
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json)
Hash identifier: nzZW03Q89bfeSLuFT1h7RUHTlRc+78NJqcp2F9FFoi4=
Subject key identifier: FB:32:CF:66:64:E3:6C:91:6A:55:0E:30:7D:03:81:77:50:F5:49:1D
Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
Manifest number: 01BA
Signing time: Fri 17 Apr 2026 03:40:56 +0000
Manifest this update: Fri 17 Apr 2026 03:40:55 +0000
Manifest next update: Fri 24 Apr 2026 03:40:55 +0000
Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: QpmKRgi0CcWv/aV14S1/ckY63rG6dlAA1uyzCglhKno=)
2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: 1aZS6GVDT8XLp2PVm8+KUbofZBNmULZCxlUKWTFCqkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Validity
Not Before: Apr 17 03:40:55 2026 GMT
Not After : Apr 24 03:40:55 2026 GMT
Subject: CN=69e1abc7-f647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:bc:7c:33:55:62:ea:4e:83:a4:e4:9b:68:
9e:74:e9:72:05:2a:d1:7e:d0:1e:57:50:12:20:34:
82:25:2d:54:c1:c2:0f:97:50:4c:97:d3:64:a6:20:
9d:11:dd:d8:27:0e:54:7d:84:9a:5a:da:50:ee:06:
ef:56:21:50:93:4b:bd:0b:af:76:f9:38:98:81:e3:
14:6f:77:64:b5:b4:42:a7:64:83:e0:a9:7e:82:89:
4c:2c:51:51:d1:4e:5f:bc:af:8c:ad:b9:f3:58:72:
0c:07:c6:08:d2:04:cd:48:18:bd:c4:ad:60:9f:64:
34:be:5c:d6:21:90:ab:e5:35:23:ca:4a:35:7a:9b:
3c:5c:a2:26:66:91:26:60:0e:ca:9f:87:60:4e:05:
18:a4:37:dd:c1:8f:56:a1:fd:d5:58:9b:45:d9:81:
92:86:c5:d8:3c:28:8f:68:2f:c1:18:b9:c5:7a:19:
b7:f4:94:46:34:9c:90:7a:30:81:48:45:3e:bd:aa:
65:d6:bf:78:93:d5:76:ab:83:00:ca:ea:c5:94:74:
14:00:ad:24:ce:1b:00:e9:d4:05:c9:71:97:8b:4e:
f7:b7:68:6d:19:90:0a:50:a4:a6:fd:3e:a7:22:cf:
c4:81:d3:df:df:2f:99:3d:8e:d4:37:51:33:ec:85:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:CF:66:64:E3:6C:91:6A:55:0E:30:7D:03:81:77:50:F5:49:1D
X509v3 Authority Key Identifier:
keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:04:c0:f5:06:01:78:45:e3:4a:b1:68:e7:63:bf:d0:94:6a:
33:e9:75:9c:85:ae:d1:41:83:98:3a:1e:69:ab:44:46:91:6d:
29:bb:d5:4c:c7:12:11:82:29:7f:88:fe:b6:26:95:cc:5b:4b:
48:cf:6d:47:73:9a:b0:55:9f:3a:83:d8:5a:41:dd:80:78:53:
31:3a:dd:92:5d:5e:32:18:19:4e:5f:51:70:bf:18:dc:ca:e3:
48:fb:3b:23:a2:70:8a:9d:b4:9e:ef:95:22:88:ed:d3:80:36:
5b:19:cd:d0:82:e5:75:db:58:c7:3b:a8:41:8b:4b:9f:3c:73:
7d:98:cd:96:49:fc:3f:83:69:1a:17:f6:a6:04:5f:f7:8b:d6:
3d:f6:84:79:64:b3:9d:93:6e:4a:8f:f6:f4:4a:ce:aa:99:d5:
23:62:2b:a3:da:50:e9:cb:ef:ad:08:fa:6e:0f:91:94:0a:4f:
a2:e0:f6:96:fc:a6:a2:20:f8:88:9e:83:c1:d2:fa:e3:9a:29:
ad:27:65:d2:07:92:5e:f1:91:f6:84:f5:fd:cf:76:a8:fd:67:
47:8c:b8:5b:06:b0:80:8e:d6:6c:2e:63:bc:23:25:c9:c5:a1:
2d:1b:db:f2:00:a2:6a:2e:27:1c:9a:f6:d0:88:ae:89:24:58:
ca:47:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:52 2026 by rpki-client