
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
File: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json)
Hash identifier: bnjxZJj2Z9FPR0Kk6bjd7G9bK8urd/Q93shFVJCsNm4=
Subject key identifier: B8:CF:15:E4:EA:FD:CD:5D:C0:B9:2F:C9:13:1A:18:3C:F3:13:06:41
Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Certificate serial: 0804
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
Manifest number: 07EA
Signing time: Fri 12 Jun 2026 21:23:24 +0000
Manifest this update: Fri 12 Jun 2026 21:23:24 +0000
Manifest next update: Fri 19 Jun 2026 21:23:24 +0000
Files and hashes: 1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: 4jLJIu9DCZNQ6eTOkukIAqHBJE3NedqsuEdKv6vc7aw=)
2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: 2CcUX8OCn1/fmWn37MNKtyhofnamXBuWgD+4aT2Pu3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Validity
Not Before: Jun 12 21:23:24 2026 GMT
Not After : Jun 19 21:23:24 2026 GMT
Subject: CN=6a2c78cc-67c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:a7:aa:ee:60:31:ab:fd:96:f4:6f:e8:b9:
2d:4a:cd:e4:d6:94:46:47:bb:a0:df:37:20:49:89:
07:06:70:80:ca:a5:ce:14:41:df:ab:e1:3e:59:d1:
cb:12:c9:53:3e:bc:b0:da:fc:05:00:31:21:51:75:
39:19:ad:d8:84:06:1e:9b:03:97:07:ab:1e:ee:3e:
cb:48:22:a8:3e:a3:5e:1b:85:05:af:34:d0:c4:52:
cf:42:77:5c:5e:96:81:8e:3f:1c:f4:a8:cf:ed:3a:
74:b8:50:23:7a:41:02:bb:31:38:02:9f:75:90:8e:
d8:27:f7:7a:cd:21:2d:f4:df:19:a6:53:99:3b:99:
c5:41:3e:47:90:79:c6:af:dd:ec:67:fa:80:02:3c:
a9:2f:9d:3b:71:77:e2:55:d6:82:7a:40:d5:f8:90:
93:85:0f:5e:d4:7e:27:14:59:4f:2a:27:c8:7f:19:
a7:7c:e4:2e:07:e7:f5:5c:cc:f6:b6:02:6f:f8:89:
d8:17:60:62:ff:45:05:6e:ff:c0:cb:72:da:c9:40:
0a:de:df:4e:e4:e6:6d:cb:87:b7:ee:31:76:9a:a5:
2d:06:f8:c1:fb:b4:f2:38:63:93:a3:ac:94:92:8c:
d7:2d:c1:e0:c5:dd:1d:17:95:7e:70:02:3d:53:dc:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:15:E4:EA:FD:CD:5D:C0:B9:2F:C9:13:1A:18:3C:F3:13:06:41
X509v3 Authority Key Identifier:
keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:97:1b:d3:de:5c:da:39:17:4b:52:21:07:cb:0d:35:c1:e3:
8e:44:3c:03:20:6d:7b:d5:15:ce:fa:cc:55:7c:e2:46:c7:b6:
da:a1:06:cb:69:89:e8:49:9d:5c:f6:c9:fe:63:fe:66:85:ce:
45:d1:3c:42:ad:c8:28:27:89:2d:da:b3:54:ef:87:d5:67:df:
17:2c:36:66:28:dc:e4:10:30:c0:96:72:3b:28:6e:23:63:e6:
51:1b:18:7a:20:0a:1b:33:6d:3c:1d:71:78:5d:e9:b9:39:56:
76:2c:76:52:b1:2e:ca:83:4b:ac:bd:1a:4d:f6:98:02:42:9d:
ce:4b:05:e5:4a:2e:46:9c:5e:95:7b:9f:2e:0f:cc:c6:15:9d:
a7:fa:d8:71:05:97:6f:0e:82:f3:24:3e:a0:54:1f:65:d9:8b:
49:20:36:1c:4a:19:53:58:62:ce:86:95:e3:26:fd:78:e7:88:
de:4c:18:b7:4f:1f:40:bd:67:94:a6:9d:17:1a:43:db:f1:63:
53:8c:2b:86:89:74:e6:e8:55:21:18:03:fe:34:86:80:54:e4:
8b:86:90:c8:b8:6c:15:a0:94:0b:d5:d2:2e:8f:93:47:a3:0a:
25:64:6d:40:a5:bb:97:4c:db:55:a5:50:e5:35:0b:b9:9d:b7:
61:cf:5e:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF
QjdEM0U5MDIwHhcNMjYwNjEyMjEyMzI0WhcNMjYwNjE5MjEyMzI0WjAYMRYwFAYD
VQQDEw02YTJjNzhjYy02N2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfCnqu5gMav9lvRv6LktSs3k1pRGR7ug3zcgSYkHBnCAyqXOFEHfq+E+WdHL
EslTPryw2vwFADEhUXU5Ga3YhAYemwOXB6se7j7LSCKoPqNeG4UFrzTQxFLPQndc
XpaBjj8c9KjP7Tp0uFAjekECuzE4Ap91kI7YJ/d6zSEt9N8ZplOZO5nFQT5HkHnG
r93sZ/qAAjypL507cXfiVdaCekDV+JCThQ9e1H4nFFlPKifIfxmnfOQuB+f1XMz2
tgJv+InYF2Bi/0UFbv/Ay3LayUAK3t9O5OZty4e37jF2mqUtBvjB+7TyOGOTo6yU
kozXLcHgxd0dF5V+cAI9U9x7swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjPFeTq
/c1dwLkvyRMaGDzzEwZBMB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC
QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTAyMS85QUZENDg2QzNCQkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhL
TzZhanBLaDlhT25yZlQ2UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGpcb095c2jkXS1IhB8sNNcHjjkQ8AyBte9UVzvrMVXziRse22qEGy2mJ6Emd
XPbJ/mP+ZoXORdE8Qq3IKCeJLdqzVO+H1WffFyw2Zijc5BAwwJZyOyhuI2PmURsY
eiAKGzNtPB1xeF3puTlWdix2UrEuyoNLrL0aTfaYAkKdzksF5UouRpxelXufLg/M
xhWdp/rYcQWXbw6C8yQ+oFQfZdmLSSA2HEoZU1hizoaV4yb9eOeI3kwYt08fQL1n
lKadFxpD2/FjU4wrhol05uhVIRgD/jSGgFTki4aQyLhsFaCUC9XSLo+TR6MKJWRt
QKW7l0zbVaVQ5TULuZ23Yc9eew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:23 2026 by rpki-client