
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json)
Hash identifier: 15wNVBIY8xzI3O8TGZ2n0yPRALrB0whbG2KPPNhNbZY=
Subject key identifier: 46:C5:9C:15:9F:D0:CB:FC:1B:E1:73:0E:68:7D:44:69:2F:9F:99:F3
Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7
Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
Manifest number: 0202
Signing time: Sat 13 Jun 2026 03:05:16 +0000
Manifest this update: Sat 13 Jun 2026 03:05:15 +0000
Manifest next update: Sat 20 Jun 2026 03:05:15 +0000
Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: S2umWyeIBboyOTQ3PwyA7+DYQqtM4TZYGF97ZYQYbCw=)
2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: KWX82VUSGhT9UsPkifLZyX4n6ROSHucaBgxHHGSJG/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl
rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
Validity
Not Before: Jun 13 03:05:15 2026 GMT
Not After : Jun 20 03:05:15 2026 GMT
Subject: CN=6a2cc8ec-c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:d6:e1:9d:6e:a2:79:5d:a2:ee:d7:19:7a:
d9:57:1b:43:69:02:85:96:94:34:1b:fe:cf:cf:f3:
aa:7b:2f:a6:cd:0d:0d:6d:b2:3d:e7:5f:4f:0a:31:
8d:a8:f0:49:1f:51:51:34:12:73:a1:6a:a4:db:e5:
b1:f7:c3:86:02:0d:dc:56:6e:8d:48:ac:00:0f:4b:
b6:96:b2:21:59:4f:bf:5e:42:8c:1a:65:38:b2:ec:
17:60:31:59:ff:91:b5:32:92:42:46:9e:58:56:b7:
05:05:d5:c8:d9:12:ff:91:0e:44:49:9b:aa:f6:5d:
8e:b0:c5:95:d7:91:4a:d9:c8:5a:60:bd:34:ab:d2:
73:59:20:49:c2:7b:a6:ad:6f:0c:ce:87:f7:3e:c4:
ea:55:3c:41:e5:14:c9:ef:ca:cc:eb:a4:ca:82:6e:
09:11:48:03:b0:61:fd:4c:59:10:4b:9f:47:32:5d:
90:f6:de:d8:86:95:0e:2a:d3:72:81:08:61:2d:52:
c9:be:00:b6:c9:03:e6:73:35:e6:82:6d:f5:f8:9e:
77:9d:f0:65:9b:c7:66:01:49:9d:4f:10:12:d3:45:
2d:75:c4:f8:df:6e:56:7e:b5:1f:45:de:cf:72:70:
a7:2f:1d:03:89:4d:6e:e8:77:dd:63:04:61:08:c5:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C5:9C:15:9F:D0:CB:FC:1B:E1:73:0E:68:7D:44:69:2F:9F:99:F3
X509v3 Authority Key Identifier:
keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ad:e7:dd:a6:74:91:19:37:e5:ca:48:32:e7:f4:fc:4f:31:
2b:09:79:32:62:81:24:25:a4:15:fb:b5:74:56:3a:cb:4e:68:
2f:aa:96:a4:21:4d:e6:d2:99:98:27:f0:04:9a:8f:31:65:98:
29:57:5f:6b:3a:1f:44:d0:87:6d:7d:71:0a:bd:aa:42:2c:cb:
fe:da:d7:97:81:c8:f2:e4:9c:ff:00:d3:f0:15:52:b5:44:a5:
3a:10:94:e7:02:95:be:ce:c4:5d:28:29:90:1e:4c:91:72:1b:
47:04:54:75:35:e2:42:3f:4f:c2:69:1b:61:c8:30:84:1d:2e:
09:e6:79:1d:75:8d:ea:65:6e:03:86:60:e4:98:fa:ca:a7:5b:
7b:e4:d6:9c:8e:f5:53:52:04:63:1c:56:bc:66:c6:2b:19:fb:
3f:da:b5:81:6f:4a:9a:24:4f:65:fd:65:1e:3d:3f:c4:77:63:
81:fa:c3:0d:a0:1a:e0:07:27:1a:14:9a:81:48:c8:53:88:8b:
0f:29:dc:85:be:71:7a:d3:ba:da:ce:b4:f5:b4:1c:f4:ed:1b:
7e:7f:50:1b:ac:4c:2d:e6:58:13:c6:54:0b:d7:29:56:77:72:
a6:cf:ce:8e:30:12:2a:af:30:b5:09:a2:3e:72:b1:ef:08:ac:
1f:5a:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:02 2026 by rpki-client