
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier: ttyifty9coa8zDkicx6oYRrTamEr5dxvR6F9uKViENI=
Subject key identifier: 85:A8:97:E3:69:19:D5:E1:AC:36:B8:6D:6C:A3:EA:6D:18:4E:8F:22
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number: ED
Signing time: Wed 29 Jul 2026 07:50:17 +0000
Manifest this update: Wed 29 Jul 2026 07:50:17 +0000
Manifest next update: Wed 05 Aug 2026 07:50:17 +0000
Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: ODjmC+vTeSa/KEu8PgGPbkTwPnu9WdWIH2IO6DVG+d4=)
2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Validity
Not Before: Jul 29 07:50:17 2026 GMT
Not After : Aug 5 07:50:17 2026 GMT
Subject: CN=6a69b0b9-3654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:be:3a:e4:7b:ec:b0:5a:76:06:e9:d6:14:
24:7f:a7:03:3a:b9:e0:37:cb:e1:fd:f1:c7:55:3c:
7e:36:51:ef:fb:f2:42:2b:54:6b:3d:12:6d:36:a7:
f8:c4:de:5f:cd:7d:c7:fc:54:e9:8b:37:f5:50:d9:
08:08:90:60:ad:87:f2:e0:fc:e0:3a:e9:36:39:6d:
6c:1b:9d:34:a8:71:90:85:76:73:21:92:39:7a:49:
f8:4f:2e:f3:3a:db:46:11:f5:cd:5e:47:a3:2f:d0:
c5:c5:b6:1b:bc:b6:67:ac:3a:0b:b2:72:05:b2:f4:
94:05:3d:14:7d:cc:86:87:cb:b2:61:12:a9:69:4f:
28:3b:31:36:9f:63:24:9c:f4:3e:f0:46:b2:ec:ae:
45:40:c1:b1:a8:11:b8:60:b6:ad:7a:2a:4d:e8:97:
f2:6f:86:1c:f7:5e:2c:5c:ed:18:0f:df:dc:ef:f9:
75:b8:80:d3:e1:bb:5e:a1:36:5d:dd:d6:a9:88:01:
f8:68:69:3b:2c:ed:24:13:8d:2c:0c:e3:7d:ab:9b:
03:76:28:20:e6:00:23:51:e7:d8:46:43:e3:2b:48:
dc:bf:64:f5:41:39:ca:65:4f:70:57:e9:94:7d:63:
a5:9b:85:b6:61:9b:49:08:01:92:e3:db:99:54:d7:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:97:E3:69:19:D5:E1:AC:36:B8:6D:6C:A3:EA:6D:18:4E:8F:22
X509v3 Authority Key Identifier:
keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:89:aa:14:ce:cf:cd:77:ee:d9:c5:a1:f8:04:ed:23:de:
66:89:aa:38:94:53:c5:9f:30:33:27:0d:ad:7e:20:54:4b:40:
06:23:4b:12:b4:ce:f5:d5:bb:d7:7c:e5:f1:28:09:4b:d0:12:
24:01:d9:1a:71:f0:11:f4:ed:1c:7b:95:a9:2f:ef:2b:bf:61:
cd:81:9d:6c:6a:ef:1d:1b:f0:ea:94:4d:b3:a8:2f:db:10:d8:
10:cc:a7:f8:fc:b9:ba:a3:c5:d4:69:30:32:41:84:54:6b:f7:
f1:a2:1b:6b:e0:65:37:2b:7e:be:e0:3a:b6:2f:c9:9f:16:d3:
38:e8:80:41:20:a3:82:37:08:20:02:82:f8:5e:77:02:17:1c:
41:b0:58:91:b1:dc:ea:9a:c9:4b:3a:a3:e3:f6:43:d3:93:c1:
e3:94:79:03:31:0b:74:73:41:8f:1e:16:e2:16:5c:11:aa:13:
ad:a6:5b:f1:a6:8d:49:d2:65:e1:a3:04:88:33:ab:6b:df:e3:
fe:45:14:50:86:11:36:d7:ea:7a:1a:89:47:3d:ed:f5:ba:6d:
17:3a:b2:6b:e9:23:48:f8:11:d7:98:28:a2:b9:26:4c:e7:f7:
60:a7:a5:70:86:d4:d6:76:6f:5d:dd:5a:2a:ef:ba:e2:31:cd:
37:77:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:58 2026 by rpki-client