
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier: PqSDiLMPGPyWJsl8dEBN8Vu+G6VXjOcVBGAUXNvum/Y=
Subject key identifier: 08:B7:9C:DD:46:56:A3:C0:5D:1D:C6:9C:67:FF:7E:2D:65:08:C4:9A
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial: 3514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number: 3512
Signing time: Sat 28 Feb 2026 15:18:22 +0000
Manifest this update: Sat 28 Feb 2026 15:18:21 +0000
Manifest next update: Sat 07 Mar 2026 15:18:21 +0000
Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: TtjXXfFjZxs2h/vygKwq9K9g5nESD0d/J2bEEPycKHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Validity
Not Before: Feb 28 15:18:21 2026 GMT
Not After : Mar 7 15:18:21 2026 GMT
Subject: CN=69a3073e-8d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:4f:60:ba:58:31:8e:98:cd:a0:23:1c:13:
cf:1c:99:7d:f1:cf:c6:01:3d:68:97:ad:aa:48:23:
cb:a2:92:57:0a:76:64:e2:c1:50:08:74:3a:a4:e7:
dc:da:37:d5:da:05:0f:80:a7:3a:3f:44:95:d3:cc:
23:7e:3f:5b:75:07:ae:57:95:09:ba:04:84:e8:bb:
a2:06:f7:6a:64:9f:e3:fd:33:72:23:ad:19:eb:73:
69:10:44:73:ed:a9:d3:3f:b5:51:d9:5c:0d:7d:26:
ff:1e:a2:71:f4:58:e4:d3:8b:41:9b:ce:c5:b9:e0:
4d:18:62:7a:15:11:82:4a:5d:bb:52:88:70:6c:3e:
75:cc:5e:d8:4b:7e:da:d8:3e:99:0d:ea:69:57:9a:
a6:c7:6e:07:7c:60:8a:56:2d:ad:f9:e3:f7:64:a6:
03:69:7e:c0:e3:16:b7:41:7b:95:f9:c2:5e:9a:8b:
ef:32:e7:f9:5b:9d:7c:a5:d1:32:d7:46:4a:cc:5d:
84:e1:91:21:d5:67:2b:a4:04:4a:bf:18:12:20:72:
76:32:a8:fe:94:0e:13:1a:ad:ba:95:5c:bb:47:16:
4c:fa:89:d3:11:06:ef:57:70:b0:4d:95:60:7c:69:
9b:4a:1e:9b:bc:9d:21:0e:7e:13:72:24:88:d7:e8:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:9C:DD:46:56:A3:C0:5D:1D:C6:9C:67:FF:7E:2D:65:08:C4:9A
X509v3 Authority Key Identifier:
keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f2:7a:de:07:1d:af:bf:cb:42:d4:ee:fd:de:1e:68:38:61:
43:a5:08:b6:b9:df:50:46:c5:6f:a8:fa:d3:bc:ad:ab:be:bd:
2b:05:74:dc:e1:99:b3:be:83:c8:1d:b3:c0:6d:4b:5c:63:21:
34:97:d6:71:15:54:91:e0:60:9e:a5:70:ab:34:fa:4a:68:9f:
ae:c6:23:74:4e:8a:59:a8:05:39:09:55:2c:31:4c:2d:93:20:
8f:5b:1e:88:5a:ca:30:ae:a0:0a:d5:8b:db:f4:73:3c:96:57:
32:5f:49:18:9a:2c:d3:98:ae:ee:5f:7f:cb:fb:c0:c2:94:c9:
41:57:68:dd:cc:6c:68:c4:74:5f:7c:74:4f:a2:9f:ad:65:be:
e0:01:2d:6b:3f:03:7a:3f:04:ba:4c:89:61:8f:d9:e6:e8:7e:
fb:e2:22:6e:b7:30:56:2e:b7:e4:d5:cb:99:a0:88:2d:5a:48:
e7:72:03:d9:09:e5:ef:e4:c4:68:d7:45:04:b8:4e:d8:30:63:
cf:d8:c2:27:ab:09:b8:f4:bb:8d:e1:83:b0:1f:72:b8:d7:38:
4f:1e:c2:56:0f:36:18:1b:f1:fb:cd:57:0d:bb:2c:1d:7e:26:
f0:90:15:a0:fa:9c:28:82:00:b9:55:08:05:ee:4f:ed:47:83:
59:91:ac:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG
NTQwNjEwODIwHhcNMjYwMjI4MTUxODIxWhcNMjYwMzA3MTUxODIxWjAYMRYwFAYD
VQQDEw02OWEzMDczZS04ZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmJRPYLpYMY6YzaAjHBPPHJl98c/GAT1ol62qSCPLopJXCnZk4sFQCHQ6pOfc
2jfV2gUPgKc6P0SV08wjfj9bdQeuV5UJugSE6LuiBvdqZJ/j/TNyI60Z63NpEERz
7anTP7VR2VwNfSb/HqJx9Fjk04tBm87FueBNGGJ6FRGCSl27UohwbD51zF7YS37a
2D6ZDeppV5qmx24HfGCKVi2t+eP3ZKYDaX7A4xa3QXuV+cJemovvMuf5W518pdEy
10ZKzF2E4ZEh1WcrpARKvxgSIHJ2Mqj+lA4TGq26lVy7RxZM+onTEQbvV3CwTZVg
fGmbSh6bvJ0hDn4TciSI1+g+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAi3nN1G
VqPAXR3GnGf/fi1lCMSaMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE
QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv
X2lWaDE5amVTZTcxUUdFSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH/J63gcdr7/LQtTu/d4eaDhhQ6UItrnfUEbFb6j607ytq769KwV03OGZs76D
yB2zwG1LXGMhNJfWcRVUkeBgnqVwqzT6SmifrsYjdE6KWagFOQlVLDFMLZMgj1se
iFrKMK6gCtWL2/RzPJZXMl9JGJos05iu7l9/y/vAwpTJQVdo3cxsaMR0X3x0T6Kf
rWW+4AEtaz8Dej8EukyJYY/Z5uh+++IibrcwVi635NXLmaCILVpI53ID2Qnl7+TE
aNdFBLhO2DBjz9jCJ6sJuPS7jeGDsB9yuNc4Tx7CVg82GBvx+81XDbssHX4m8JAV
oPqcKIIAuVUIBe5P7UeDWZGsPw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:55 2026 by rpki-client