
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json)
Hash identifier: nDhCgU4Fxo5cNIzVz01pp4KBZKqZBF18hQo+zYW+OK0=
Subject key identifier: 29:8E:F5:B9:C8:BD:35:68:45:FF:B3:C0:76:3D:E2:17:C5:E6:E7:3D
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
Manifest number: 01D2
Signing time: Wed 29 Jul 2026 04:53:55 +0000
Manifest this update: Wed 29 Jul 2026 04:53:55 +0000
Manifest next update: Wed 05 Aug 2026 04:53:55 +0000
Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: RxjfeoAuGHYTFjtCT/bCW9LbgYHRjIS1SMPA07wy0nA=)
2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: wp5Bbdm9q2bQP+NH3qhWvc9NbTFLA+VfDHmL/JL9bns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Validity
Not Before: Jul 29 04:53:55 2026 GMT
Not After : Aug 5 04:53:55 2026 GMT
Subject: CN=6a698763-5aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:2c:ae:42:8c:ae:1d:99:96:d7:96:de:30:
c1:09:5f:12:75:41:f2:f3:a8:0b:3f:d5:ba:26:ad:
01:41:48:50:85:50:bf:c5:77:9a:14:02:31:75:28:
85:0f:80:01:76:e8:2a:4b:0c:21:99:c7:52:c3:72:
27:5c:44:f4:ee:ec:dc:07:82:1f:1b:8c:c3:95:29:
70:79:41:72:88:d4:04:ae:27:b0:5e:ee:20:3e:9c:
42:fa:84:df:d3:37:ab:af:54:d7:0c:a0:35:d1:ad:
14:9c:18:99:11:3f:e5:72:94:1d:f0:07:a9:0f:95:
dd:4f:d2:68:d7:db:26:9a:c2:bd:27:24:95:ce:ea:
c6:d4:66:fa:5b:bd:75:76:d1:b5:1e:f3:d0:72:09:
7f:c5:ac:8e:62:a9:3f:6f:56:71:b2:8d:b3:93:a1:
a3:10:6a:9d:33:37:12:b8:49:b9:3e:80:64:0a:41:
61:dd:f7:0d:0b:00:23:1f:dd:4f:43:a5:97:03:65:
e1:ac:07:cc:11:96:87:97:6a:09:a8:00:a4:26:5c:
7b:c0:34:81:9b:79:c8:76:bb:85:dc:18:1c:0c:f8:
93:7d:d7:cc:dc:e0:ae:48:22:e4:6c:77:c0:82:4d:
2a:e0:08:db:6b:c6:c7:4a:07:f6:7e:59:50:50:f7:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:F5:B9:C8:BD:35:68:45:FF:B3:C0:76:3D:E2:17:C5:E6:E7:3D
X509v3 Authority Key Identifier:
keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a9:fe:30:0c:3f:2b:92:c3:2a:13:5a:0b:f9:1b:58:92:2d:
96:b9:25:c1:95:f9:c5:dc:46:51:2c:40:88:d4:af:a2:33:3f:
57:d7:3d:36:70:d9:12:2d:5f:95:d6:ef:5c:1f:30:67:8c:72:
e0:67:37:06:ab:5a:3a:09:67:23:b0:de:3b:dd:40:b1:85:d4:
e7:44:aa:fd:2e:c9:bb:3e:c1:c1:0a:12:f6:70:b7:bd:9c:fb:
56:d0:bf:5a:28:7c:42:58:10:b9:0d:4a:e9:64:a6:a8:1a:4a:
f3:34:92:26:7f:63:e9:4d:dc:8f:8e:7c:97:72:86:0f:dd:c2:
b9:ec:f0:1d:7b:ab:f1:e1:6a:53:4c:7a:83:45:25:aa:21:7c:
ed:42:d6:b5:01:b9:89:b0:71:b3:a8:54:a1:0b:f7:ab:b1:c1:
cd:dd:52:3c:46:d2:45:ca:86:a5:55:ea:5f:ef:81:7b:d8:c9:
e1:9c:b1:b5:29:0b:5f:cb:0d:bd:a8:c8:51:76:d5:c8:bd:21:
b8:82:f9:3f:49:63:40:94:ac:8d:24:28:e5:1d:f3:76:b1:1b:
fc:86:d2:fe:58:54:cc:39:90:5c:33:3f:69:34:23:01:ff:0b:
b0:b2:4d:a1:ad:b4:a3:c7:aa:17:ca:13:ee:1b:c5:4e:43:2b:
4b:ea:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:34 2026 by rpki-client