
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier: 2Cy7VzQkHchg4CTRi2Ssuh+F62QN35uJtSM16nq8obQ=
Subject key identifier: E5:C5:9B:07:8D:95:B4:81:7C:8C:C6:C7:05:D1:86:79:BC:3B:30:9C
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial: 08FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number: 08F4
Signing time: Tue 28 Jul 2026 20:41:08 +0000
Manifest this update: Tue 28 Jul 2026 20:41:07 +0000
Manifest next update: Tue 04 Aug 2026 20:41:07 +0000
Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: iNIdHKFU4VxRclJIGmWkeasighLT9K6auoAlyEUl8rE=)
2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: rnY6JMeUBXZyAbrqoE5qS3jLHGJ339SuOypSORwx/lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Validity
Not Before: Jul 28 20:41:07 2026 GMT
Not After : Aug 4 20:41:07 2026 GMT
Subject: CN=6a6913e4-a03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:d9:45:1f:93:36:1f:02:17:52:3a:21:64:
1b:3b:ed:58:1b:03:f6:2a:20:bc:cb:67:d2:ba:22:
3b:c1:16:4e:13:14:84:5d:94:19:af:40:0b:d9:89:
61:b4:32:6f:46:44:c2:b6:a0:3f:2d:79:f0:bc:87:
46:57:81:98:78:1b:c5:2c:f6:4b:bf:d6:9e:a2:54:
f8:33:73:5d:db:55:50:f7:64:22:88:36:02:ed:2c:
be:45:ab:0f:d8:fb:70:11:9d:ec:a0:21:b6:ba:60:
ea:36:72:70:e9:fc:16:f8:dd:1d:e8:20:12:57:62:
cc:e6:70:c1:a5:16:25:c2:9d:28:57:51:f2:6f:f4:
3e:ab:0c:c4:b5:7e:e4:8a:17:d8:0b:82:11:14:52:
6f:14:75:7d:78:d3:8a:ab:4a:f1:65:c8:7a:51:fd:
d0:59:60:39:59:91:dc:a2:42:02:39:49:73:cc:47:
8c:a8:17:38:b0:5b:1d:57:84:23:5f:5f:85:f3:07:
bf:76:2f:dd:b8:1c:02:84:a0:5f:1a:07:27:66:18:
06:73:06:9b:f4:cf:1c:fa:da:76:f9:b1:5c:26:52:
02:ce:ef:fd:fc:51:e6:1a:f3:82:a9:77:14:69:24:
b9:c8:1c:c0:09:44:05:61:d7:26:a2:57:9f:9f:79:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C5:9B:07:8D:95:B4:81:7C:8C:C6:C7:05:D1:86:79:BC:3B:30:9C
X509v3 Authority Key Identifier:
keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:3e:99:0d:20:f9:ac:5e:0e:b5:d2:b8:00:fe:6f:d6:f3:05:
cd:e4:fb:e1:e1:8e:e3:25:49:fd:1d:63:77:7f:a4:14:15:f4:
02:c0:b1:70:b0:1a:a0:33:f9:47:88:c8:6c:0f:e5:03:a0:0f:
78:58:c0:14:67:af:61:00:4d:ec:d9:fa:23:a1:aa:d3:ef:34:
30:6e:ed:73:42:a5:70:8a:eb:db:96:82:0e:5c:cb:85:8e:e4:
dc:c1:0c:fe:a0:14:5d:1a:3e:ff:02:04:14:b0:f0:78:29:09:
e3:d7:1d:72:77:6c:fd:9f:4d:bd:79:07:2f:0a:58:e3:64:b5:
b2:fc:b6:2d:5d:0f:9a:39:e4:38:5b:0f:a1:1d:4a:a9:47:a2:
b1:b1:0b:3a:b8:99:69:8a:7f:56:be:e7:ec:9f:a1:d0:8e:7c:
2b:63:71:08:ac:26:51:ac:13:ea:39:e0:54:b7:df:98:79:99:
43:4c:03:da:24:f8:a8:d3:12:6b:2c:b0:d0:77:ab:b6:e1:59:
d4:a7:20:1c:ec:05:2e:8d:90:38:e3:e3:63:bf:e0:99:54:ff:
a8:d2:5d:02:82:86:c5:b7:8d:83:d0:63:bf:9e:2c:c1:c2:97:
dd:eb:3d:c1:50:6b:c4:a2:cc:6b:50:b8:27:b2:43:67:55:47:
09:81:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:36 2026 by rpki-client