
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier: xWniCJRRR5gfLWDovYw0EvOKmr0fZ7JzC4bnR6L0LK0=
Subject key identifier: 4E:7C:E0:B7:BA:9F:68:F7:5D:20:EE:C0:06:63:DC:70:0F:34:0F:F4
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number: 01DC
Signing time: Mon 21 Sep 2026 03:36:31 +0000
Manifest this update: Mon 21 Sep 2026 03:36:30 +0000
Manifest next update: Mon 28 Sep 2026 03:36:30 +0000
Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: yyZGAvAoauMjJdhQbOikfdUnmWguTtUw5vzEbhWYXSk=)
2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: DnFLfRNolDS9uaJNFyfTk6IoS5wsIvFbDILScGzhK3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Validity
Not Before: Sep 21 03:36:30 2026 GMT
Not After : Sep 28 03:36:30 2026 GMT
Subject: CN=6ab0a63e-7add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:0c:8c:dc:8b:ac:c6:d0:9a:32:ff:66:ab:
25:2b:3f:74:89:45:83:2d:33:92:5b:02:d5:1a:2b:
3a:49:a2:7c:a6:56:24:38:b2:b6:1c:ec:9f:63:3d:
bc:5c:92:2e:83:44:11:b6:6a:cc:d5:f6:0c:1e:d2:
d0:2c:c9:f7:65:0b:32:a0:e5:19:fa:14:e6:a6:66:
4e:94:ef:ee:28:01:4e:87:e9:ee:01:62:37:8d:50:
83:da:9e:f1:34:16:e8:61:79:7e:93:4c:ec:f0:4d:
df:cb:e1:55:64:51:6e:4d:90:72:59:98:7e:ca:48:
a9:48:a5:e8:3d:b8:d2:29:c4:72:ba:39:fc:07:4b:
c8:a0:b6:5b:a2:bd:09:c3:93:58:5a:13:13:60:25:
92:2e:c6:18:51:c7:95:99:0b:64:c7:65:bb:a4:0a:
1f:94:99:a0:4d:ce:61:fc:6d:0a:6b:f2:2d:51:0f:
bd:b8:4e:c8:4a:d1:fa:db:75:02:71:cc:47:5b:84:
5b:c4:a1:ea:7b:6e:51:1e:da:70:5c:09:48:68:15:
57:68:85:61:d0:33:73:81:11:7e:47:ea:04:93:e6:
54:42:07:30:09:50:12:c6:56:b6:f1:ca:09:48:ce:
2a:cc:e0:7f:50:32:bc:49:d6:24:bb:f2:56:81:c5:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7C:E0:B7:BA:9F:68:F7:5D:20:EE:C0:06:63:DC:70:0F:34:0F:F4
X509v3 Authority Key Identifier:
keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:f6:c6:52:4a:f6:22:c2:61:cc:95:34:8d:68:3f:39:a4:87:
5c:ae:48:3b:94:86:41:ca:55:0c:f0:f0:3d:8a:83:af:42:13:
ca:0f:4e:ea:0d:f5:99:3f:b7:38:a1:4d:81:9c:21:85:85:0b:
a6:d8:29:7c:22:6a:6b:8a:b5:1d:37:c6:26:b1:e8:f1:2e:f5:
f7:eb:f4:1b:29:9c:23:26:84:35:a9:e5:dc:65:a1:fe:a1:2c:
f3:c9:4a:67:6a:a7:8e:72:1c:a4:24:ae:ce:44:d1:15:08:47:
a2:9f:91:9c:1e:81:b5:3d:cc:8e:18:2f:27:9a:bf:a8:7c:04:
ea:bd:1a:34:83:55:b7:9e:24:2e:04:f7:89:a9:13:4d:b7:13:
1d:7b:4e:db:1f:63:17:be:2e:05:db:54:f2:2b:f7:90:04:0d:
5b:1d:6f:cf:a4:14:66:02:ad:0d:fe:70:9e:3b:15:ba:93:c8:
d2:09:7a:73:0a:3c:1f:8f:87:f7:5b:3d:4f:95:d2:8e:13:92:
25:88:62:30:f4:a8:0d:ce:17:85:ed:69:78:51:9e:e5:bf:20:
8c:d3:19:e0:11:7d:bd:60:92:ce:93:a7:6c:11:e2:92:70:36:
d2:bf:cf:27:06:a9:fb:a7:19:54:2b:4f:7c:97:43:dd:14:e0:
46:a2:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:48 2026 by rpki-client