
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json)
Hash identifier: Qs7siFSZMOnoNXuTviWtAcZyJh7kNJuvylorg67qY50=
Subject key identifier: 6C:6B:7D:6F:FD:CE:A2:4C:25:50:52:7E:0F:D9:C9:85:1E:FE:A5:7A
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
Manifest number: 0183
Signing time: Sun 01 Mar 2026 05:32:18 +0000
Manifest this update: Sun 01 Mar 2026 05:32:17 +0000
Manifest next update: Sun 08 Mar 2026 05:32:17 +0000
Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: /8ouV1qux3pqFypicsFyH5UmQDP17YADKZd4CO8Y3to=)
2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Validity
Not Before: Mar 1 05:32:17 2026 GMT
Not After : Mar 8 05:32:17 2026 GMT
Subject: CN=69a3cf62-a91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:9f:4b:09:7f:c9:de:96:16:82:16:8f:d5:
38:31:4d:e2:60:29:9c:0a:3f:76:ed:ea:73:65:57:
fd:1f:a9:a5:31:2c:95:bb:36:08:1d:97:70:22:f5:
55:19:55:ab:78:a6:04:4d:76:2d:04:7a:a5:f8:fd:
f0:96:e6:0f:b1:aa:bb:75:33:26:23:da:ff:bc:2c:
01:dd:20:6f:b5:a8:ef:f7:a5:01:99:5a:93:45:59:
89:66:0e:9c:0e:45:65:2a:dc:ca:2a:3d:95:67:27:
3b:c3:55:70:03:15:2f:a2:51:fc:15:bb:af:05:79:
71:66:b8:d1:2f:b6:9f:86:98:40:2a:dc:62:31:ed:
f9:82:a6:8f:d1:b3:6e:f7:cf:5e:36:47:28:d8:d0:
81:c0:2c:15:0e:15:ff:41:32:10:9b:9d:a5:7b:07:
77:96:92:11:4f:0c:64:e9:51:aa:98:15:c9:e0:14:
c6:ae:b6:be:f4:ca:d0:1e:e2:66:59:15:d8:da:f5:
ab:14:c5:f0:10:4d:c3:5e:ea:a7:55:e0:64:9b:1c:
44:26:d5:2c:fe:fc:17:aa:36:ea:87:f8:2d:ff:54:
12:3b:f3:3f:56:59:de:67:47:ab:ca:0d:7d:43:6e:
ac:b7:71:c9:47:52:b6:74:47:90:25:72:f9:2a:5d:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:7D:6F:FD:CE:A2:4C:25:50:52:7E:0F:D9:C9:85:1E:FE:A5:7A
X509v3 Authority Key Identifier:
keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:77:59:d6:1f:1b:74:93:fc:44:e8:51:6f:4d:08:34:e6:32:
e0:06:5b:4b:da:88:66:6c:64:7a:54:38:5e:68:b5:25:bb:35:
56:60:45:f2:b0:3f:68:da:6f:6c:d6:7a:a8:6f:d8:3e:cf:98:
cd:79:8e:90:19:fb:f6:54:2a:17:43:0a:47:e8:b0:62:7c:c7:
51:e5:b5:dd:5d:1b:d9:67:93:6a:ca:d9:36:ba:ea:e9:05:21:
78:04:bf:65:c6:6a:d2:d7:24:e7:48:3e:b2:0e:a3:23:fc:27:
fb:43:24:03:f9:bd:e9:20:9f:d4:fd:00:c6:a2:97:c7:ae:e4:
f3:c4:f2:04:ec:2e:89:3e:23:15:e6:45:79:4b:7c:83:a6:3c:
78:fd:d3:15:ad:4b:2c:bb:99:b1:83:d9:15:2f:ea:cf:3c:04:
db:7f:6b:8e:42:3d:2a:70:fe:de:43:b0:7f:a3:65:b3:6f:04:
ea:4e:3d:48:bf:01:13:1f:89:42:f5:7b:c7:d0:2d:84:c5:53:
0c:c1:7a:1c:89:0d:bd:c3:51:e4:0f:a1:26:76:1d:64:97:ae:
cd:03:a6:7a:bb:1f:ed:5e:2d:9f:af:27:cd:f4:57:32:98:db:
08:c3:10:cf:4c:0b:aa:9f:7c:0d:c5:fd:7f:34:f8:b4:de:21:
5b:df:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:11 2026 by rpki-client