
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json)
Hash identifier: bRlHepvM4RWcXq7URKVFXmJWghbkT6/LzKqCiDCUMOI=
Subject key identifier: 96:52:67:47:E1:6E:16:8E:9F:04:65:1B:21:25:C6:DC:92:E5:A8:15
Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Certificate serial: 077F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
Manifest number: 1265
Signing time: Sun 01 Mar 2026 23:29:52 +0000
Manifest this update: Sun 01 Mar 2026 23:29:50 +0000
Manifest next update: Sun 08 Mar 2026 23:29:50 +0000
Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: xTMKjv+gSkL5fsfiuRBgLlbXmwcRZGXOKXzM2jdrjlU=)
2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919 (0x77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Validity
Not Before: Mar 1 23:29:50 2026 GMT
Not After : Mar 8 23:29:50 2026 GMT
Subject: CN=69a4cbef-c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:2e:b1:83:9f:cf:61:78:1c:d9:3a:9c:0c:
6a:cf:3b:a4:48:8e:36:f7:00:2f:3f:14:c3:2b:13:
e4:64:9f:eb:df:28:15:e5:ca:a5:4b:5f:ce:4b:09:
9f:30:1a:44:44:4f:02:c4:9f:4c:b7:02:b0:d0:76:
45:24:04:e9:bd:86:0c:4d:e5:97:a4:4c:74:75:7a:
39:11:41:26:2c:d3:6b:15:b1:37:c5:cf:17:9f:8f:
bf:e7:99:29:cf:a0:4e:01:09:e3:fc:4f:00:ab:de:
64:d0:b1:81:bc:03:02:71:2a:17:17:e3:e6:3c:7d:
21:72:15:92:5b:e2:48:7b:af:29:35:ba:ed:60:25:
1d:a8:7a:ae:a3:d4:1b:59:22:6b:b1:cf:97:c4:fd:
62:d1:2b:72:ea:98:1d:a2:2b:3f:4d:42:b6:99:32:
92:0f:8d:2f:cf:ee:3b:f8:94:8d:60:57:2e:f2:2f:
53:5e:b6:3a:2c:a3:e7:d1:66:e9:31:93:26:1a:04:
f5:8b:b0:40:fe:9c:92:36:1f:90:e0:15:67:ec:33:
38:c2:52:8c:81:70:be:35:a9:d7:70:cf:e9:23:40:
21:6f:47:59:c4:12:12:38:9e:44:b2:5f:cd:2e:5e:
16:1c:74:14:03:a1:30:f8:07:f3:05:83:5e:f3:be:
5a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:67:47:E1:6E:16:8E:9F:04:65:1B:21:25:C6:DC:92:E5:A8:15
X509v3 Authority Key Identifier:
keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:56:5f:f6:20:d2:04:7b:53:b4:c0:68:4c:94:39:75:bd:
29:d9:90:0f:de:32:ad:96:99:82:70:f9:0c:83:cb:45:d7:19:
c2:01:0f:bc:7c:71:e8:0b:f7:b5:53:ea:61:ab:9f:ac:25:b7:
27:d2:31:2e:50:6f:cd:1b:0c:db:71:a0:59:75:85:ff:7c:57:
3d:ff:3c:89:0b:e5:e7:f2:35:c5:29:59:25:e1:b7:c0:c7:70:
40:ca:fb:9e:58:9a:d8:15:ea:3f:1c:85:0c:3f:f0:70:73:1e:
cd:82:c3:88:95:98:2d:ac:e5:4d:34:96:6d:de:96:cc:d6:66:
57:bb:8d:ce:06:4b:8e:c5:87:61:af:ef:bd:b7:49:98:b7:6a:
17:4c:30:1c:f5:44:8c:54:46:19:e1:bf:ce:d9:e2:a8:24:f9:
37:b7:53:c8:7c:ed:dd:c5:1b:55:c2:0b:52:3d:f0:c8:9c:ca:
12:bf:d2:42:20:26:15:e0:c2:9d:b1:40:4b:81:d4:6a:97:69:
bf:f9:57:44:0e:2a:1e:e8:11:a4:29:44:08:29:b8:20:c7:34:
45:6f:f7:d2:58:b9:b5:79:33:c6:eb:52:83:a2:96:16:f5:a1:
9a:a4:2e:77:77:0e:e6:7b:10:06:56:5a:a5:5a:22:ae:c1:54:
ee:5e:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:04 2026 by rpki-client