
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json)
Hash identifier: QhqQwGmaiPdEnDkwgEIzNVfuD9lJk0u9aIWLB1XBYmY=
Subject key identifier: 03:09:95:6A:E7:34:67:4B:51:8D:81:B7:01:95:D9:20:32:0E:42:ED
Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Certificate serial: 0476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
Manifest number: 045E
Signing time: Tue 13 Oct 2026 00:17:52 +0000
Manifest this update: Tue 13 Oct 2026 00:17:51 +0000
Manifest next update: Tue 20 Oct 2026 00:17:51 +0000
Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: 73JtKrylobqkdRhlDTjcmBordeia5cDCYJsr/eIAOl4=)
2: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=)
3: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Validity
Not Before: Oct 13 00:17:51 2026 GMT
Not After : Oct 20 00:17:51 2026 GMT
Subject: CN=6acd78af-c9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:87:54:be:d6:68:0b:22:b0:9b:71:2a:8b:
08:d3:4d:4d:34:59:e8:05:0d:b2:d6:18:7a:68:6c:
cf:59:85:84:d9:95:76:a7:db:75:c1:ef:04:18:0d:
5e:6b:dc:f0:d4:73:47:df:63:71:7c:48:d1:8c:cd:
18:24:5a:75:46:85:17:2a:38:c8:0b:a8:e9:47:70:
7e:ed:0d:6c:b3:8c:51:3c:d9:b6:d4:87:ac:5b:ae:
28:ad:35:c0:09:3b:03:3b:09:56:d8:58:61:16:51:
73:dc:20:e6:4c:3d:1c:67:fa:96:95:8e:5f:b9:0d:
9c:eb:a4:5f:87:eb:92:1d:6a:50:f4:59:37:85:7c:
8a:83:b1:18:50:8c:d7:14:37:1b:2b:31:d9:50:6c:
ff:af:f8:da:22:e3:69:f0:26:3f:f4:31:48:5d:a5:
4b:a2:79:9e:90:2b:c3:1f:20:28:b4:49:32:71:fb:
c0:54:91:d1:57:c3:72:95:68:0b:8b:8a:c4:89:79:
bb:19:9c:da:9b:b4:e9:8b:95:c4:04:9a:c4:40:ef:
d0:20:8d:e8:2f:38:93:30:c2:95:b6:fd:f8:a3:3a:
86:4b:15:ff:7d:33:58:5c:00:dd:32:83:f3:c4:13:
a7:48:a5:ff:72:41:71:84:36:3e:9c:76:ce:c7:3d:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:09:95:6A:E7:34:67:4B:51:8D:81:B7:01:95:D9:20:32:0E:42:ED
X509v3 Authority Key Identifier:
keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:57:73:32:2e:2d:f4:97:0e:66:c4:22:83:ee:04:ad:87:cb:
d8:19:c5:93:c6:4b:55:40:0a:ac:47:dc:e9:fa:6a:43:ef:72:
be:f4:5c:23:d9:2c:8d:8f:b6:17:58:31:d6:85:84:f5:3f:02:
ff:47:6f:29:1f:30:97:cd:be:42:ed:36:b6:a8:43:89:93:20:
20:55:9f:5a:db:17:f7:cf:e5:46:5e:08:a9:10:da:5f:d5:c0:
59:03:f4:a2:2c:cb:b4:13:36:a5:1b:41:58:39:ba:04:c6:d8:
19:89:e6:59:69:b0:59:b7:4c:a8:e2:27:e7:e7:da:15:80:99:
b4:1d:05:d4:80:8e:e9:6f:34:93:bc:7a:6c:24:5d:0b:b9:de:
fe:5d:66:66:ff:0b:d9:47:e8:14:4a:fa:85:53:f3:21:62:fd:
83:dc:7a:8c:cf:d6:8a:5a:c8:9c:15:e1:3e:1d:9a:52:ef:29:
6c:16:ba:6a:d8:37:e4:84:88:67:e6:b5:46:91:25:15:6d:f3:
f5:58:10:c2:47:93:c9:fa:88:9e:32:52:d0:c2:64:86:4f:c6:
ea:01:dc:7c:56:9d:b5:a2:ab:1f:da:da:9a:a0:58:00:cf:c1:
30:66:fc:15:44:72:46:9f:c0:cb:fb:45:67:f8:e7:23:21:53:
38:8b:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:50:23 2026 by rpki-client