
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json)
Hash identifier: 49ZdM/lark0DIAP9n7mhHKm4M0H6hMmWuNFAkuemK5s=
Subject key identifier: AA:BD:DD:A4:47:47:EE:4E:1D:CE:B4:C3:B4:FE:77:6B:A0:EA:2E:06
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Certificate issuer: /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
Manifest number: 94
Signing time: Mon 21 Sep 2026 07:32:23 +0000
Manifest this update: Mon 21 Sep 2026 07:32:22 +0000
Manifest next update: Mon 28 Sep 2026 07:32:22 +0000
Files and hashes: 1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: IwqxPZElws5ECeqDSDqIOya52S49lFxdAv468hcWF2A=)
2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Validity
Not Before: Sep 21 07:32:22 2026 GMT
Not After : Sep 28 07:32:22 2026 GMT
Subject: CN=6ab0dd87-2cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:59:48:0b:e2:ea:34:6a:13:27:5c:5c:e9:
83:e2:4c:bc:aa:04:7f:b8:e4:82:97:4f:3e:76:00:
43:11:99:0e:fd:ef:8b:65:52:85:42:40:f2:ab:bf:
9d:f1:3f:80:96:c8:ec:ad:f0:98:11:d1:fd:15:5d:
7f:33:80:50:be:f8:4f:2b:66:fb:9a:2f:2e:a7:7e:
95:e9:52:3e:18:23:1e:a0:48:bf:c5:86:15:75:30:
9e:5a:67:5b:31:64:35:7e:c7:5b:bb:9c:8d:43:fb:
46:64:1e:39:e7:bd:7e:be:f0:29:ae:79:58:d6:30:
81:93:7e:38:8d:83:6f:13:90:e2:15:f2:d0:9d:5f:
e9:0e:b5:db:3d:95:23:27:fb:45:d1:c0:04:59:0d:
69:0f:0b:6a:c4:a9:60:49:35:cf:62:05:d3:0e:57:
f2:bd:88:e5:01:27:52:02:2c:74:94:64:3b:f8:71:
31:fb:f9:25:44:bc:ff:78:37:0e:36:5f:af:3b:20:
87:34:cb:57:e5:6e:1e:5d:81:db:b9:32:fe:9c:ca:
fd:e0:ad:4b:4a:48:75:c9:a4:d9:6a:1b:29:74:4d:
e8:2f:a9:d8:b2:4e:91:4a:fa:72:41:f6:0d:dd:44:
f5:19:64:4a:0b:8e:65:07:e8:a5:0e:22:a3:5d:65:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:DD:A4:47:47:EE:4E:1D:CE:B4:C3:B4:FE:77:6B:A0:EA:2E:06
X509v3 Authority Key Identifier:
keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f6:a0:40:fd:b9:81:d1:2d:91:ee:91:95:78:bb:3f:f4:3a:
e3:f3:43:4d:84:ce:25:ee:40:12:c8:0f:7e:f8:7f:5b:c0:ba:
ed:fd:37:af:86:f6:80:d9:18:aa:71:f9:f9:cf:a6:0d:57:14:
d2:45:d2:21:4c:9c:d3:55:11:ea:2a:58:fb:6e:63:7c:8b:72:
e3:be:35:d1:72:cb:63:a6:b9:98:dd:35:3d:4d:f1:1b:f3:2e:
e8:45:14:94:d5:1b:57:7d:38:8d:c5:04:f6:22:da:f7:42:6d:
58:40:c0:7c:b5:24:b7:bd:74:70:2a:0e:71:ce:52:c9:d1:ce:
ce:8a:79:c6:61:15:c7:ba:07:df:a8:b9:4f:3a:97:b5:0a:93:
78:f1:78:2d:27:70:c5:6c:8f:44:bb:a4:e0:c2:7f:6e:31:56:
27:e4:ad:e0:68:94:0e:b6:12:55:d8:28:2b:a2:a3:73:a9:2d:
67:12:16:b9:c2:bb:76:a6:61:ad:14:0a:7a:38:c3:f8:ac:78:
e5:e5:0a:77:30:4f:8c:87:b0:5d:91:73:3e:df:9c:d8:a1:91:
ea:94:fb:0f:32:09:ff:11:bc:c2:f1:18:e8:d7:bf:ac:ca:a6:
cd:d5:79:d8:e9:11:bb:fd:72:83:40:2a:78:01:78:8f:32:6f:
6f:a9:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:25:07 2026 by rpki-client