUaUx5plWxBXaeqEj18/MfXqv
U0oK43jkkKxdD5R65PMprND3or4OaS4xRcPVRzoRy+iVgvUSQZDWPhRwThU755Fn
UQzlMkUpxdNYw5xTOtZ1ni1dHlFFxg+WnwS40DqeRVVnvWoVk1rx/wh0XzzWmbs7
istknWCd4pALiSOA3WcH1/0kng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:48 2026 by rpki-client