
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json)
Hash identifier: 8tW3cN1iktgpAoaQLtvw8O0pPax+Xj3bZqPwRkJ2pew=
Subject key identifier: E0:84:AA:0E:62:B5:0A:AD:51:08:1E:32:A7:AD:E9:75:F7:95:F8:99
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial: 1122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
Manifest number: 1118
Signing time: Fri 12 Jun 2026 17:13:38 +0000
Manifest this update: Fri 12 Jun 2026 17:13:37 +0000
Manifest next update: Fri 19 Jun 2026 17:13:37 +0000
Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: AfQIXibBKpviD1Yrilg/YORZoZX0cTY1JpJxAAkfK+Q=)
2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: 4agi+QhWWtUPKmH1/dW+seJgI+qk+4RdSuU9ar5oRKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4386 (0x1122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Validity
Not Before: Jun 12 17:13:37 2026 GMT
Not After : Jun 19 17:13:37 2026 GMT
Subject: CN=6a2c3e42-0872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:cf:d6:5e:69:8d:83:a7:c0:5e:12:13:51:
c3:43:35:66:93:33:ec:e0:25:a4:3b:6d:01:e4:dc:
82:01:18:48:e8:aa:ee:21:30:10:e0:60:40:f3:bd:
1a:e4:eb:5f:99:a5:2f:4d:a3:1d:a5:3c:d5:fb:04:
be:67:38:7a:2f:84:df:34:a8:31:ea:14:3d:3d:c1:
14:2f:13:d6:ab:38:3e:12:2b:3d:7b:24:77:66:6a:
23:7a:b0:6b:e0:51:46:6a:63:d1:f6:8a:14:81:bb:
ff:55:0b:b9:fe:05:95:58:51:3e:13:ce:8b:2c:c3:
92:6e:27:d8:85:47:d2:c9:69:22:f5:dc:fc:02:35:
02:1a:a6:83:f4:c7:77:f1:40:16:e1:f7:ec:24:42:
e3:7d:a6:ca:8e:a8:f5:c3:c6:d8:d4:c3:36:2c:32:
00:97:89:f9:9c:4a:a0:56:5b:a2:b1:b6:6e:fe:85:
dc:a9:e3:53:dc:53:53:95:f1:4c:95:d1:76:cf:11:
ee:21:38:a1:4c:f3:01:c6:f7:7b:4e:3c:0d:26:98:
35:ac:a1:91:28:0e:d0:bf:cd:b1:6c:a8:c4:48:3d:
38:ec:72:a9:85:0e:09:88:e2:48:95:92:c9:08:fa:
83:5d:a7:d6:65:28:2e:1e:20:28:8f:54:f3:59:12:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:AA:0E:62:B5:0A:AD:51:08:1E:32:A7:AD:E9:75:F7:95:F8:99
X509v3 Authority Key Identifier:
keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:16:a6:2f:35:9c:63:ec:e2:85:d5:35:fa:c2:16:b5:54:ec:
fe:ca:4a:bd:b5:7b:63:71:dc:11:fb:28:b9:7a:e0:01:76:ff:
73:85:60:6f:b2:30:ae:51:c0:63:42:ed:82:b1:68:f0:57:92:
c8:e5:8d:58:24:a6:e2:7c:7f:44:fa:2a:05:6c:92:89:12:b7:
e6:43:3d:d2:e7:89:2b:2c:de:3d:a6:e1:ba:ea:41:c1:f9:8a:
60:bf:aa:93:bd:c8:d2:e0:80:96:04:2b:a6:2e:eb:86:8e:4b:
58:25:1f:ad:13:18:f1:1f:a1:8d:51:07:3a:4e:e6:c9:b4:27:
20:a3:71:8f:f8:ef:83:c1:c7:50:03:b0:8b:5e:98:79:16:91:
f2:f0:1e:a0:8c:e5:79:63:be:50:a5:3a:af:a5:48:10:2b:db:
3a:86:57:ac:04:ca:7e:40:fc:64:3a:8a:b6:e1:f0:82:7a:57:
46:1a:6a:46:9d:8a:5b:69:3b:41:6a:8d:58:c2:6e:4e:b6:52:
ca:4f:03:05:ed:7d:2d:bf:e2:52:42:00:9f:80:eb:e2:64:62:
ef:50:31:fc:88:e3:90:2e:14:a2:9e:a3:48:4b:4c:b9:f2:1a:
44:b8:e2:a8:97:cf:2e:3b:5b:e6:a8:96:c1:09:9c:c8:10:3e:
97:6d:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:56 2026 by rpki-client