
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File: Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier: vQwkh31/Yvrn8YHwSmHnO91mEX8IH8Rxp/PdstRE844=
Subject key identifier: 56:6C:73:EE:41:74:74:6B:45:F4:8A:67:A6:70:42:0F:10:0B:41:ED
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer: /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number: EA
Signing time: Sun 01 Mar 2026 07:32:06 +0000
Manifest this update: Sun 01 Mar 2026 07:32:06 +0000
Manifest next update: Sun 08 Mar 2026 07:32:06 +0000
Files and hashes: 1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: C2JfYVlsQBtITYDzovAC5H3sJDCMaN1XAE45WDu2BC0=)
2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: CDlWFm2LtxVmYaaBC5EKvKez8sI4jo8CXca3FR8eDpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Validity
Not Before: Mar 1 07:32:06 2026 GMT
Not After : Mar 8 07:32:06 2026 GMT
Subject: CN=69a3eb76-c7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:44:14:93:6b:f7:85:2c:b5:a5:e5:f8:29:
c8:9b:6d:7b:fb:e2:56:74:22:0d:67:19:59:62:17:
cf:c0:c1:9c:f9:b9:af:33:cd:51:85:02:0d:98:3a:
59:62:77:ee:7d:75:c6:1b:11:08:1a:be:08:76:da:
60:84:a2:32:ad:0f:68:46:22:63:fe:87:fd:45:e8:
64:b5:46:12:5f:98:e6:03:de:89:cc:e2:32:13:07:
7c:25:ac:ef:1f:e1:46:d4:c6:a5:85:2c:69:d5:5b:
83:f6:37:c2:e8:6d:e3:e6:bb:15:a7:0f:f8:ca:3b:
28:0c:19:09:5f:91:33:e9:02:95:da:27:88:eb:29:
ba:63:9b:9c:12:6c:8e:cd:aa:dd:f6:30:2e:9c:22:
40:b1:06:b6:5c:06:2d:55:ff:7b:47:16:99:e8:ae:
fc:9c:8a:c8:f1:80:ec:69:b1:0e:6a:44:9a:c8:41:
75:31:26:53:cc:de:63:d0:86:e2:4c:58:cf:94:e3:
34:27:d6:ea:94:f8:14:30:2f:ed:03:96:f9:51:f8:
62:b6:c6:fb:fa:cb:40:78:05:3e:7c:e0:36:f9:ca:
dc:19:46:99:64:dc:b7:4c:f4:54:c8:6b:e7:22:5d:
97:39:15:7a:d0:01:6c:49:e2:72:d4:16:cf:43:2c:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:73:EE:41:74:74:6B:45:F4:8A:67:A6:70:42:0F:10:0B:41:ED
X509v3 Authority Key Identifier:
keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:34:74:2d:15:9f:02:31:91:f4:4a:59:d0:1b:a0:ed:39:ce:
37:1d:2a:8a:10:25:52:ad:7e:68:59:a6:71:42:4d:e4:6d:17:
30:50:68:01:0d:3a:16:8d:7f:30:67:9f:9c:33:a0:09:90:9b:
ca:d9:c3:35:3b:2d:18:4a:10:e5:ce:34:a4:cc:00:c0:b0:6f:
3a:8c:87:8f:97:12:b4:f2:bd:4b:9f:76:c9:8a:fa:88:a1:61:
60:bd:2c:d2:51:c2:f8:7e:2b:e4:95:ca:f8:23:8f:d0:5b:28:
13:1b:f9:30:e7:ae:9f:f5:2a:3e:7a:c9:8b:97:c8:a8:90:f8:
c4:82:87:e8:81:51:a0:c9:16:26:80:85:25:d8:cf:f9:e3:81:
2e:fe:cc:13:3f:14:6a:39:36:29:88:f5:b6:82:3e:16:4f:91:
fa:47:25:76:b4:66:7a:11:ea:6b:7d:df:7d:88:f5:17:e9:e0:
7a:24:5a:c2:23:f5:cb:65:7b:e5:6c:b8:fd:5e:65:db:fd:bb:
8e:95:d4:ba:a9:0e:a8:58:cb:ac:7b:29:28:8e:8c:38:09:ad:
bd:98:dc:98:4f:ef:be:e8:f1:b6:51:d5:1d:cc:08:24:67:30:
e8:3d:64:b0:3d:39:d9:24:c8:7b:45:4b:3f:41:de:57:35:3d:
c1:df:a0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:30 2026 by rpki-client