
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json)
Hash identifier: cf+AtTTVWiq2n4wX/5PLMEPFNO5GUPBe3VPco1mGdKc=
Subject key identifier: 75:05:79:A6:CC:1D:04:A5:69:39:D5:16:F6:05:ED:0C:A1:30:3C:F4
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
Manifest number: 82
Signing time: Fri 25 Sep 2026 08:02:01 +0000
Manifest this update: Fri 25 Sep 2026 08:02:01 +0000
Manifest next update: Fri 02 Oct 2026 08:02:01 +0000
Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: PuZvovLcJplRS0TKzUjAlvfm/A8kSat8ksoTmjH8GRA=)
2: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=)
3: 174298368DB111F18EE5B03B4611F970.roa (hash: ncEej6Lc0TJTyx32wKUoM2ogTcTqlHpXgc40wTgsiPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Validity
Not Before: Sep 25 08:02:01 2026 GMT
Not After : Oct 2 08:02:01 2026 GMT
Subject: CN=6ab62a79-8c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:89:11:d3:4e:d9:ee:84:19:84:14:33:b9:ba:
2e:28:4d:76:f5:a6:1e:5b:0a:b5:89:4a:74:9f:b0:
ab:ce:75:78:f2:4f:e0:ef:75:4f:33:2f:f5:df:86:
e7:39:bc:22:2b:5a:c2:ea:05:8b:b1:81:10:70:53:
e6:c0:94:4e:e6:e9:00:5b:96:18:e8:60:09:8d:72:
f8:3c:e6:3f:c3:d7:42:63:2b:12:ba:76:79:f9:f4:
64:94:88:63:fa:b2:e7:9b:ee:74:cb:33:a0:8e:6a:
b9:e6:76:06:c1:30:43:bf:ff:32:31:6a:d4:10:07:
50:ea:ad:20:7c:e7:64:c7:65:b6:77:3e:aa:27:aa:
10:8a:60:5e:be:34:36:0d:cc:d5:9e:59:54:91:64:
e3:47:dc:c4:f8:5a:d4:3a:b4:d7:06:23:fe:01:cf:
00:4e:3b:b8:ee:cc:8f:3d:a3:76:93:25:8a:b8:5c:
0a:fa:9e:79:f7:84:45:ab:57:f9:da:88:21:f4:e7:
fb:22:0f:92:ca:6b:0d:1e:f3:8a:c2:8b:d1:ea:16:
1b:ad:93:46:69:02:1a:bf:a9:35:e0:fa:17:be:aa:
72:ff:aa:7f:d0:7b:14:8e:34:85:4a:c6:9d:7b:03:
5a:9b:1b:45:ec:42:82:c0:f5:0c:eb:d3:74:f2:6b:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:79:A6:CC:1D:04:A5:69:39:D5:16:F6:05:ED:0C:A1:30:3C:F4
X509v3 Authority Key Identifier:
keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7b:d7:a4:a7:35:c5:f2:27:66:54:41:59:99:32:ca:30:2b:
d9:69:2b:d2:92:00:8a:3f:b9:5b:59:d1:c2:3b:a9:1c:9f:8a:
30:6a:64:aa:6d:c7:a0:0a:bb:d6:4d:91:19:7d:56:7b:92:46:
a4:39:9c:81:c7:c1:17:aa:2e:9e:9b:9d:d7:c3:b0:8d:4c:ed:
f9:05:37:92:bc:19:37:be:3e:d6:d5:f9:6f:61:27:8d:31:88:
f3:70:e1:80:61:62:c6:f1:b6:22:94:0b:0f:59:00:7b:56:5c:
0f:c6:dd:61:58:1e:3f:5a:93:fd:08:1f:e0:cf:75:4a:19:34:
14:c9:7a:89:34:0e:06:f2:f3:b1:bf:5f:ae:39:34:88:8d:34:
87:49:d6:3f:51:eb:97:d7:68:e9:66:bd:9c:5a:81:a6:3f:1a:
ca:c0:73:94:63:b5:98:18:f3:11:d4:9f:90:ec:67:55:78:3f:
0d:4e:0b:ea:93:5d:0a:86:c3:ad:da:20:43:32:bb:07:aa:d7:
c8:a0:b7:0f:fa:c1:f7:52:6b:ce:aa:09:ac:44:6d:57:20:f2:
24:fd:cf:81:91:4a:c2:34:a1:6e:d9:65:f4:86:61:f8:6e:d8:
3b:ee:3a:bb:4c:ff:9f:52:a7:ce:71:c8:b9:d9:7c:c2:b6:52:
b5:39:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:02:40 2026 by rpki-client