
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier: m4Mxppe38Iz8y1XbFRnGQb52beSM6DTQNd+N0QiOCjc=
Subject key identifier: E3:3C:E2:E3:24:E4:49:B0:14:1F:2D:8F:77:B7:CD:50:03:CB:3C:B3
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number: 0114
Signing time: Tue 13 Oct 2026 06:38:50 +0000
Manifest this update: Tue 13 Oct 2026 06:38:50 +0000
Manifest next update: Tue 20 Oct 2026 06:38:50 +0000
Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: 9Wt8ymrzJlhaHLLdeCoBrfiQQup3Zbjw6hbi4gAgiqI=)
2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 06:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Validity
Not Before: Oct 13 06:38:50 2026 GMT
Not After : Oct 20 06:38:50 2026 GMT
Subject: CN=6acdd1fa-8e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:ff:82:1a:bb:8d:d9:df:47:0b:d5:a3:5c:
1b:71:40:59:41:e5:79:30:e0:ef:c3:57:04:94:55:
4f:07:9d:a9:58:1a:84:3d:48:b1:f3:05:b3:70:87:
40:47:1e:c4:bd:c3:35:82:17:d9:20:b5:d1:f4:70:
eb:dd:77:ba:7b:f8:4c:c2:60:58:96:d4:0a:c9:00:
49:55:3b:50:6d:ba:4d:0c:71:37:99:25:60:9c:f1:
74:81:62:bc:8a:21:9b:ee:3b:bc:92:93:e3:39:ad:
f8:74:40:3b:55:cd:93:76:36:2d:85:dd:6e:24:ac:
98:15:d6:16:33:29:61:46:4d:05:30:0e:09:d9:72:
50:52:fd:d9:7e:f0:5a:74:24:a3:91:69:78:8d:bc:
c6:cd:ca:df:58:1d:a4:6d:08:e5:ea:39:1d:6f:d2:
9c:d5:b9:54:9d:00:b7:08:78:36:b1:40:6f:97:cd:
d4:12:6a:c8:78:eb:f2:0c:03:c5:a7:6a:42:d4:2a:
52:8f:2a:6b:a1:f4:2b:7d:9d:11:eb:7d:b4:6b:fa:
68:4a:a4:50:dc:c1:7d:07:db:94:3a:5e:e4:d1:db:
08:b1:f5:3d:b9:7d:20:35:72:ee:0b:ef:a2:7e:5e:
12:66:eb:08:dc:1a:e0:61:ee:a3:fd:ea:b5:e0:7a:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3C:E2:E3:24:E4:49:B0:14:1F:2D:8F:77:B7:CD:50:03:CB:3C:B3
X509v3 Authority Key Identifier:
keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:01:d2:20:90:ea:14:93:67:16:a6:13:d4:b2:a4:23:31:e1:
cd:ae:e3:51:07:4b:24:c6:4d:ae:33:ae:43:59:95:3d:e0:67:
65:cc:06:9e:c4:e0:00:70:5c:1d:08:a0:49:e8:5e:a1:05:2e:
1d:b0:b3:00:c3:da:00:77:e2:9d:60:37:5b:3a:0d:95:95:cb:
c3:95:88:ca:62:e3:57:23:70:b1:32:7f:18:07:bf:31:ff:2a:
7f:7d:48:df:29:a1:ef:87:63:d2:84:98:c4:dd:9f:ef:ec:61:
9b:ee:d7:8d:8f:c1:97:26:59:48:a9:ad:fd:f1:78:11:a8:2c:
85:62:3b:dc:9b:6c:06:7c:e8:99:ba:9a:0c:77:77:d6:28:19:
a4:71:ef:78:1d:90:e9:00:b0:bb:11:1f:e7:7b:cf:35:04:e8:
82:67:75:5d:5c:eb:21:e7:de:f8:e9:58:44:9e:d6:4f:40:8f:
58:e0:99:7f:fb:50:e0:36:76:19:a0:14:2c:3f:fa:44:a1:5a:
07:06:90:12:cf:dd:0d:04:4b:3f:83:16:43:e4:1f:2d:96:7d:
c7:43:b3:f4:cf:9f:9f:bb:c1:f5:f9:36:9e:ec:05:23:fa:75:
a1:90:90:cf:48:6a:9d:ae:6f:ed:df:28:71:d4:64:ce:68:cb:
fc:d9:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:41:41 2026 by rpki-client