
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier: iuVQ9CMgXORrd8gbzVECLC9AyvwoXkuqqLw3+IiB5mw=
Subject key identifier: 45:BA:29:DE:20:37:62:BA:CD:1E:99:8D:13:D0:96:66:74:8A:AC:56
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number: 0189
Signing time: Fri 17 Apr 2026 04:11:07 +0000
Manifest this update: Fri 17 Apr 2026 04:11:06 +0000
Manifest next update: Fri 24 Apr 2026 04:11:06 +0000
Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: NmUFVXBSyd0FXZgDN2rLr+oAO0WLBBT5jy5jKdCLzEw=)
2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: tH4b5xPuIWbZyhcelLgLFsPKjP+sPf0BVd7oViQfnB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Validity
Not Before: Apr 17 04:11:06 2026 GMT
Not After : Apr 24 04:11:06 2026 GMT
Subject: CN=69e1b2db-aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:93:f0:b4:44:7c:95:32:e2:54:37:36:64:
3d:31:70:88:8e:ce:fa:df:25:da:b3:b7:25:af:b0:
aa:55:7b:fb:2a:1e:61:fc:a2:d9:95:a1:f7:ee:81:
7b:a9:23:81:23:09:d2:a4:f3:c1:23:8b:28:b0:da:
f2:f1:0e:47:ba:bd:7e:23:eb:6e:6a:40:db:22:3a:
bc:41:30:bd:90:c1:ff:f8:9d:c8:1c:a8:94:9a:67:
56:f3:2e:88:75:66:30:d0:6e:2f:3f:f1:f8:42:5f:
1d:4a:cf:95:eb:95:7c:25:67:1c:a6:97:61:8d:0f:
7a:c4:c2:c5:8f:95:f6:ed:5e:40:2a:b1:3f:ea:a6:
a6:74:87:cb:c7:6f:a2:21:58:f6:d8:70:49:83:5c:
c6:7d:35:72:e1:01:1c:d2:d0:83:e7:54:21:24:78:
a5:d9:69:73:36:8b:83:ea:ee:45:6e:65:d9:70:a1:
61:6b:0c:76:8e:39:82:62:16:49:97:a3:48:84:14:
4a:5d:d3:22:a2:ac:00:1f:2b:e5:37:ee:c8:00:aa:
d9:be:5e:6c:72:27:f6:a7:c9:36:3c:e3:29:5c:2f:
e4:3e:a4:78:86:25:ef:b1:5c:b0:ef:be:d4:05:fe:
20:4c:fb:68:a1:ff:3b:04:31:02:a3:54:08:61:3f:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:29:DE:20:37:62:BA:CD:1E:99:8D:13:D0:96:66:74:8A:AC:56
X509v3 Authority Key Identifier:
keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:fd:97:f2:26:e2:d5:28:97:14:4a:ef:b0:ff:81:3c:52:
3e:02:18:62:5c:b0:52:1c:e7:07:e4:97:54:7c:94:2d:1e:f9:
3f:61:51:c7:bf:b8:6a:0c:25:e1:b5:c7:87:5c:c8:49:f5:c9:
ae:53:e7:df:44:8d:87:17:ff:dc:8c:31:23:59:d2:45:78:32:
a6:28:ac:05:37:67:2a:7c:56:3e:b4:53:9c:1d:24:71:3b:84:
1f:95:e9:5f:a3:6d:c7:a3:83:14:e3:6b:f2:66:2e:10:d0:bc:
55:06:c3:11:8f:66:a4:f1:d3:5b:6d:07:26:98:f9:20:98:6c:
ad:83:15:84:39:b2:27:e7:a1:25:90:78:c2:ad:8f:c4:43:34:
b1:14:88:29:46:dd:e3:ce:85:2f:e3:d8:0a:0f:6b:79:54:73:
26:74:e4:98:00:a1:b7:a0:69:ca:41:e4:45:01:b2:ac:84:5f:
28:cc:92:d7:ef:c9:cf:b3:19:cf:4e:a9:58:b2:f4:70:36:1b:
db:da:34:86:3d:91:99:11:e9:d7:6e:7e:06:9b:d5:f9:8e:91:
ff:d4:38:c9:9f:81:61:55:89:a8:1d:3d:74:b5:0f:f4:d3:59:
2e:33:d9:2e:cd:7a:33:c9:fc:d3:fa:31:a8:26:8c:b4:a7:ce:
96:86:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:52 2026 by rpki-client