
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json)
Hash identifier: Dn25qzw+CK3zleVtnqnBA+NI4OKwYSiT1MdGd52jWyo=
Subject key identifier: FC:2F:1F:1C:D5:C2:45:A9:33:FE:2E:3E:DD:68:50:15:A9:8A:93:BC
Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7
Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
Manifest number: 0218
Signing time: Mon 27 Jul 2026 04:24:09 +0000
Manifest this update: Mon 27 Jul 2026 04:24:08 +0000
Manifest next update: Mon 03 Aug 2026 04:24:08 +0000
Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: MIYsMrJNSFRGY6EPECC+jOiFTgn2HTS9kGbRYchWyY4=)
2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: KWX82VUSGhT9UsPkifLZyX4n6ROSHucaBgxHHGSJG/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl
rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
Validity
Not Before: Jul 27 04:24:08 2026 GMT
Not After : Aug 3 04:24:08 2026 GMT
Subject: CN=6a66dd68-ab6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:e7:6e:34:f2:0c:6b:a8:40:97:7c:df:d9:
db:50:09:2d:d0:8f:7c:f4:56:e2:e6:c4:aa:bf:3e:
2e:f2:39:12:64:d3:c0:79:cb:35:d7:9c:67:e1:58:
19:c8:28:ef:f4:9d:7b:17:17:f0:1d:7b:1f:5e:40:
f8:11:78:e2:cc:32:cc:aa:2c:07:a1:a8:13:97:5a:
5e:58:06:96:03:80:92:43:a8:e0:a3:da:fb:4d:d3:
0b:7b:b0:b7:90:04:9b:f2:cd:c2:4d:bd:7c:ed:56:
9a:62:fe:29:7a:7f:60:e2:9d:f9:81:87:d1:44:06:
17:bb:20:9b:62:13:cc:36:56:1d:68:04:a2:57:30:
35:cf:85:b2:72:6e:d1:c9:aa:05:3c:c1:f7:bf:53:
6a:36:64:61:84:60:85:05:59:1a:95:49:5e:f1:f6:
b5:96:ef:68:c5:85:77:d3:76:3a:48:15:df:a6:fc:
1d:e0:e6:56:52:85:84:0d:d8:45:42:b2:44:50:67:
ef:bf:3e:eb:35:41:b1:77:d0:7e:da:f5:24:0c:36:
63:2f:74:b5:05:5b:40:bf:87:66:11:e8:eb:d9:25:
7f:22:29:f1:d4:63:dc:1c:88:38:4a:c5:69:08:45:
ae:40:57:48:4e:a2:bf:14:10:b8:60:7b:9c:af:67:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2F:1F:1C:D5:C2:45:A9:33:FE:2E:3E:DD:68:50:15:A9:8A:93:BC
X509v3 Authority Key Identifier:
keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:76:4f:3b:d8:88:97:85:ce:37:15:67:e1:c6:76:40:95:
9c:95:a4:dd:bc:71:0d:19:89:c0:de:7b:f6:4a:d6:c6:85:f9:
b6:89:d7:cd:5f:bb:ed:87:92:77:b5:72:9a:b4:4e:c6:8f:c7:
f4:46:bf:33:ca:12:a4:da:3c:bb:97:d9:0d:6c:9f:ef:0d:56:
86:00:81:4d:db:9c:bb:30:8d:d6:ae:ba:8f:46:c5:14:98:27:
c8:2e:6b:d5:a2:06:43:00:f9:f5:bd:67:fb:fa:50:e8:41:6a:
fe:45:4d:f1:57:26:08:47:63:02:5f:00:2e:ba:86:ed:a7:21:
df:16:b2:f9:72:ba:8c:7b:0c:08:c6:94:9c:f9:36:e8:8f:2d:
9a:3e:bc:02:07:61:54:1a:d7:5c:4d:2f:ed:03:a6:a3:a7:db:
5a:f2:2c:ea:ea:f3:96:0d:67:14:11:f4:d3:73:e1:77:81:17:
15:f9:a2:ce:17:f2:7d:0f:d1:1f:f6:b5:ec:99:0b:38:e7:9d:
62:31:bc:ce:0d:5f:9a:3e:a6:40:f0:df:41:c9:6b:a2:28:5d:
80:95:81:b3:80:c5:74:b6:67:b5:11:ee:19:a0:ac:da:29:9b:
8b:d0:3b:36:4a:e8:91:6f:5d:6b:48:d8:09:ff:19:75:85:61:
11:08:45:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF
M0JEN0YzRTcwHhcNMjYwNzI3MDQyNDA4WhcNMjYwODAzMDQyNDA4WjAYMRYwFAYD
VQQDEw02YTY2ZGQ2OC1hYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWjnbjTyDGuoQJd839nbUAkt0I989Fbi5sSqvz4u8jkSZNPAecs115xn4VgZ
yCjv9J17FxfwHXsfXkD4EXjizDLMqiwHoagTl1peWAaWA4CSQ6jgo9r7TdMLe7C3
kASb8s3CTb187VaaYv4pen9g4p35gYfRRAYXuyCbYhPMNlYdaASiVzA1z4Wycm7R
yaoFPMH3v1NqNmRhhGCFBVkalUle8fa1lu9oxYV303Y6SBXfpvwd4OZWUoWEDdhF
QrJEUGfvvz7rNUGxd9B+2vUkDDZjL3S1BVtAv4dmEejr2SV/Iinx1GPcHIg4SsVp
CEWuQFdITqK/FBC4YHucr2c0ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwvHxzV
wkWpM/4uPt1oUBWpipO8MB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy
MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq
MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT912TzvYiJeFzjcVZ+HGdkCVnJWk3bxxDRmJwN579krWxoX5tonXzV+77YeS
d7VymrROxo/H9Ea/M8oSpNo8u5fZDWyf7w1WhgCBTducuzCN1q66j0bFFJgnyC5r
1aIGQwD59b1n+/pQ6EFq/kVN8VcmCEdjAl8ALrqG7ach3xay+XK6jHsMCMaUnPk2
6I8tmj68AgdhVBrXXE0v7QOmo6fbWvIs6urzlg1nFBH003Phd4EXFfmizhfyfQ/R
H/a17JkLOOedYjG8zg1fmj6mQPDfQclroihdgJWBs4DFdLZntRHuGaCs2imbi9A7
NkrokW9da0jYCf8ZdYVhEQhFOA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:43 2026 by rpki-client