
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File: Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier: 9vPTj2MtPAIhSC++cm46UsEOxJnXiTGfkdvCtJzc1Sk=
Subject key identifier: 67:A5:8F:29:73:5C:68:BF:0B:34:7E:43:66:F8:4E:BD:CA:6E:3E:14
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer: /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number: 0156
Signing time: Sun 27 Sep 2026 05:39:26 +0000
Manifest this update: Sun 27 Sep 2026 05:39:26 +0000
Manifest next update: Sun 04 Oct 2026 05:39:26 +0000
Files and hashes: 1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: kRxNbpdq97xMsPGx/kfiMxjGoETytgYvKvoiWd+r5X0=)
2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Validity
Not Before: Sep 27 05:39:26 2026 GMT
Not After : Oct 4 05:39:26 2026 GMT
Subject: CN=6ab8ac0e-dc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:f7:de:6e:1e:69:0b:43:da:01:5c:92:e0:
6e:93:d7:7f:e6:f8:5d:6d:3e:0b:a6:15:ce:b9:04:
2a:2d:5b:40:8b:c1:87:d3:c1:23:aa:45:19:3c:14:
d2:ff:8f:a9:42:3e:5b:08:5d:1d:3f:61:20:5c:d0:
71:70:45:51:c3:3c:1a:55:df:67:61:1c:37:3e:e9:
4b:09:5f:5d:8e:c1:2b:ae:10:9d:0d:15:d3:2f:25:
a7:4b:85:4a:15:6a:21:b6:ee:28:ec:25:64:90:1c:
85:80:88:d1:c5:43:ec:36:b2:3b:36:74:23:89:10:
3f:95:77:79:e0:06:5f:d3:ea:c1:4d:2f:05:f5:98:
d1:08:1d:0f:76:16:28:2f:5a:b5:a6:2d:d2:50:c2:
66:ae:4e:8d:49:a5:3a:99:74:a9:f3:ad:41:e1:ac:
52:29:1b:49:73:47:25:ae:7b:26:31:d6:24:fd:b0:
aa:e4:93:08:ec:38:d4:47:3c:3a:4b:6a:e3:d1:eb:
da:a5:f8:81:0f:ff:c8:78:72:e6:88:0e:1f:47:57:
83:3c:c0:bf:a5:4b:82:ab:2f:81:96:2b:7c:3f:ca:
fd:cd:87:46:ae:79:39:55:42:e7:2f:11:8c:02:39:
89:13:1b:ee:85:0c:0c:05:ef:de:f0:00:80:24:52:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A5:8F:29:73:5C:68:BF:0B:34:7E:43:66:F8:4E:BD:CA:6E:3E:14
X509v3 Authority Key Identifier:
keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:5c:14:99:72:af:30:00:2d:8e:98:bb:ae:8c:f8:cc:af:0a:
91:c8:df:0e:f4:71:3d:fa:cc:dd:0a:20:b6:84:74:ce:00:46:
a9:f7:4d:bb:45:82:4e:d4:e3:a9:41:97:95:85:39:8a:27:d9:
bb:ab:e9:6e:fa:9b:62:2b:1c:1e:f5:ed:ad:ba:83:7a:7e:1d:
39:2c:a0:6d:73:d4:d9:04:1c:35:df:b6:a3:eb:19:07:71:b6:
6f:c9:ad:f9:6f:45:be:89:c9:ae:51:af:37:dd:4a:02:74:e1:
a8:9e:d2:c9:43:ac:11:2b:26:98:f7:0a:70:15:bc:93:7e:e1:
4b:c2:15:d4:50:ea:a2:13:0d:05:9e:58:ef:1e:0e:8d:73:72:
27:40:c4:92:cd:84:3f:34:8e:f3:b8:5d:60:2a:95:14:9b:71:
80:e7:f3:5d:28:dc:28:52:8e:09:a4:16:fa:9b:a0:1d:9c:aa:
bb:b0:36:d7:ea:f8:89:e4:70:f6:e9:91:92:a5:c6:94:9e:5e:
a9:16:7b:8e:7b:14:f6:66:ed:b7:71:4b:c1:9c:b5:8b:f4:9b:
35:63:d2:5c:81:99:1b:ff:ea:81:e9:33:53:ae:5f:6a:ad:fd:
e3:70:13:36:4b:03:f6:aa:ba:bd:b9:57:fc:dc:28:6f:9d:9d:
6d:ed:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:28:22 2026 by rpki-client