
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier: +Yvnpk661LJ0TG2UTL8TPHBTzDZrH8X6WOB/m4a2ii4=
Subject key identifier: B0:2D:AA:C9:51:AD:C9:84:5E:E1:65:57:C3:66:AD:F3:D9:98:C9:C1
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number: 0534
Signing time: Tue 06 Oct 2026 23:40:18 +0000
Manifest this update: Tue 06 Oct 2026 23:40:18 +0000
Manifest next update: Tue 13 Oct 2026 23:40:18 +0000
Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: 1ED18xuy6jrTjz/U1wymmK8uqrCDkJhIke6BykWq/58=)
2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: 5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Validity
Not Before: Oct 6 23:40:18 2026 GMT
Not After : Oct 13 23:40:18 2026 GMT
Subject: CN=6ac586e2-f7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:84:76:bf:2c:02:ef:78:b3:d9:fa:a8:d8:
67:44:36:29:3d:62:11:56:c9:e2:45:da:d8:a1:0f:
74:9b:e4:c1:c6:7b:ce:31:e9:ce:1a:4f:a2:15:ca:
bf:fa:d1:fd:f8:2c:1c:bd:f3:9f:70:ae:16:a5:23:
52:af:14:2c:c6:53:59:d7:dd:a6:5c:f3:95:12:e2:
4e:8c:7c:bc:1e:2e:88:7b:cc:fb:a9:ba:3e:c4:fe:
00:a4:75:92:2a:bc:fd:ae:55:cf:3a:85:e3:1f:e2:
a5:88:17:57:ee:aa:36:be:c3:1d:65:a0:a3:e4:e7:
18:27:e8:07:72:d1:a1:51:b5:04:36:c3:b3:73:8c:
3f:62:71:54:f7:01:1a:d4:8e:40:cf:f7:60:60:ff:
47:f3:16:bd:d4:9c:55:ea:7b:0b:79:f5:6f:39:b5:
54:79:83:b0:f6:3d:ab:18:93:91:df:54:a6:0c:17:
74:87:9d:41:51:cb:7a:c1:e5:a7:20:1f:b9:c1:d8:
1a:26:44:be:cc:d0:59:86:4e:f3:3c:e4:de:0b:6f:
d0:1b:cc:3c:a2:66:5d:3e:31:2a:29:cd:87:97:69:
cc:0c:df:91:a8:a0:68:9c:67:56:f4:7a:61:42:d1:
39:37:47:47:05:ff:d8:06:49:9c:b5:68:e0:f9:7b:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:AA:C9:51:AD:C9:84:5E:E1:65:57:C3:66:AD:F3:D9:98:C9:C1
X509v3 Authority Key Identifier:
keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:16:dc:70:95:59:69:1d:7b:b1:2e:a4:4e:68:ee:10:ea:
45:a5:d2:71:f1:7f:57:29:25:4c:89:0b:7b:84:b3:6f:0a:98:
ae:df:52:79:e9:4a:b1:56:98:81:51:39:ba:25:6b:3e:86:8d:
65:b3:a3:f7:19:b1:04:30:77:e3:04:e6:f2:86:15:9a:a1:59:
f9:90:51:67:5f:cc:0d:e3:e7:d8:2e:f7:ec:9d:5f:86:e5:0b:
b5:15:d8:7f:13:3a:2f:89:2b:ea:0f:bc:c1:43:23:85:24:6a:
5a:0c:e3:11:b5:c4:2e:e3:f1:cb:59:e7:84:69:a8:1b:de:3f:
2e:6b:3e:c8:dc:74:49:3d:37:68:4b:25:99:a7:00:56:e7:1d:
b8:84:52:04:6c:0c:de:60:9d:99:ef:5b:c8:da:52:45:d3:18:
84:db:a1:ad:d7:a5:38:74:5a:eb:e2:74:f2:3c:3d:a1:9a:cc:
e7:f9:38:32:03:fe:08:cf:d6:c1:61:db:1c:20:ed:a9:fe:ca:
51:6d:9e:c9:db:d4:43:70:3b:f6:68:a9:31:be:28:7e:5b:b8:
fa:1c:80:7b:74:9e:ca:62:56:61:c9:69:fa:22:14:4a:50:5b:
1d:7e:e6:e2:93:a2:68:22:94:6d:e2:7b:10:d5:c6:a3:82:cb:
eb:0b:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:02:29 2026 by rpki-client