
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier: kLW+1FdZHnt0rzSFBqNGAyTb3Vo98ANeb36e0hw+NPE=
Subject key identifier: 92:DA:8A:49:14:36:6C:05:78:FA:D3:9F:A0:9E:F3:C8:D3:E2:4E:7F
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial: 0448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number: 0441
Signing time: Fri 17 Apr 2026 00:09:33 +0000
Manifest this update: Fri 17 Apr 2026 00:09:33 +0000
Manifest next update: Fri 24 Apr 2026 00:09:33 +0000
Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: K5X1Nq8IQcuAnF2+yotA8LetiHgd/FGWwE7/XFSfTCo=)
2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: dHCif+Ldj0bWw7XW3VRYigHVgHSS9PTU4XO4u0HGdK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Validity
Not Before: Apr 17 00:09:33 2026 GMT
Not After : Apr 24 00:09:33 2026 GMT
Subject: CN=69e17a3d-8f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:b9:24:fb:48:e9:f4:19:0e:a4:a2:dd:c7:
f9:2e:39:a4:01:44:41:e4:54:c5:92:22:f3:44:fb:
c7:c4:68:a3:8a:be:fc:92:1f:14:e8:ef:cc:ff:fe:
e9:96:67:4b:ef:7a:a8:7a:e6:f9:dd:0a:02:89:ca:
94:7d:81:5d:4e:30:07:8f:f5:95:c8:3c:86:c1:23:
df:2b:cf:ad:34:33:f3:6c:68:d4:3e:52:3e:1a:ba:
f8:ad:17:8f:fe:10:8c:c9:3e:a2:19:33:cd:62:0b:
73:68:78:04:bb:6d:73:b9:d4:e6:4b:17:f5:14:33:
2a:7a:4e:f8:8d:d1:15:1b:12:92:fa:2a:0e:30:d1:
a4:3e:88:cb:fb:e6:43:27:37:5a:7c:ee:56:a6:83:
28:a8:e0:d3:49:7d:93:59:b0:6c:d7:d4:28:1d:d0:
45:11:d8:ce:54:7d:63:22:7c:ad:eb:fb:52:8d:55:
5c:7e:e3:be:92:d5:6b:af:ba:72:6e:03:72:5d:25:
54:cb:51:49:fc:83:45:94:ed:08:36:dc:50:93:6c:
ff:72:8a:5d:e4:3f:44:a6:2a:c5:69:18:9a:09:5c:
94:8c:16:b0:fe:70:22:fb:f9:01:9d:e9:77:80:0b:
ee:38:ea:7c:18:c7:e3:5b:8c:17:de:86:63:04:4a:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DA:8A:49:14:36:6C:05:78:FA:D3:9F:A0:9E:F3:C8:D3:E2:4E:7F
X509v3 Authority Key Identifier:
keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:32:75:de:6f:38:f5:2f:a6:50:e1:c2:51:ef:1d:78:50:37:
12:a2:82:b0:14:42:1c:4e:0f:34:8e:c6:d7:2d:f2:b9:2b:e4:
a0:56:72:d1:52:1a:bc:97:17:56:69:90:63:c0:64:8f:09:29:
6f:24:9f:bb:77:e7:74:08:76:43:44:b7:a8:50:51:1c:1a:a1:
7b:ba:a5:9e:6b:a6:5d:78:42:84:8f:90:07:17:08:b7:41:7e:
d6:80:1d:54:80:4a:eb:1b:2d:6a:34:24:56:e5:2d:1f:a3:1b:
28:7b:e4:6d:c0:41:8b:f3:51:a6:d8:91:b6:1c:c3:7f:ee:c8:
78:5f:93:ef:2b:ca:fd:ec:4f:7e:18:5c:e6:2f:c3:3d:c7:99:
d4:92:43:ff:f9:07:38:eb:18:5a:ba:71:bc:f1:7b:42:d0:eb:
9d:2b:e1:bc:07:d7:df:40:49:e4:31:9d:f5:a8:f7:1a:e9:1a:
e8:dc:f6:60:81:d0:97:a3:03:1a:9f:2a:88:45:a4:3b:aa:30:
45:40:7d:14:35:c8:c5:c4:2d:3f:4a:c1:2b:4e:c7:2b:17:2f:
70:53:da:7a:ee:8b:2f:01:87:d0:00:4d:de:a4:10:77:ee:3f:
8f:dd:a2:ba:7b:c4:60:8c:12:f2:f0:1e:3b:9a:12:fc:c5:f1:
0c:bb:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:11 2026 by rpki-client