
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File: KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier: P24giQzer9x/vSh2cXKo0uQj5PVNpNZrHuT4xRXdJpg=
Subject key identifier: 29:3C:D1:E5:A3:D7:30:51:D2:A4:A9:CD:8C:1F:45:7A:84:F7:9F:EA
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number: 01DA
Signing time: Fri 17 Apr 2026 03:17:06 +0000
Manifest this update: Fri 17 Apr 2026 03:17:05 +0000
Manifest next update: Fri 24 Apr 2026 03:17:05 +0000
Files and hashes: 1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: D3WzwrgAH+XZTikBQP5zkjZs+halhkd5fZg28FsfVhk=)
2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: JE3YkqQWW9mSMDDOp1/CYkJud9Wxp8btHEMRgajpDV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Validity
Not Before: Apr 17 03:17:05 2026 GMT
Not After : Apr 24 03:17:05 2026 GMT
Subject: CN=69e1a631-4392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:f0:70:62:e6:e9:1a:a6:4b:94:43:57:2c:
ba:05:13:c0:f4:15:14:1c:46:e4:59:19:2f:92:cd:
4d:c2:fe:2b:45:2a:6b:1e:ab:b0:2b:6a:af:ca:23:
f4:eb:77:93:18:92:e7:90:c4:92:f1:e1:6d:ec:de:
d6:83:c3:7b:5b:10:67:01:00:67:2b:42:80:78:28:
c2:05:45:e1:89:77:30:ac:5f:94:99:40:9d:3c:e7:
7f:e2:ae:43:65:77:dd:12:7d:19:f8:86:fe:b3:08:
cd:1f:91:48:41:55:a4:02:1b:9c:8e:ce:50:7e:c6:
cd:89:eb:ce:6a:54:d8:9f:71:68:a8:3f:d6:02:cb:
87:f7:1a:38:98:f2:ac:01:f5:77:42:2c:68:83:0f:
36:71:99:29:bc:38:1c:67:8a:02:88:4b:3e:ac:fd:
2a:f8:86:18:7a:ef:08:33:c6:f0:77:a4:04:04:62:
18:64:f1:49:ed:af:88:b1:a1:41:0b:b1:49:e2:2b:
62:84:c6:fd:1c:c4:0c:0b:3f:82:f5:f3:d8:ae:5a:
fb:4b:08:52:a1:cb:7c:34:8a:42:42:03:ca:ad:51:
f0:f9:85:f4:6f:f9:bf:86:b6:c9:30:b1:59:3d:29:
10:02:db:1b:14:62:bb:1a:1c:e3:ad:b0:1c:05:31:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3C:D1:E5:A3:D7:30:51:D2:A4:A9:CD:8C:1F:45:7A:84:F7:9F:EA
X509v3 Authority Key Identifier:
keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9d:d5:02:41:96:d1:2e:ca:01:15:03:e5:4b:a2:75:8f:84:
1a:ce:ce:c0:e1:01:95:ed:2a:8b:52:4d:11:41:05:1b:88:7d:
0f:61:8e:da:07:f6:b0:29:77:04:97:ff:cf:4e:a5:40:54:3d:
bf:3b:9f:e5:95:58:3a:4b:4f:5e:cc:97:54:f1:39:8c:58:3a:
f4:2e:1e:3f:d3:31:c4:88:01:eb:f8:af:64:53:52:4d:87:d4:
ab:6f:fe:9a:36:aa:e1:a9:9b:1a:25:97:95:ba:49:77:de:f7:
75:91:fc:ea:9f:d8:c2:d1:45:83:4f:4f:b1:c4:76:12:19:15:
b0:26:6e:d8:3d:eb:4d:c7:ea:3d:b3:0d:c5:d1:75:aa:68:df:
d6:00:dc:66:3a:00:38:e0:5b:53:b7:4a:6d:7b:c7:76:1e:4d:
8a:40:f5:fa:11:1a:9a:a8:6a:02:c4:2b:12:3b:13:c7:14:ce:
aa:fa:ab:7e:96:e7:22:0f:06:05:ca:ac:5a:2b:fe:33:c7:57:
36:35:1b:50:08:03:07:f0:cb:8b:87:ac:3a:db:2f:ac:9d:82:
ee:21:ad:5a:97:1a:82:ed:e8:ef:51:74:12:fe:c7:f1:c9:eb:
69:a9:84:01:83:d3:8c:1a:91:99:13:9b:c3:1a:f3:62:3e:4d:
bc:33:54:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4
QkQ2MThDNjkwHhcNMjYwNDE3MDMxNzA1WhcNMjYwNDI0MDMxNzA1WjAYMRYwFAYD
VQQDEw02OWUxYTYzMS00MzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA52vwcGLm6RqmS5RDVyy6BRPA9BUUHEbkWRkvks1Nwv4rRSprHquwK2qvyiP0
63eTGJLnkMSS8eFt7N7Wg8N7WxBnAQBnK0KAeCjCBUXhiXcwrF+UmUCdPOd/4q5D
ZXfdEn0Z+Ib+swjNH5FIQVWkAhucjs5QfsbNievOalTYn3FoqD/WAsuH9xo4mPKs
AfV3Qixogw82cZkpvDgcZ4oCiEs+rP0q+IYYeu8IM8bwd6QEBGIYZPFJ7a+IsaFB
C7FJ4itihMb9HMQMCz+C9fPYrlr7SwhSoct8NIpCQgPKrVHw+YX0b/m/hrbJMLFZ
PSkQAtsbFGK7GhzjrbAcBTG3OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCk80eWj
1zBR0qSpzYwfRXqE95/qMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB
NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MENBRS83QzY0NEVFNjZBNzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3Zi
dXItM3EybGZoWW1MMWhqR2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApp3VAkGW0S7KARUD5UuidY+EGs7OwOEBle0qi1JNEUEFG4h9D2GO2gf2sCl3
BJf/z06lQFQ9vzuf5ZVYOktPXsyXVPE5jFg69C4eP9MxxIgB6/ivZFNSTYfUq2/+
mjaq4ambGiWXlbpJd973dZH86p/YwtFFg09PscR2EhkVsCZu2D3rTcfqPbMNxdF1
qmjf1gDcZjoAOOBbU7dKbXvHdh5NikD1+hEamqhqAsQrEjsTxxTOqvqrfpbnIg8G
BcqsWiv+M8dXNjUbUAgDB/DLi4esOtsvrJ2C7iGtWpcagu3o71F0Ev7H8cnraamE
AYPTjBqRmRObwxrzYj5NvDNUqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:25 2026 by rpki-client