
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier: JwXYqiiQ2ebsatUrok8sIdRNQqM6jKo6VKFAVc2FnMs=
Subject key identifier: 4B:32:3D:5E:B9:BA:B7:1C:E4:67:0A:B7:77:3C:A1:76:54:93:A9:39
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number: 0157
Signing time: Thu 05 Nov 2026 06:01:35 +0000
Manifest this update: Thu 05 Nov 2026 06:01:34 +0000
Manifest next update: Thu 12 Nov 2026 06:01:34 +0000
Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: AELABa7y9hnBD87FO6VQYEPqkVRUpj/sK9vtD5Tg1Jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 04:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Validity
Not Before: Nov 5 06:01:34 2026 GMT
Not After : Nov 12 06:01:34 2026 GMT
Subject: CN=6aec1bbf-22b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:98:08:b1:f9:a0:88:9b:ba:7f:27:dc:b2:
a7:dd:4f:38:a8:2d:78:91:bd:a6:bf:50:a2:18:50:
a8:b8:ce:a5:c7:b6:90:bb:1f:8c:27:b8:8b:0e:be:
af:4d:45:1b:44:8e:7c:dc:a3:d0:37:e4:1b:88:2d:
fb:e7:dc:ea:bd:51:ff:3a:05:43:94:6d:8e:a3:91:
dd:0b:c9:a3:87:ed:3d:33:52:bc:70:75:4c:da:7b:
14:58:0d:55:e7:bd:00:0c:d3:b9:4b:05:aa:5a:b8:
a5:02:8f:61:84:c8:4e:db:c7:09:2d:54:4c:cd:f2:
ad:fe:92:d5:77:c0:a1:66:a3:02:18:a8:c6:e3:5f:
4c:7d:c7:ba:d3:44:09:b6:cd:3e:1e:7a:64:cf:0a:
6d:ee:7e:18:fc:15:5b:31:76:5a:60:59:0d:a8:b2:
bf:3c:11:4b:43:fb:3a:c6:63:d7:ba:e4:28:80:bd:
c2:78:e6:d7:2c:ad:61:b3:e6:99:f1:bf:06:86:1f:
56:cd:b0:57:c9:ef:ca:76:b9:c1:80:a9:de:b5:76:
b6:25:aa:63:7a:1c:ee:d8:ec:09:36:03:f0:18:2f:
66:3e:79:ce:ba:ac:54:d5:ba:4d:fd:28:67:39:da:
95:04:00:dd:39:17:2c:6a:86:52:55:89:9e:0d:b6:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:3D:5E:B9:BA:B7:1C:E4:67:0A:B7:77:3C:A1:76:54:93:A9:39
X509v3 Authority Key Identifier:
keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:70:88:8e:ba:24:ce:9c:3e:18:df:ae:ee:78:d4:da:ec:75:
a0:3f:b5:17:36:2c:32:9c:24:fb:e9:29:85:4d:9b:1f:d5:fc:
f4:ff:f4:88:ec:42:41:78:14:d8:a6:79:41:88:f8:30:51:38:
6d:94:6c:f7:1e:ac:94:cd:3e:11:8c:ea:84:f8:37:9c:15:94:
63:d0:d8:30:99:96:65:e3:8e:30:fa:a4:14:30:ff:d4:42:09:
0d:7d:0d:ef:af:e0:ae:8b:7f:10:7d:76:de:6b:9e:62:6c:56:
19:09:18:83:e0:8b:ac:3a:9f:ef:54:e2:e0:bb:18:d8:8c:97:
ce:2d:ba:88:72:96:a4:88:9b:09:a1:6e:96:39:cf:67:7d:07:
15:8a:db:02:7a:0f:cc:c7:31:aa:b3:cd:91:51:85:e8:c2:1f:
bf:6a:84:c6:b4:5c:5b:8e:38:1f:d4:1c:0e:b4:c8:99:15:a7:
dd:62:4d:69:98:8c:92:7b:b6:e6:70:c3:7e:56:ce:cb:c8:a0:
b9:bf:0d:d6:41:5d:2f:0a:81:a0:b1:33:35:48:9b:f2:de:73:
c1:96:3e:4f:69:48:8a:58:e1:b8:7b:5a:c2:83:4e:5d:1c:be:
4e:86:90:f3:66:04:8e:f9:c5:75:a4:26:b4:59:23:3b:7c:45:
a8:56:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:09:15 2026 by rpki-client