
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier: ynDjH0XH5AXHfQh4qS4lG2lsxkibSUMYzh2hox2igHU=
Subject key identifier: 99:75:0E:02:54:A7:B4:A6:EB:04:40:21:A3:7F:F1:D4:09:02:33:F7
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number: 08C0
Signing time: Thu 16 Apr 2026 20:19:49 +0000
Manifest this update: Thu 16 Apr 2026 20:19:49 +0000
Manifest next update: Thu 23 Apr 2026 20:19:49 +0000
Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: oRL1THnlUvDGiCDraAqwD4gUQB2N3oJj05tM/cgsUZQ=)
2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: rnY6JMeUBXZyAbrqoE5qS3jLHGJ339SuOypSORwx/lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Validity
Not Before: Apr 16 20:19:49 2026 GMT
Not After : Apr 23 20:19:49 2026 GMT
Subject: CN=69e14465-0724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:c6:b9:9c:cc:db:28:b3:2d:f8:cd:27:ad:
9e:ff:9b:73:b9:1b:0a:4f:5f:fd:48:28:af:36:c5:
db:dd:38:ac:b7:90:46:34:ef:df:d6:81:3a:ac:04:
9c:62:38:5f:86:5e:47:19:04:17:27:8c:e8:f6:19:
98:b4:64:46:09:00:7c:50:00:43:8d:97:07:5e:7c:
ec:e3:ee:fd:42:ee:a7:21:ba:65:61:6b:5c:e2:c6:
d0:40:bd:21:87:6c:f1:9a:cc:63:77:06:1d:d8:11:
cf:09:ce:39:1c:20:01:19:b9:51:65:8f:f4:25:d0:
3b:d3:8f:e3:63:32:84:8e:2a:5a:44:3a:69:da:36:
75:06:7f:6b:ff:39:32:4a:b4:a8:41:f7:b4:73:de:
ca:09:4d:9a:d1:0f:0f:52:33:3f:84:79:5b:7d:80:
96:b1:11:1c:2b:8e:68:c2:d9:54:23:2c:70:ea:15:
02:0c:a6:66:f1:30:16:d4:e2:96:76:5d:ea:35:94:
c8:09:5d:c1:27:e2:54:f6:24:43:f3:26:ad:d1:8c:
bc:fa:0e:99:ab:8e:c6:d0:07:f4:17:45:be:62:f6:
38:1b:a4:02:d8:20:71:37:91:b3:2d:be:b6:ec:5d:
9b:fd:9a:d7:fb:34:d1:5c:8e:8b:26:25:42:b6:8b:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:0E:02:54:A7:B4:A6:EB:04:40:21:A3:7F:F1:D4:09:02:33:F7
X509v3 Authority Key Identifier:
keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:c6:f7:63:da:20:f5:da:59:17:fc:09:7f:5f:e7:47:ed:97:
d1:e3:9d:83:29:00:8f:a0:a8:af:0d:44:e3:a0:b9:8e:12:42:
10:ed:89:ba:48:19:85:f0:13:37:de:07:55:7e:8f:a3:9c:76:
17:04:53:c7:0c:03:79:b4:8a:90:bb:0f:c3:0d:07:1f:aa:b0:
96:69:f1:ab:13:0e:32:bc:3f:87:c6:fd:a5:ae:da:ac:fb:1c:
c2:45:e4:3e:e4:5e:74:03:a6:19:69:7f:33:70:04:b8:3e:6e:
25:79:cc:58:cc:49:35:9b:03:1a:af:60:37:4a:ee:d5:0c:5a:
c6:c9:5c:0d:ca:20:14:7e:27:74:cc:00:52:f8:a2:d2:df:54:
6d:aa:a3:74:b1:14:06:4f:90:6d:5a:cd:eb:4a:d8:4b:bb:60:
55:45:3b:58:a6:46:7e:91:29:f8:af:85:15:5f:15:0e:98:10:
69:4e:b5:c2:4f:c7:08:2a:02:0c:a5:29:37:c3:99:38:95:b3:
db:c2:dd:04:a1:fc:62:d8:fb:a5:cb:29:c7:a2:01:be:f3:4c:
5b:1e:15:71:a6:9c:65:ab:37:e3:a8:c5:ca:78:ce:0b:e1:58:
f9:f9:d2:6e:4a:55:03:34:a8:68:39:1e:d7:5b:57:1b:b7:48:
8f:a9:e6:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3
RDcxNjQyNEIwHhcNMjYwNDE2MjAxOTQ5WhcNMjYwNDIzMjAxOTQ5WjAYMRYwFAYD
VQQDEw02OWUxNDQ2NS0wNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8zGuZzM2yizLfjNJ62e/5tzuRsKT1/9SCivNsXb3Tist5BGNO/f1oE6rASc
Yjhfhl5HGQQXJ4zo9hmYtGRGCQB8UABDjZcHXnzs4+79Qu6nIbplYWtc4sbQQL0h
h2zxmsxjdwYd2BHPCc45HCABGblRZY/0JdA704/jYzKEjipaRDpp2jZ1Bn9r/zky
SrSoQfe0c97KCU2a0Q8PUjM/hHlbfYCWsREcK45owtlUIyxw6hUCDKZm8TAW1OKW
dl3qNZTICV3BJ+JU9iRD8yat0Yy8+g6Zq47G0Af0F0W+YvY4G6QC2CBxN5GzLb62
7F2b/ZrX+zTRXI6LJiVCtouJwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJl1DgJU
p7Sm6wRAIaN/8dQJAjP3MB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3
ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3
V0NtSl9NdHlfSko5Y1dRa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN8b3Y9og9dpZF/wJf1/nR+2X0eOdgykAj6Corw1E46C5jhJCEO2JukgZhfAT
N94HVX6Po5x2FwRTxwwDebSKkLsPww0HH6qwlmnxqxMOMrw/h8b9pa7arPscwkXk
PuRedAOmGWl/M3AEuD5uJXnMWMxJNZsDGq9gN0ru1QxaxslcDcogFH4ndMwAUvii
0t9UbaqjdLEUBk+QbVrN60rYS7tgVUU7WKZGfpEp+K+FFV8VDpgQaU61wk/HCCoC
DKUpN8OZOJWz28LdBKH8Ytj7pcspx6IBvvNMWx4VcaacZas346jFynjOC+FY+fnS
bkpVAzSoaDke11tXG7dIj6nmag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:45 2026 by rpki-client