
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json)
Hash identifier: yrUttRW45lhxhK5qtBlGJ+c3PTKJ4HS8vlacm+u4vRI=
Subject key identifier: F1:A3:66:23:8B:53:84:F1:94:86:15:0E:F6:A5:AB:C7:8F:B6:B0:6B
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial: 10E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
Manifest number: 10D0
Signing time: Tue 28 Jul 2026 17:25:05 +0000
Manifest this update: Tue 28 Jul 2026 17:25:04 +0000
Manifest next update: Tue 04 Aug 2026 17:25:04 +0000
Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: fcDIpBrKQqcw4y4oRqGGwcEh+ps0W1mfU8Ylt/wfv7k=)
2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: vMIdusdjtj9hlcGq2gI+hsj/mLp2lRpI2Yrz/QIdsz8=)
3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: xjuxHTm+G9he/JFBNF/J7ScezC0X5PCaznrRtGeATtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4325 (0x10e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Validity
Not Before: Jul 28 17:25:04 2026 GMT
Not After : Aug 4 17:25:04 2026 GMT
Subject: CN=6a68e5f1-da22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:b1:00:40:22:37:b4:f7:f1:37:2f:0a:a1:
79:06:22:bb:68:b2:68:ba:56:73:79:38:9e:d6:50:
83:5a:f0:b5:77:a5:f6:61:da:b5:3a:d4:96:50:f8:
5e:27:63:71:a7:54:2a:a1:8a:95:0b:ee:0a:58:69:
b7:24:04:23:69:d4:aa:8e:9e:ac:0b:f9:1f:0c:42:
a1:22:85:75:be:3b:0b:fc:f6:15:47:de:53:09:df:
35:85:62:9a:d4:94:22:ac:da:70:08:1c:f8:5c:3b:
cc:88:a1:01:41:b8:71:64:16:f4:94:36:4b:fb:cd:
fe:56:3f:23:c1:42:fc:f7:96:38:d0:b7:44:f2:af:
37:5f:95:f0:9f:b7:72:b9:e4:c6:72:d9:40:9b:e4:
93:88:20:65:4b:f9:a9:66:46:42:85:b4:ac:24:aa:
25:3c:fc:16:75:98:71:19:83:82:a0:53:3e:ff:4b:
83:3b:5f:ad:89:21:41:e2:28:4c:f8:7c:8a:f1:49:
a6:90:83:e9:f2:3f:79:55:39:78:67:18:dc:55:36:
ba:fc:d0:ee:87:ba:6f:7e:58:27:76:fc:93:65:1d:
77:1e:04:a1:02:1b:d2:0c:fc:a3:c7:4d:6c:c6:ae:
81:ef:66:3a:b3:7d:60:95:82:15:d0:94:e6:ad:ec:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:66:23:8B:53:84:F1:94:86:15:0E:F6:A5:AB:C7:8F:B6:B0:6B
X509v3 Authority Key Identifier:
keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:ad:df:c8:26:7d:50:09:29:af:8e:52:f0:50:15:06:0d:
f7:51:2d:45:b7:40:a0:fe:72:d0:17:2d:55:00:58:5d:70:e5:
93:93:5b:99:ca:06:96:22:e4:7e:95:ab:18:0f:9e:dc:87:40:
5b:dd:d5:26:7a:f0:23:51:24:6f:53:e2:bf:74:14:31:fb:39:
44:68:00:bb:98:1d:e5:57:b5:f8:4d:b2:d3:89:12:46:3c:69:
3c:4f:c9:7b:92:69:bc:bd:d2:87:79:a9:28:10:6e:e8:67:82:
cd:71:12:67:5a:e8:82:94:b3:a7:07:d6:2b:a2:b1:95:bd:96:
20:12:a6:b4:62:5d:da:2d:c7:78:3b:cd:21:7f:ca:5c:73:b1:
fb:29:f3:bd:08:76:63:e5:a7:64:7e:1c:90:d9:b6:83:7a:56:
e8:5d:b1:ac:de:b2:b6:b7:64:59:a6:a4:14:c5:20:38:b7:b6:
6d:38:61:29:b6:cb:6e:c0:18:4d:79:a7:f6:f0:0e:8d:fe:ff:
1e:ba:da:56:13:95:53:85:14:a9:8d:09:b6:d6:6a:44:a7:8c:
ec:a4:dd:33:5a:6c:43:72:60:d3:e8:e1:de:45:b7:16:37:c8:
ce:86:42:3a:29:79:78:b7:19:cc:bf:a6:27:a6:c3:3b:91:4c:
5a:a7:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:34:43 2026 by rpki-client