
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json)
Hash identifier: gxxKXgVrgQJvjnKeHdZZV9q99h5rAda6M62uIlRY1VY=
Subject key identifier: C1:0E:3D:A6:52:53:C1:73:AE:F0:F1:46:B0:01:ED:63:E6:E0:5E:5D
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial: 1139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
Manifest number: 112F
Signing time: Tue 28 Jul 2026 17:20:45 +0000
Manifest this update: Tue 28 Jul 2026 17:20:44 +0000
Manifest next update: Tue 04 Aug 2026 17:20:44 +0000
Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: 4meeQ/zFJ2m5gqXyXljU5CCx+L7GPSwFFHiFeWZGZ9c=)
2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: 4agi+QhWWtUPKmH1/dW+seJgI+qk+4RdSuU9ar5oRKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4409 (0x1139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Validity
Not Before: Jul 28 17:20:44 2026 GMT
Not After : Aug 4 17:20:44 2026 GMT
Subject: CN=6a68e4ed-a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:b4:b6:4d:86:3b:de:12:4b:25:0b:10:68:
35:14:3f:5b:d2:9d:aa:c7:6b:17:3a:1d:60:19:1b:
f3:aa:5f:1e:f4:c5:e7:d6:eb:88:1c:dc:b2:b3:2a:
20:82:37:89:07:2a:9d:82:a9:be:6b:6b:dc:ed:9d:
08:47:b0:5a:98:26:af:32:11:42:07:9c:aa:31:81:
15:40:50:72:ae:40:06:56:82:30:37:91:2a:46:44:
61:3d:bf:a8:3a:95:b4:21:3c:a5:18:82:61:1a:10:
b2:c8:0f:f1:55:30:c8:0a:f8:21:89:b8:88:03:f6:
62:6d:1f:5c:d5:c0:89:e1:a8:54:a4:87:60:2c:cd:
39:dc:46:8e:36:7e:6c:ef:2c:0f:1c:b8:ba:05:8f:
eb:31:f1:ee:7f:7e:bb:68:1a:32:4f:9d:63:a4:91:
d3:ca:77:33:2c:e0:6a:d8:bc:98:8b:cf:db:fe:ce:
f8:49:44:54:69:05:b0:bb:6b:80:4b:ba:59:6d:86:
7b:7b:66:c0:26:3b:da:73:68:d9:82:14:aa:ad:ab:
cd:ea:e6:89:f0:74:24:a5:fd:b7:0e:c8:35:c4:63:
8e:35:3b:56:37:2b:2e:3e:c5:f3:57:18:ca:44:4e:
3f:83:ed:ea:9c:88:cd:65:43:e0:22:82:f3:40:4e:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:3D:A6:52:53:C1:73:AE:F0:F1:46:B0:01:ED:63:E6:E0:5E:5D
X509v3 Authority Key Identifier:
keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:5f:e6:8e:56:1b:cf:0d:18:66:bb:16:17:6c:ed:25:f4:
ef:ed:8d:28:d9:76:10:68:d9:d9:f6:e4:73:8b:24:32:81:90:
8b:9e:91:cb:2f:48:90:4c:b4:29:d9:42:98:60:80:82:10:82:
b2:e2:d3:b6:6c:de:94:64:9d:69:e9:38:aa:e5:4a:c3:8c:0f:
ea:1f:da:dc:b5:dc:91:a3:61:c9:6b:bd:52:c2:b8:9b:af:38:
3a:04:c2:f6:be:f2:5f:88:8a:01:9b:cf:1c:7a:7b:40:33:32:
d5:8d:09:0e:af:c5:b4:3a:f8:06:4a:3a:95:83:5a:a5:72:13:
c4:19:56:43:0e:4b:e8:a0:6b:03:fc:bc:28:99:3d:79:e7:ab:
6f:c8:e1:26:80:51:1e:c5:98:ae:90:21:c5:40:4a:bb:93:e6:
3f:92:b0:8f:fc:31:e0:b0:ac:22:20:57:b6:00:4a:ed:d0:e4:
35:f7:a0:2c:8c:72:55:33:48:9c:02:94:d5:4c:34:86:46:8c:
76:de:08:8b:15:92:61:ce:b4:0a:aa:db:86:8e:82:3c:49:38:
86:9e:37:4e:20:6f:64:31:ee:54:ef:65:fb:1b:d1:b6:a1:7a:
97:5c:e1:7b:c9:8f:64:f0:c8:12:8f:4f:f2:fe:b0:6f:fd:10:
20:80:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:39 2026 by rpki-client