
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json)
Hash identifier: L+jVZVZRMZNKFVYlZoCbmfUQu7Qr0WmqV+j9dxoh+Tg=
Subject key identifier: 44:B1:F0:CA:CD:85:1E:58:E4:B5:31:56:08:68:49:D7:32:10:B5:A7
Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
Manifest number: A8
Signing time: Mon 27 Jul 2026 09:19:54 +0000
Manifest this update: Mon 27 Jul 2026 09:19:53 +0000
Manifest next update: Mon 03 Aug 2026 09:19:53 +0000
Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: gQgu+H08P/iT93drZua27sGMQA+krMATn33qKrET2mE=)
2: 0D06C406887511F094C09643C4F9AE02.roa (hash: mvmCUaHLFK6lWtpOP/a7JndDHiEPczE/1UX7ywZQ+lk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Validity
Not Before: Jul 27 09:19:53 2026 GMT
Not After : Aug 3 09:19:53 2026 GMT
Subject: CN=6a6722ba-3c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:07:f1:70:61:06:ea:ef:6e:96:8e:d4:16:
15:3f:d6:4c:6e:b8:74:3a:31:70:41:40:6c:c7:63:
9c:2a:bf:f7:b3:eb:29:75:83:7a:b5:12:b6:dd:53:
39:1d:d3:ce:f2:ad:a3:e7:54:c8:db:65:aa:c2:e6:
de:53:c4:ae:1e:92:51:82:6f:08:83:40:c0:6d:0a:
1a:f6:aa:88:35:a3:42:57:aa:6d:f4:17:93:83:ce:
07:fd:66:ac:86:aa:c6:dc:68:c1:a2:7f:26:96:4c:
8c:1f:ba:6c:02:51:13:d9:d9:60:9f:65:9f:ef:c9:
04:ec:9f:82:50:1f:00:64:1e:96:ed:39:2f:d1:30:
84:61:91:3c:be:1a:7d:0a:c0:e5:8c:ca:8a:52:8a:
64:46:49:1a:9b:11:8b:49:e4:82:9d:d6:b3:92:3d:
ff:78:0a:a5:be:86:e1:67:70:c6:02:af:60:40:1f:
50:eb:62:41:55:b3:b6:5d:4a:0b:0c:bb:bf:88:00:
83:9b:53:da:5f:1c:ca:58:5c:cf:16:09:70:9d:7d:
2e:b1:c5:b7:d3:69:53:73:98:c3:62:c2:3f:da:e8:
a4:b4:96:0f:8b:d8:be:1c:4c:45:10:91:37:04:6f:
80:4b:98:3d:13:47:65:70:b9:2a:01:19:1d:b6:b0:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:F0:CA:CD:85:1E:58:E4:B5:31:56:08:68:49:D7:32:10:B5:A7
X509v3 Authority Key Identifier:
keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5d:de:b1:68:27:f0:bb:37:b8:da:8c:db:c5:97:b8:e1:43:
e3:c2:16:cc:ef:5c:f2:5a:93:ae:69:49:c7:8d:14:5b:82:ac:
52:04:ac:7d:8e:a6:f5:82:fc:f4:c0:d0:6e:77:20:39:67:b2:
de:5b:16:99:fa:dc:4e:43:72:32:2a:7a:91:dc:61:1e:a5:96:
3d:b0:3e:f1:2a:60:51:5b:b5:6b:31:52:3a:13:ad:01:a2:da:
6a:62:57:5d:ea:28:f4:91:86:86:8a:22:1f:50:56:4a:1f:ea:
f5:ac:61:a4:07:5e:ac:e0:39:d9:b8:f8:3d:6e:9d:cb:3a:43:
25:8f:43:4b:84:96:46:b9:b1:10:04:0c:67:d2:69:97:f3:2d:
db:34:eb:08:71:ba:1c:e2:c8:9f:5f:fa:2d:60:a4:15:41:ce:
34:64:31:ee:14:14:9c:cb:b8:1c:a0:e8:a8:13:1d:e2:1f:56:
60:c8:0f:b2:eb:39:43:21:6d:96:cd:16:df:f3:59:a6:bc:df:
79:5a:be:6e:2b:36:33:9f:fb:19:f1:33:c7:be:25:34:74:56:
bd:bd:b4:f2:df:06:1e:eb:17:57:fb:e3:73:29:8d:98:78:c8:
04:99:53:9c:85:8b:4a:a5:df:76:17:4e:09:75:99:cd:bc:60:
02:66:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:03 2026 by rpki-client