
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier: 427KUtsOV8N5wty3RcUuSBXzSTthSPJstuw/PsjORRA=
Subject key identifier: F3:65:9E:EC:8D:FA:C2:8F:94:50:D1:B0:53:CB:CE:2A:11:4C:99:5A
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number: 016F
Signing time: Sun 01 Mar 2026 05:44:46 +0000
Manifest this update: Sun 01 Mar 2026 05:44:46 +0000
Manifest next update: Sun 08 Mar 2026 05:44:46 +0000
Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: azE84Qjq9UnYOENR6QCCtr4xzJ/2y2AEQ98Wxf3p49g=)
2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: e7eb0/P7VvWmrN+93ev4BsJcsDOxqZB9t5a0IIoKuc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Validity
Not Before: Mar 1 05:44:46 2026 GMT
Not After : Mar 8 05:44:46 2026 GMT
Subject: CN=69a3d24e-9040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:e1:58:4a:74:4a:a6:b5:fe:59:77:a6:f1:
2c:a2:92:2c:b4:f3:d8:88:ab:39:9d:ba:09:35:e5:
65:d6:0c:5b:e1:92:fa:9a:1b:a4:6e:92:50:84:e5:
48:5b:0e:e5:8e:72:95:e8:8d:bc:31:a5:6e:39:5a:
99:12:58:72:8c:3e:4d:de:6a:b0:c7:af:02:a4:44:
e5:26:93:74:19:ff:fc:55:ab:c7:1c:1f:1c:f3:12:
6c:90:1c:41:06:f0:1a:61:d3:ca:8d:1f:1f:85:5f:
91:43:78:fd:d1:af:ac:93:e3:26:fc:d9:f7:94:2d:
e7:6b:ce:50:d7:aa:58:14:30:ed:e9:8b:6f:dd:88:
84:a4:81:ba:9f:ee:16:87:e9:eb:d2:7f:77:a2:b5:
fc:ae:f3:46:22:c2:87:15:36:39:5b:7b:03:68:23:
fe:44:73:9a:42:f4:d2:6b:58:50:67:0e:6a:45:c9:
99:1c:e5:c8:a5:53:5b:a9:2f:6d:b3:58:19:40:af:
ae:b4:b6:e0:38:c8:ad:9f:46:3e:d4:ca:35:85:93:
11:f4:6b:64:a2:8d:f0:de:89:f6:6b:5c:8a:06:80:
27:f8:65:24:ff:a8:88:ba:4e:e2:be:59:58:01:35:
a6:4b:21:74:4b:cb:56:1d:bd:7f:9a:57:7c:bb:f0:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:65:9E:EC:8D:FA:C2:8F:94:50:D1:B0:53:CB:CE:2A:11:4C:99:5A
X509v3 Authority Key Identifier:
keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9e:20:d2:07:3b:bf:35:58:5c:63:4a:ec:c6:41:a3:23:ea:
19:10:41:ca:b3:2d:83:28:e5:a6:50:58:b9:43:93:bd:cf:f9:
41:fa:c3:31:66:bd:d3:87:13:e9:62:2e:f7:9d:05:32:78:f2:
e3:53:9e:54:fc:30:b3:00:b7:eb:f0:5b:b4:20:54:7c:f9:80:
40:f6:73:90:a2:51:00:6d:d6:02:99:3d:1c:6d:f2:4c:de:d9:
d6:56:50:3c:c4:76:d8:9f:bb:8a:51:2f:ba:34:4d:09:61:eb:
22:36:42:4b:41:14:14:c4:93:c1:cf:e6:dd:0e:02:7f:31:1f:
b7:7b:63:e3:58:af:b4:c8:20:67:6a:78:66:79:42:41:d6:f1:
b3:55:89:b8:d2:1e:02:92:11:d9:2c:88:9a:52:ca:83:59:70:
96:67:2c:13:30:56:c6:dd:95:a8:f9:c4:58:4b:08:23:a3:7d:
0e:83:12:d1:1a:6f:26:5b:e5:13:54:7b:3c:6a:b4:2d:bc:8c:
fe:36:4f:f0:15:62:31:c1:ab:09:f7:d9:2b:b9:6b:bd:f7:f7:
71:72:ae:ed:be:1c:92:ed:77:66:4b:a5:0b:2f:a6:53:78:f5:
98:34:da:7a:50:8b:13:3c:17:d7:cd:0c:79:16:aa:eb:56:f4:
84:c8:b0:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG
MTQ4RTFBM0EwHhcNMjYwMzAxMDU0NDQ2WhcNMjYwMzA4MDU0NDQ2WjAYMRYwFAYD
VQQDEw02OWEzZDI0ZS05MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0g3hWEp0Sqa1/ll3pvEsopIstPPYiKs5nboJNeVl1gxb4ZL6mhukbpJQhOVI
Ww7ljnKV6I28MaVuOVqZElhyjD5N3mqwx68CpETlJpN0Gf/8VavHHB8c8xJskBxB
BvAaYdPKjR8fhV+RQ3j90a+sk+Mm/Nn3lC3na85Q16pYFDDt6Ytv3YiEpIG6n+4W
h+nr0n93orX8rvNGIsKHFTY5W3sDaCP+RHOaQvTSa1hQZw5qRcmZHOXIpVNbqS9t
s1gZQK+utLbgOMitn0Y+1Mo1hZMR9Gtkoo3w3on2a1yKBoAn+GUk/6iIuk7ivllY
ATWmSyF0S8tWHb1/mld8u/CUJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNlnuyN
+sKPlFDRsFPLzioRTJlaMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy
QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z
LTVaMFVmN3RyMG54U09Ham8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo54g0gc7vzVYXGNK7MZBoyPqGRBByrMtgyjlplBYuUOTvc/5QfrDMWa904cT
6WIu950FMnjy41OeVPwwswC36/BbtCBUfPmAQPZzkKJRAG3WApk9HG3yTN7Z1lZQ
PMR22J+7ilEvujRNCWHrIjZCS0EUFMSTwc/m3Q4CfzEft3tj41ivtMggZ2p4ZnlC
Qdbxs1WJuNIeApIR2SyImlLKg1lwlmcsEzBWxt2VqPnEWEsII6N9DoMS0RpvJlvl
E1R7PGq0LbyM/jZP8BViMcGrCffZK7lrvff3cXKu7b4cku13ZkulCy+mU3j1mDTa
elCLEzwX180MeRaq61b0hMiwrg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:28 2026 by rpki-client