
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json)
Hash identifier: 0STi/bCakld9X4t0/ytw5QBdqu0bJ7/Y1VIWJNA3zY4=
Subject key identifier: 1D:9B:BF:44:BB:A4:99:03:C0:76:87:AF:DC:3F:21:99:BE:7E:BE:06
Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Certificate serial: 2028
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
Manifest number: 2018
Signing time: Thu 16 Apr 2026 15:55:22 +0000
Manifest this update: Thu 16 Apr 2026 15:55:22 +0000
Manifest next update: Thu 23 Apr 2026 15:55:22 +0000
Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: 7qPvdF2OYmRPrAcgW52Rck8+Ib66GHI+9YjeFHH/dW4=)
2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: f53n49BRZ+a4OFczbu9IHjhQmjnGPixaP4vK3+8G2j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8232 (0x2028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Validity
Not Before: Apr 16 15:55:22 2026 GMT
Not After : Apr 23 15:55:22 2026 GMT
Subject: CN=69e1066a-db35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:63:1a:aa:1e:e2:e9:8c:33:8e:a0:63:93:
12:11:33:c2:14:a8:44:5d:87:d8:4c:ab:7e:86:3d:
aa:65:9c:b7:6d:e3:82:a6:5f:ff:6e:3b:96:da:26:
f1:52:e1:6b:d7:db:7c:fa:34:67:4f:c5:49:b6:f6:
3b:0a:6d:8f:b3:6d:1c:5a:45:cf:40:41:79:10:44:
70:0f:a4:4a:8f:5c:b5:bf:8e:aa:26:b0:bf:e1:be:
0f:20:80:69:b0:6d:4e:ab:59:ca:6c:61:fc:73:67:
58:17:dd:76:7d:5f:72:15:c4:68:9d:7c:53:81:ef:
45:8b:af:f7:a4:d5:64:44:db:d8:c7:2e:fa:37:a5:
8a:f7:cf:b7:1c:37:83:9d:49:fc:d5:54:6a:ce:01:
65:c0:25:f6:ee:d9:29:2b:78:6d:a4:93:fa:f3:0d:
02:60:20:e5:d2:70:c9:32:4b:c7:74:8d:98:38:8b:
76:9e:3f:5b:13:13:bf:5b:26:e5:fd:ae:c7:b3:c2:
01:1a:91:8c:01:0f:d8:e3:6e:e8:4e:ee:97:cd:74:
42:1d:29:2e:f6:94:7b:43:24:71:76:87:5e:d9:87:
3c:ce:2f:c9:a1:26:ca:3e:04:c9:3a:9e:de:08:25:
65:f1:1a:70:47:8d:bf:2f:7d:fd:46:1b:b7:7d:bb:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:BF:44:BB:A4:99:03:C0:76:87:AF:DC:3F:21:99:BE:7E:BE:06
X509v3 Authority Key Identifier:
keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:4b:44:83:d4:5d:5d:be:c1:6d:52:6e:4c:f9:4d:f2:a2:2e:
38:3d:12:aa:34:ce:25:55:ce:7e:bb:d4:21:7e:be:07:f7:5c:
c7:b1:f6:56:72:40:10:d0:e7:76:47:25:55:ae:2b:1f:c1:5d:
8f:3a:df:85:68:42:99:23:c4:42:40:d5:a2:e7:dc:dc:f2:05:
fd:a1:0b:93:c1:a4:11:56:94:35:af:8a:c4:2e:cc:b4:99:7d:
3c:74:4a:88:cf:b0:ff:4d:f6:58:5a:3f:d2:bf:18:08:b4:a2:
b9:bb:6f:8c:a4:53:a7:32:a7:dd:6f:aa:99:b0:ca:d2:3e:f6:
a0:2a:0a:29:ad:32:73:79:e6:bf:ef:e1:23:22:b3:d6:ce:38:
19:9a:77:83:27:83:92:4a:64:04:b3:98:f4:0d:57:2b:62:fa:
9c:1c:2f:c0:c6:07:6c:c4:d9:81:35:3f:de:15:85:6f:d2:36:
80:64:46:9d:c7:6a:89:ca:14:cc:75:c0:b7:b6:a1:76:a0:58:
9f:0b:df:75:52:b5:ab:ba:3d:2a:e7:ae:60:fc:f0:0b:3b:67:
46:ce:3c:42:9c:6a:02:84:13:67:43:87:fe:a7:6b:ed:2d:c8:
39:b7:56:8e:dc:6f:3b:06:fe:ad:dc:f4:ca:b1:fd:5e:99:70:
26:a1:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:52 2026 by rpki-client