
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
File: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json)
Hash identifier: jpHsohRyzwoXmUN8TUomYLer5QnOmzeRJNBJbyBHIcI=
Subject key identifier: 1F:48:A5:E8:80:57:F4:9A:DC:EA:B8:EE:3A:7B:93:18:86:60:4E:2A
Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
Manifest number: 07B5
Signing time: Mon 02 Mar 2026 03:05:24 +0000
Manifest this update: Mon 02 Mar 2026 03:05:22 +0000
Manifest next update: Mon 09 Mar 2026 03:05:22 +0000
Files and hashes: 1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: /6KG7L3wIwBuDxXwExh1GUfxVC4OmtLa4SUO7vGVOcY=)
2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: 2CcUX8OCn1/fmWn37MNKtyhofnamXBuWgD+4aT2Pu3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Validity
Not Before: Mar 2 03:05:22 2026 GMT
Not After : Mar 9 03:05:22 2026 GMT
Subject: CN=69a4fe74-12e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:b9:91:4b:2f:d6:7e:80:2f:12:f8:eb:d6:
01:c2:e7:19:b5:d3:12:3b:8a:fa:4f:68:8a:ef:c8:
28:ec:29:00:fc:d0:77:c8:51:ce:33:17:54:c3:af:
55:02:2b:ab:c7:ce:52:5c:aa:94:a3:07:56:bb:ca:
5e:3f:20:ec:d7:5c:a2:4d:9c:da:fe:34:5e:40:c9:
d3:d4:82:79:63:90:76:3b:91:13:bd:9c:cd:75:5e:
d3:8f:83:88:e3:7c:5f:70:d1:27:48:c3:29:ce:ab:
91:88:c2:a3:2c:bf:b2:b9:32:f1:ac:78:09:ae:1f:
18:3b:bc:58:5c:ce:71:c9:bb:fa:04:03:a4:6b:34:
28:e4:12:c9:70:11:aa:3e:b7:17:8b:a0:77:5e:ef:
c4:1b:48:27:bb:10:2e:93:a3:a0:26:5c:a0:68:f5:
ec:46:d9:55:06:c0:12:cd:f8:44:f9:f9:37:83:a8:
04:51:26:26:bd:19:72:dd:53:53:19:4f:c4:fc:75:
9e:2d:77:3b:05:00:17:fd:69:e6:3b:d2:cd:77:37:
5c:0b:91:65:4f:bb:cf:7c:89:ae:ff:31:10:10:6c:
b6:4b:14:0b:d9:79:8a:ca:2c:b0:60:ef:cb:d5:36:
d9:f6:25:1a:3a:0a:60:b3:cf:a4:51:77:03:86:ec:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:A5:E8:80:57:F4:9A:DC:EA:B8:EE:3A:7B:93:18:86:60:4E:2A
X509v3 Authority Key Identifier:
keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:f0:0a:36:5b:e3:54:a4:68:c2:53:9d:b1:32:3b:e7:67:
b0:0b:f4:9e:bf:41:1f:83:f4:37:c7:1d:8c:5d:d0:a6:44:af:
62:33:e3:6d:a5:dd:70:10:fc:03:e2:18:59:22:18:5a:d9:cb:
20:eb:3b:e9:29:ef:72:36:cd:e9:29:fb:c5:21:bc:3a:c6:d8:
60:4f:b5:e7:08:8a:3d:2e:e6:10:af:c7:f6:fb:20:94:33:1e:
10:82:a0:a2:a3:5b:43:16:ff:fe:95:6f:e5:2d:5b:44:8e:a1:
ea:79:9e:39:de:66:7a:20:79:65:86:1b:51:84:9c:bb:2e:d1:
16:b9:2e:e8:0f:77:13:f2:a3:c0:9e:61:14:b9:d2:94:07:b6:
0e:a8:3a:fa:da:63:e0:3a:72:be:ee:03:66:3d:a1:34:9c:94:
7c:a1:57:c4:72:f1:f3:4f:53:f5:df:d4:b5:37:61:bd:51:0b:
d4:ce:96:ae:28:8f:54:64:a5:97:cb:0d:39:16:ac:2f:88:93:
2f:77:18:c9:df:11:79:54:3e:eb:57:3f:e4:b3:a3:81:3b:a2:
17:a2:80:ce:52:4b:0e:25:5a:cd:14:94:36:d8:cf:34:87:44:
ae:13:d5:fe:48:fd:47:d7:34:27:82:f8:9f:c2:36:2e:82:16:
04:e4:8d:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF
QjdEM0U5MDIwHhcNMjYwMzAyMDMwNTIyWhcNMjYwMzA5MDMwNTIyWjAYMRYwFAYD
VQQDEw02OWE0ZmU3NC0xMmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxC5kUsv1n6ALxL469YBwucZtdMSO4r6T2iK78go7CkA/NB3yFHOMxdUw69V
Aiurx85SXKqUowdWu8pePyDs11yiTZza/jReQMnT1IJ5Y5B2O5ETvZzNdV7Tj4OI
43xfcNEnSMMpzquRiMKjLL+yuTLxrHgJrh8YO7xYXM5xybv6BAOkazQo5BLJcBGq
PrcXi6B3Xu/EG0gnuxAuk6OgJlygaPXsRtlVBsASzfhE+fk3g6gEUSYmvRly3VNT
GU/E/HWeLXc7BQAX/WnmO9LNdzdcC5FlT7vPfImu/zEQEGy2SxQL2XmKyiywYO/L
1TbZ9iUaOgpgs8+kUXcDhux3awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9IpeiA
V/Sa3Oq47jp7kxiGYE4qMB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC
QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTAyMS85QUZENDg2QzNCQkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhL
TzZhanBLaDlhT25yZlQ2UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARF/wCjZb41SkaMJTnbEyO+dnsAv0nr9BH4P0N8cdjF3QpkSvYjPjbaXdcBD8
A+IYWSIYWtnLIOs76SnvcjbN6Sn7xSG8OsbYYE+15wiKPS7mEK/H9vsglDMeEIKg
oqNbQxb//pVv5S1bRI6h6nmeOd5meiB5ZYYbUYScuy7RFrku6A93E/KjwJ5hFLnS
lAe2Dqg6+tpj4Dpyvu4DZj2hNJyUfKFXxHLx809T9d/UtTdhvVEL1M6WriiPVGSl
l8sNORasL4iTL3cYyd8ReVQ+61c/5LOjgTuiF6KAzlJLDiVazRSUNtjPNIdErhPV
/kj9R9c0J4L4n8I2LoIWBOSN9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:16 2026 by rpki-client