
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json)
Hash identifier: F42w/0UJVOr/U6WS0DvCIWK2moOpqJMuI1XocrqoEL4=
Subject key identifier: 04:DC:DD:59:80:F4:8B:32:38:85:D0:E9:DD:62:86:D9:88:31:43:2D
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial: 1091
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
Manifest number: 1080
Signing time: Sat 28 Feb 2026 17:28:17 +0000
Manifest this update: Sat 28 Feb 2026 17:28:16 +0000
Manifest next update: Sat 07 Mar 2026 17:28:16 +0000
Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: I3ivTJEXP5opM6+/U87M9Vu5pDsMHnNrmW85lIHO0P8=)
2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: ucL3j8TnFmy+7V5qbIqZDaLy79WcFoXLeH1a5In6i8E=)
3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: fPoBgkYnMh4IMhrB/TA39+M1O1OAHZFrtUEJDkMooUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4241 (0x1091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Validity
Not Before: Feb 28 17:28:16 2026 GMT
Not After : Mar 7 17:28:16 2026 GMT
Subject: CN=69a325b1-48da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:a5:0c:17:fa:4b:c0:0e:7f:a2:df:2b:b6:
cf:6e:e9:1e:62:8a:44:30:cb:0a:b4:35:6f:86:cd:
17:46:07:a0:a0:4c:0f:b5:65:8c:8d:90:cf:d2:0a:
cd:8e:40:c9:70:60:10:5a:63:62:cb:d8:62:c5:d8:
e4:eb:4a:57:34:f8:a6:ce:8a:bc:b9:ac:d2:90:50:
b9:cd:8c:26:2b:c7:fd:80:0e:77:8c:81:ee:6a:e5:
7e:74:17:a5:c6:82:06:5a:ce:20:1b:b9:e8:16:f2:
ad:c2:b2:d1:6f:70:5e:4a:29:95:7d:a6:f9:77:48:
82:ba:5a:af:7d:9c:8b:fe:20:b6:0c:dd:f1:da:5d:
e5:ad:c4:cb:ca:d2:b2:a1:23:43:e8:31:a6:b2:3b:
19:26:e7:aa:3a:52:9a:f6:bd:99:6f:ab:69:3c:ed:
d9:6b:57:c6:7b:4f:14:67:0f:65:83:9d:76:ed:14:
75:29:91:e8:7b:37:4b:43:4f:8d:0d:a9:07:70:65:
e0:93:e2:d7:18:98:e7:45:b8:bc:6a:14:96:86:50:
8d:42:ae:76:d1:f3:dc:95:a0:a4:d7:91:fb:f9:96:
cb:1c:f7:e6:28:2b:7c:2e:15:5a:a4:e9:ee:4b:56:
9c:21:46:2a:6d:0a:c0:2c:e9:49:9d:40:af:6c:a4:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DC:DD:59:80:F4:8B:32:38:85:D0:E9:DD:62:86:D9:88:31:43:2D
X509v3 Authority Key Identifier:
keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:69:0d:fa:6a:4b:9a:f5:ef:1f:d0:f7:40:1b:31:48:6a:ce:
a8:22:b2:b5:c2:51:72:42:d4:09:31:c5:cd:0f:3c:a7:34:22:
78:66:b9:f3:1e:39:e4:d0:3c:30:c5:d0:7d:72:dd:36:a6:26:
92:43:9a:67:4c:ad:ec:49:aa:f6:43:0e:b4:8b:5f:4d:6d:59:
7a:dd:33:d2:5a:20:1a:74:38:22:93:ce:4a:33:45:85:57:67:
85:d0:20:58:17:4d:7f:92:2c:1f:7e:86:95:17:c8:2c:ee:77:
37:07:93:13:3a:8a:be:63:62:bb:ff:b3:31:3b:e6:97:e0:0f:
d1:f0:e3:24:d3:09:7f:4b:41:c1:50:51:ff:f5:e9:bc:8c:e8:
4b:35:6a:e4:52:a8:07:97:bc:9c:22:b6:58:77:d8:e0:58:8a:
b1:a1:40:ea:fe:88:a2:c9:da:dc:4b:66:fd:fb:01:4b:1e:6d:
1a:04:aa:80:07:35:0c:87:43:68:ad:0c:fc:5f:9d:5b:74:c9:
c2:69:65:1f:17:fa:ba:96:b4:73:1b:d2:21:3a:57:c3:9c:79:
8a:30:ad:4f:94:fe:7b:f5:2a:6f:2b:5e:96:c5:f5:48:54:79:
f4:14:f6:b1:92:7d:d3:4d:e8:96:55:0b:01:88:1b:7a:a7:b2:
7d:1a:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:13 2026 by rpki-client