
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json)
Hash identifier: huaK9aWe/UBvJpe07Q1bhh8SQk5CTHSCcLQddgkNYqg=
Subject key identifier: 72:A6:A1:DA:03:6A:2C:F3:93:65:B3:F6:4D:50:27:3D:13:AD:CD:A4
Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Certificate serial: 076E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
Manifest number: 0765
Signing time: Mon 02 Mar 2026 00:06:55 +0000
Manifest this update: Mon 02 Mar 2026 00:06:53 +0000
Manifest next update: Mon 09 Mar 2026 00:06:53 +0000
Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: IvU2UGWHunLp8sQE2GWIwbexQWh7CamuHGbpExPnD84=)
2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Validity
Not Before: Mar 2 00:06:53 2026 GMT
Not After : Mar 9 00:06:53 2026 GMT
Subject: CN=69a4d49e-38c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:01:28:63:6b:af:15:52:df:b2:f3:7d:51:
d8:32:af:ac:fd:b2:3f:c8:31:ce:6b:8e:d7:bd:cb:
20:1d:32:84:90:9e:52:b2:bd:25:02:17:6b:5d:be:
18:8f:de:44:0b:4f:c8:23:26:cd:62:7b:2e:07:cc:
f8:39:e2:c6:7d:11:fe:8c:55:91:9d:c4:6e:6a:cf:
4b:80:6b:20:1e:50:12:6a:8a:98:9d:b5:0f:63:a3:
75:78:b1:da:72:48:49:50:dc:c6:91:9d:a5:43:ca:
00:fe:86:2b:80:d4:49:8b:18:5a:77:67:d2:e8:b9:
f3:95:81:e5:bb:a8:30:94:61:12:1d:36:05:5c:f6:
d0:0c:25:59:41:f8:ec:6f:68:c1:f0:13:8f:17:7d:
a3:3e:1a:d7:cc:c4:66:64:f3:dc:5c:ef:54:fd:48:
c8:c6:49:ca:77:08:9c:59:12:82:5a:6c:06:fe:f1:
8e:75:f8:b3:c2:ff:4f:1a:fd:5e:ef:58:8e:a1:45:
65:1f:87:fb:45:f5:1c:09:60:cb:33:d5:d2:d0:d1:
a4:aa:a6:2f:79:d6:7c:93:95:ee:0a:80:80:46:c1:
02:a1:39:2f:64:a1:f0:39:f8:e9:05:ef:de:2d:e0:
39:c0:b2:ba:02:6d:0a:4c:d5:18:9a:ca:ce:24:f8:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:A1:DA:03:6A:2C:F3:93:65:B3:F6:4D:50:27:3D:13:AD:CD:A4
X509v3 Authority Key Identifier:
keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0f:3d:b3:a2:b5:30:a2:28:ab:4b:cd:68:6c:f5:1b:30:e0:
db:2f:90:6e:82:6c:28:2d:5e:23:3b:92:18:8f:85:20:91:d8:
71:d8:41:be:02:66:65:a0:d9:a7:26:70:98:49:b1:d5:08:11:
03:12:31:13:df:b8:c9:42:28:e1:e1:e6:0f:83:02:9b:c8:5b:
b2:77:43:7b:dc:8b:7d:37:01:cb:4d:67:22:68:6a:6e:c2:93:
fd:43:2d:c7:7f:73:bc:40:c6:82:15:f4:bd:a9:79:c3:d7:ba:
43:c7:6e:2b:5b:e0:cc:c0:6a:c7:fd:f3:9d:80:af:b3:2c:d8:
62:70:e8:cf:af:dd:fc:3d:f4:c3:e1:da:c0:14:f8:22:0b:cd:
80:0a:ef:a2:43:27:c5:62:a5:00:09:29:ae:ea:e3:63:cf:d5:
53:f6:83:27:40:f3:3d:3e:49:47:f5:81:ef:49:8a:e2:72:d2:
7e:55:7f:73:e3:e7:64:f0:2b:d8:12:9c:32:c9:8d:e6:3e:d2:
ab:19:1b:ac:93:e5:33:9b:fa:f9:22:da:82:8d:6a:9c:d6:5b:
37:57:76:10:e9:a0:cc:3b:a0:81:64:79:c3:59:07:86:ab:f3:
a3:6c:ac:54:d9:f2:94:ee:ce:1d:73:2e:12:bf:c6:d8:e8:0e:
d4:9e:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:58 2026 by rpki-client