
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json)
Hash identifier: Cp0e4UtTvv3MwjUUWuBjBPHEsv7ThEuOMwSYCYv5aE0=
Subject key identifier: 55:51:58:E0:33:7E:95:65:31:68:E5:C1:A1:1E:04:4A:ED:E0:53:D3
Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
Certificate serial: 08A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
Manifest number: 089A
Signing time: Tue 28 Jul 2026 21:01:59 +0000
Manifest this update: Tue 28 Jul 2026 21:01:59 +0000
Manifest next update: Tue 04 Aug 2026 21:01:59 +0000
Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: mSx28tt0cRnHnEdJpKstK2bBBZTZxxZFP6gwzIA6pFg=)
2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: NDPwNan09Ssdmc1pybvK6GRLd224X2AqBtS0fXc6jf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl
rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492
Validity
Not Before: Jul 28 21:01:59 2026 GMT
Not After : Aug 4 21:01:59 2026 GMT
Subject: CN=6a6918c7-6b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:b8:6b:e3:3c:0a:26:d6:cc:bf:7a:75:b1:
b2:a2:39:13:b7:00:f5:18:4b:65:34:4a:78:d5:ea:
7d:9a:96:3a:e7:0b:d7:65:c9:07:27:79:84:26:d8:
de:c1:b5:62:27:e3:7c:54:f8:70:0d:39:79:89:f7:
1a:6e:06:22:bf:72:a2:c5:ad:aa:b8:16:53:3c:f0:
6c:02:5f:f6:d0:02:6d:45:e5:80:51:79:db:b6:bb:
52:e1:b1:18:72:9e:6d:d1:d9:32:98:25:33:cf:77:
a0:ea:50:d1:e7:a7:58:89:0e:a5:98:cd:71:6a:f5:
dc:95:d5:83:79:03:43:2a:1f:d0:24:6d:77:04:89:
a7:d3:48:63:5e:a7:fd:25:3f:5b:8f:3c:bb:29:59:
1d:3f:89:12:1c:70:94:e0:b6:4c:a3:de:3a:f8:fb:
d0:f6:8f:e6:15:29:21:a3:ec:da:04:52:1c:0f:c4:
2d:9b:4e:5e:48:db:36:a3:32:f0:6c:36:4a:dd:6d:
64:d0:91:40:fa:66:f1:2c:9c:fa:f5:e3:8a:19:c0:
4b:a6:26:8a:b6:a7:41:c0:80:c4:26:4a:5a:aa:fd:
88:f0:b1:81:1a:62:05:de:c5:bb:1a:ca:e4:a9:34:
7c:38:fd:19:ab:33:db:0c:fb:ba:42:3d:a6:2f:ae:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:58:E0:33:7E:95:65:31:68:E5:C1:A1:1E:04:4A:ED:E0:53:D3
X509v3 Authority Key Identifier:
keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:40:8d:e2:69:83:2c:f9:1d:09:0a:11:c7:70:64:f4:0d:d8:
38:50:76:e5:8f:6f:9a:af:59:92:28:2e:b9:5a:5a:98:68:37:
a6:47:76:69:56:95:ac:f7:31:a1:65:41:f6:d7:ee:92:26:da:
ad:36:82:40:26:9f:a1:5d:32:0a:dc:61:b4:b1:78:dd:9f:a4:
2a:bb:8a:fb:9c:2b:9d:c4:73:b2:e1:6d:66:00:ae:c0:70:14:
3e:a0:fb:f4:07:b3:0e:29:ff:96:32:a3:f6:60:42:b4:b2:d0:
02:28:bb:5e:3b:aa:4a:6f:21:52:94:a8:fc:15:f9:13:c2:3f:
1f:ef:19:1f:c0:eb:07:32:44:1c:2e:02:9b:89:7e:22:dd:cf:
0b:46:a6:2d:1a:4d:ad:02:d3:63:ab:5d:59:49:ed:a5:6a:8f:
e4:21:d8:27:81:58:18:59:b9:08:d9:6a:7f:9a:c3:af:43:3c:
b2:4b:fb:99:76:3d:4e:b4:0b:05:f8:41:51:4c:ec:84:2a:9e:
e9:20:67:56:02:4f:7e:1a:36:f1:c6:97:96:92:90:7d:9e:fa:
3e:b9:65:74:32:0d:0f:b2:c3:d8:c3:f5:4f:5d:49:46:a0:92:
91:f7:b5:a9:8d:a8:4d:76:c9:0c:0b:82:5b:61:26:fb:a0:b8:
d0:ee:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:58 2026 by rpki-client