
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier: T2HUu3J8DOgsmZsHLgu9iXLYM0hdrzmh5RUVEGzTiQM=
Subject key identifier: DF:BC:EC:09:B5:72:4E:94:59:6D:74:9D:5F:1A:36:D0:D4:56:03:2D
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number: 04DC
Signing time: Thu 16 Apr 2026 23:44:12 +0000
Manifest this update: Thu 16 Apr 2026 23:44:12 +0000
Manifest next update: Thu 23 Apr 2026 23:44:12 +0000
Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: UnysslKXhOOVy6bF4ieDtfi7LTS215s5ol89OyryE2M=)
2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: 5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Validity
Not Before: Apr 16 23:44:12 2026 GMT
Not After : Apr 23 23:44:12 2026 GMT
Subject: CN=69e1744c-0dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:cb:0a:ba:19:e1:73:dc:6c:59:43:fa:d3:
e7:21:b9:46:de:ab:10:c9:b8:9b:8c:aa:17:fd:73:
00:51:e2:23:3b:d7:ed:45:3e:5c:4a:44:9b:30:c7:
23:bc:7a:07:0f:59:f8:4e:84:84:21:ba:30:b0:05:
9c:2a:4f:a5:8a:ec:d4:ff:99:3e:51:ad:eb:d8:dc:
13:8b:0d:36:cf:a9:32:0c:e2:ea:eb:4d:fc:c2:58:
10:9c:93:96:6a:87:8e:62:a7:5a:10:c9:c6:8f:71:
40:fa:10:d8:7c:a3:2a:46:b9:66:db:d2:ef:9a:3a:
c7:a4:4f:fa:01:da:24:2e:f4:a2:0b:3a:33:1b:4e:
83:84:d9:de:b0:b6:3d:35:47:b8:80:fb:dc:51:21:
1d:5e:4a:23:80:45:75:26:00:74:b2:24:a2:5f:2e:
61:be:53:8c:7a:e9:7c:75:90:7f:63:d3:54:11:46:
94:6f:06:75:3e:b0:ac:65:a6:4a:c2:66:fa:04:c3:
69:28:25:47:f3:04:6d:ef:d7:f2:ea:f1:45:9d:ba:
cc:39:d1:e9:f8:0e:42:b6:9a:df:fe:cb:ec:f4:e9:
09:ec:89:4a:10:3f:07:e5:3f:80:14:3d:bb:cb:83:
2e:ef:82:28:8b:a6:3f:28:8b:9e:4a:ab:40:a6:00:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:EC:09:B5:72:4E:94:59:6D:74:9D:5F:1A:36:D0:D4:56:03:2D
X509v3 Authority Key Identifier:
keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:86:29:f2:d7:09:89:10:68:29:3b:42:12:55:bf:f3:28:87:
bf:6a:ff:c1:65:f0:57:ff:bc:02:50:8b:e8:77:53:14:d9:9a:
65:55:ba:b1:73:b6:19:89:e0:a3:5e:bc:ac:d5:57:ac:de:26:
9a:04:4b:0d:1d:5b:c0:9f:c9:59:6d:bf:84:fc:4f:44:b5:aa:
30:52:ea:9f:78:2c:6d:4b:51:5b:d7:0c:3b:72:dc:47:87:a5:
75:eb:c5:88:26:f2:dd:1f:7a:00:37:7c:7d:be:f0:e0:44:99:
27:63:68:6c:c2:b4:47:a1:02:7b:ec:e2:5f:e3:cf:eb:80:4f:
b2:d7:78:42:3f:ce:89:f3:dc:c9:4c:3c:37:8d:1b:6b:c8:1d:
11:85:0a:b1:c7:47:74:a8:f5:31:70:5e:a8:0e:eb:54:eb:fc:
af:cd:87:9d:26:16:94:eb:d3:51:e1:cb:35:3f:81:a1:12:51:
c3:8e:88:d4:d4:f8:b6:ea:cc:15:22:85:da:86:97:41:76:ad:
54:f3:6d:d9:0e:17:4f:67:48:a9:13:79:2c:94:b7:17:c0:a7:
79:14:91:f1:52:c8:dc:57:6a:9b:fd:e9:67:11:d3:c1:32:07:
84:d7:63:ca:77:78:6e:3a:0f:1d:65:d8:92:03:04:15:37:f3:
21:65:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:10 2026 by rpki-client