
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json)
Hash identifier: odwqG3itLGvhch4mLTSzCxmHyND4OinfxnfTFSxJ0hY=
Subject key identifier: EB:42:02:F3:1B:3E:3D:6E:27:39:A7:FB:A0:F9:73:C9:DE:65:26:64
Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Certificate serial: 0AB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
Manifest number: 0AA8
Signing time: Thu 08 Oct 2026 19:38:21 +0000
Manifest this update: Thu 08 Oct 2026 19:38:21 +0000
Manifest next update: Thu 15 Oct 2026 19:38:21 +0000
Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: Zt1YPis0KMcBekSFT5s+m+V7UgybD2m2bF2rn618T0E=)
2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2738 (0xab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Validity
Not Before: Oct 8 19:38:21 2026 GMT
Not After : Oct 15 19:38:21 2026 GMT
Subject: CN=6ac7f12d-9026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:17:13:06:cf:d7:3d:35:c6:42:6f:16:d9:
bd:10:36:98:74:76:88:f2:b8:39:96:17:d5:a9:4c:
88:c1:04:ab:49:cd:28:09:ba:cf:1b:bd:77:7c:32:
51:02:bc:c5:ff:41:90:37:5a:b2:24:d0:dd:45:22:
30:c1:4a:f2:18:50:50:2f:87:c3:c9:8e:58:58:47:
fd:7b:3b:2d:4a:08:96:b3:f0:f3:8c:77:62:54:4f:
c8:72:15:2a:a6:a1:6b:72:c4:4b:09:13:c8:a9:81:
03:fe:a4:95:1f:cc:5b:03:5b:b5:92:b8:6c:0b:2c:
dd:10:8c:ab:92:d7:78:66:18:13:02:bd:34:76:26:
63:45:a2:fd:37:6f:4e:f3:3d:dd:bc:5c:1f:c1:e3:
1c:49:f2:f7:76:b6:66:fc:ea:87:a6:e4:3a:cb:a0:
f3:31:e3:63:f9:1b:a0:71:dc:89:39:a9:47:bf:98:
86:74:20:64:bb:79:76:6d:dc:bd:41:bb:7b:5b:f9:
0b:0f:a2:53:9e:c2:0a:32:61:4b:1b:9f:a7:4c:cd:
ff:aa:71:24:c4:70:46:4a:86:60:87:18:69:6c:b5:
0a:d6:91:c1:d4:ac:a8:98:8a:fc:aa:bf:4e:91:e7:
22:bc:23:d7:0f:a8:5d:c0:d3:f6:78:a4:23:97:a9:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:02:F3:1B:3E:3D:6E:27:39:A7:FB:A0:F9:73:C9:DE:65:26:64
X509v3 Authority Key Identifier:
keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:16:ea:c3:0f:45:4d:57:33:6a:2a:0e:a4:07:25:64:4a:
be:3d:2e:e5:5c:c5:4a:ae:fc:cf:2e:49:ca:83:37:0a:c1:9c:
a9:db:5d:4d:5d:4f:0b:8d:4a:28:78:0b:ae:b0:52:a5:24:46:
3c:49:84:c2:f7:9f:c2:12:bb:54:37:f9:a8:cd:ac:b0:1f:93:
71:be:64:6a:f4:44:69:a8:08:40:cb:23:24:8a:71:82:0d:71:
60:d7:71:a5:97:b7:af:b6:8d:57:36:54:ed:e8:b5:ff:76:19:
fe:34:40:dd:02:8d:ad:06:d3:b5:95:0f:bb:a3:46:40:35:72:
f3:e6:04:25:55:a6:57:d7:44:2e:19:6f:5a:3d:b4:51:66:a0:
ef:e6:4b:34:2a:d5:6c:ad:91:3e:7a:8c:2d:33:a4:6b:39:5e:
6e:92:6e:e0:ad:d0:09:b3:2e:5a:45:c6:03:05:17:ab:4f:ca:
2c:89:94:0d:e9:36:c0:9b:a4:cd:14:85:5e:e3:49:f4:63:c3:
11:d1:6e:96:34:d3:e3:6e:d5:f5:56:e9:66:53:88:0a:d2:a8:
91:55:80:55:9e:0b:27:41:92:da:d2:f7:c0:06:66:a9:44:6a:
fd:e6:dc:e3:fe:8d:de:e1:21:85:9e:5f:b3:7b:8c:f4:3f:34:
3a:e5:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:34:57 2026 by rpki-client