
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier: D5NdfSy5cdS/NYYRsTMvp4vVLWpFybPJ48tp8rm2IK0=
Subject key identifier: F0:3D:60:B3:3B:15:A0:27:0D:5A:DC:36:C4:65:28:C6:2B:31:92:5C
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number: A2
Signing time: Mon 02 Mar 2026 03:12:13 +0000
Manifest this update: Mon 02 Mar 2026 03:12:11 +0000
Manifest next update: Mon 09 Mar 2026 03:12:11 +0000
Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: 9xGiJ/Qarb6WYEa0SXfTE/DxkDaSebSYYGZetI5QPrA=)
2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Validity
Not Before: Mar 2 03:12:11 2026 GMT
Not After : Mar 9 03:12:11 2026 GMT
Subject: CN=69a5000c-8812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:f9:f4:f4:14:b7:c5:32:fc:8a:4d:b4:18:
d2:3f:e2:9c:28:e7:60:c1:95:b1:a4:9f:0f:6e:ee:
0a:1d:21:0d:84:c9:1c:e2:95:03:4d:c0:60:44:83:
cc:7b:fe:cf:54:81:82:26:5a:11:97:ee:4b:1f:56:
23:94:d1:a4:00:55:0e:e9:20:d3:a8:ae:83:ae:61:
de:f4:d9:33:5c:57:8b:a0:9d:23:eb:dd:cf:a5:99:
7a:c0:e5:ae:4e:e8:3d:00:c6:c5:2c:2f:e3:52:f6:
4f:0a:cd:57:e0:a4:ae:8c:5a:ab:54:c9:1c:ae:c5:
54:2b:b0:24:76:9b:c6:92:58:61:4e:f2:02:b7:98:
17:a4:9e:94:c5:9a:a5:da:c7:64:8b:70:a5:b8:ea:
35:18:a3:61:dc:00:c4:15:ee:a4:62:19:05:8b:7a:
9e:20:b3:71:31:23:2e:a1:ba:2c:80:fe:5b:39:dd:
67:fe:8b:15:73:a4:ba:54:e9:be:90:25:b1:b9:05:
b8:92:99:3e:b8:dd:dc:e6:c8:31:18:88:7a:de:cf:
d9:1e:06:11:45:21:dc:9f:6b:bc:11:89:b2:68:4c:
42:be:2a:c3:d6:58:d8:43:42:9b:e4:36:58:2f:8c:
05:3d:ea:aa:af:ec:d1:f0:e5:cc:a4:4b:49:79:da:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3D:60:B3:3B:15:A0:27:0D:5A:DC:36:C4:65:28:C6:2B:31:92:5C
X509v3 Authority Key Identifier:
keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:fc:c0:79:6a:c0:59:bb:e6:b4:45:8d:b1:cc:c5:1f:ab:
e3:e3:38:34:90:15:49:8d:dc:8d:ea:4a:e5:23:0c:1f:8a:21:
a5:96:d3:43:32:8d:91:0d:d0:3d:99:37:c1:4c:5e:a1:9a:3d:
5c:58:0d:ed:3b:74:53:04:a2:58:e7:6a:b4:3f:02:65:80:de:
db:df:9c:61:35:1a:62:54:9c:c3:f1:ec:bc:cd:60:1f:10:d6:
dd:ed:e7:3f:79:6d:b4:de:7c:46:84:93:68:97:4a:b9:4a:cd:
16:ee:6f:f5:a2:7f:16:54:4f:9a:49:25:22:95:05:f7:64:9e:
42:a0:4b:99:e7:40:68:a9:84:ac:9e:99:7f:24:b0:ea:a2:76:
5b:f7:40:cf:16:6f:ca:f5:ad:48:8d:59:50:93:20:c4:44:a9:
09:05:28:46:6d:98:fd:f3:1a:85:d9:5a:2e:f8:9b:9b:27:83:
c0:d6:ee:32:bd:09:08:fe:48:d2:61:b1:da:00:b5:bb:b3:aa:
04:fe:f3:ca:81:2b:70:f9:54:12:17:27:8b:b6:33:aa:99:cf:
28:6e:57:da:60:a0:58:72:0f:9c:52:a8:98:ad:b8:6b:a5:4d:
98:e4:ef:88:89:a6:79:af:ff:65:06:fb:94:85:0d:31:bc:bb:
a9:87:ce:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZCNEIxMTAvBgNVBAUTKDJBMDBGRDVENUVBRUY4MUYzMkIwMEIyRTVDODJDNUVD
REFDMTI2OTMwHhcNMjYwMzAyMDMxMjExWhcNMjYwMzA5MDMxMjExWjAYMRYwFAYD
VQQDEw02OWE1MDAwYy04ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjIT59PQUt8Uy/IpNtBjSP+KcKOdgwZWxpJ8Pbu4KHSENhMkc4pUDTcBgRIPM
e/7PVIGCJloRl+5LH1YjlNGkAFUO6SDTqK6DrmHe9NkzXFeLoJ0j693PpZl6wOWu
Tug9AMbFLC/jUvZPCs1X4KSujFqrVMkcrsVUK7AkdpvGklhhTvICt5gXpJ6UxZql
2sdki3CluOo1GKNh3ADEFe6kYhkFi3qeILNxMSMuobosgP5bOd1n/osVc6S6VOm+
kCWxuQW4kpk+uN3c5sgxGIh63s/ZHgYRRSHcn2u8EYmyaExCvirD1ljYQ0Kb5DZY
L4wFPeqqr+zR8OXMpEtJedpy5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPA9YLM7
FaAnDVrcNsRlKMYrMZJcMB8GA1UdIwQYMBaAFCoA/V1ervgfMrALLlyCxezawSaT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkI0Qi9CQjQyQzFERTI0
QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9LZ0Q5WFY2dS1COHlzQXN1WElMRjdOckJK
cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkI0Qi9CQjQyQzFERTI0QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9LZ0Q5WFY2dS1C
OHlzQXN1WElMRjdOckJKcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOrL8wHlqwFm75rRFjbHMxR+r4+M4NJAVSY3cjepK5SMMH4ohpZbTQzKNkQ3Q
PZk3wUxeoZo9XFgN7Tt0UwSiWOdqtD8CZYDe29+cYTUaYlScw/HsvM1gHxDW3e3n
P3lttN58RoSTaJdKuUrNFu5v9aJ/FlRPmkklIpUF92SeQqBLmedAaKmErJ6ZfySw
6qJ2W/dAzxZvyvWtSI1ZUJMgxESpCQUoRm2Y/fMahdlaLvibmyeDwNbuMr0JCP5I
0mGx2gC1u7OqBP7zyoErcPlUEhcni7YzqpnPKG5X2mCgWHIPnFKomK24a6VNmOTv
iImmea//ZQb7lIUNMby7qYfOmA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:40 2026 by rpki-client