
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier: t1nyT/bw1yjf3OQ+2fIkM5tYdcdImQE8GtLMg6U5oFE=
Subject key identifier: AF:D2:58:B2:2E:5B:0E:DD:27:5A:49:C2:14:81:03:50:F1:E7:5C:5E
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number: D8
Signing time: Sun 01 Mar 2026 07:48:21 +0000
Manifest this update: Sun 01 Mar 2026 07:48:20 +0000
Manifest next update: Sun 08 Mar 2026 07:48:20 +0000
Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: eyPSzaBz8BKUFgKzFLK8Lnz82fSxFrXliR8wzJVDs7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Validity
Not Before: Mar 1 07:48:20 2026 GMT
Not After : Mar 8 07:48:20 2026 GMT
Subject: CN=69a3ef44-0d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:59:82:e7:73:d7:70:3f:29:ca:91:68:69:
d4:ce:c9:fa:ec:94:1c:7a:ba:d7:88:3d:da:c8:28:
fd:76:77:bf:da:b0:36:e5:ec:2f:95:e8:6d:a2:39:
e7:39:81:5a:a0:7d:be:04:ad:56:34:68:5a:b5:fa:
9e:88:3b:ca:a9:12:04:e4:fe:e0:f0:d3:c6:1a:dd:
d6:11:c5:bd:84:1d:ab:e4:b4:e9:7c:ff:85:13:fb:
97:b8:75:d8:12:64:92:44:50:31:46:00:a4:a0:ff:
f7:98:93:52:c6:58:d3:93:db:08:3a:a8:26:ff:34:
09:52:9d:e9:77:fa:b4:77:07:ba:93:44:cf:bf:84:
7a:58:3f:9b:68:0e:db:a3:da:ec:59:d6:73:71:c1:
80:b8:6b:6a:43:f6:a6:d9:62:28:42:4f:48:d7:44:
f8:fa:21:e1:6f:b8:8e:8f:c3:12:69:4d:89:26:14:
fc:47:87:87:8b:ca:46:05:51:43:29:e1:a1:a3:21:
1d:5f:b9:8a:22:68:15:a3:27:9a:f0:13:51:29:ff:
a3:a1:70:2d:66:97:35:b6:a7:06:d0:7c:09:33:2f:
e0:42:5c:8b:bb:d2:f9:34:bc:61:2d:ed:6d:e9:4f:
39:6b:48:c2:61:4a:6e:ee:50:5e:c3:96:3b:5f:62:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D2:58:B2:2E:5B:0E:DD:27:5A:49:C2:14:81:03:50:F1:E7:5C:5E
X509v3 Authority Key Identifier:
keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:d4:d3:0b:74:69:7d:8e:ea:f4:37:ad:55:9e:da:c1:b5:f2:
cc:5a:7c:6f:5a:28:49:a3:cd:d2:38:ea:cb:10:a0:c2:25:ca:
ed:9e:9b:85:53:d1:5a:fc:01:c3:46:fd:c4:e9:b0:96:b7:27:
ed:2a:12:57:98:dc:1f:9c:6c:1d:80:28:f7:35:1d:5a:41:13:
ec:5c:81:0e:d2:02:a1:85:c6:3e:b4:7e:c2:24:42:4a:3f:ba:
0e:41:74:cf:5c:82:02:c6:3f:75:2f:4f:5a:f5:a1:f4:b3:a5:
27:b1:1a:fc:99:4b:7e:01:2a:b0:69:1f:4a:01:e5:54:7a:f9:
86:4d:94:69:1e:b2:f1:6d:3e:b8:23:bf:29:a9:ec:20:27:ff:
25:91:32:6d:c7:e2:de:1a:a9:1a:a6:bf:b2:56:e9:4a:00:e0:
de:95:d5:16:7b:8d:5e:06:4b:8d:4c:90:ef:42:a9:70:d4:3b:
d7:4b:62:88:c0:83:14:55:09:21:eb:54:34:66:fb:d9:11:31:
da:3b:51:1c:7c:c8:ab:55:39:45:c8:05:5c:08:8a:fd:da:6a:
e0:6d:df:44:2e:c2:15:75:12:c1:55:3d:6b:1f:c3:79:6c:9d:
3b:81:8a:e0:9b:1a:65:64:3a:8d:25:40:f9:58:5f:3e:3f:be:
77:6b:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:41 2026 by rpki-client