
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
File: KUHHFh7UouCbuRyrxEPIzLwDLtg.mft (raw, json)
Hash identifier: 0tR2fL5kiv3g4h0sUeH60HjoYp2HEpRk7X8CDLF3JmE=
Subject key identifier: 38:9B:DC:00:44:95:37:EF:FA:ED:F6:F0:87:07:F7:59:01:F9:58:03
Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Certificate serial: 351F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
Manifest number: 3518
Signing time: Sat 28 Feb 2026 14:53:30 +0000
Manifest this update: Sat 28 Feb 2026 14:53:30 +0000
Manifest next update: Sat 07 Mar 2026 14:53:30 +0000
Files and hashes: 1: KUHHFh7UouCbuRyrxEPIzLwDLtg.crl (hash: Y6KtM90vY/nKIOt43Mb9wpKhKfxpGVNovJ0OCzxISrM=)
2: 796A04A6BA1A11F08C920A83C4F9AE02.roa (hash: XrkdqNUQGwomIdIUUZC2gUbbnUvFxDZ/p2osIbne7lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13599 (0x351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Validity
Not Before: Feb 28 14:53:30 2026 GMT
Not After : Mar 7 14:53:30 2026 GMT
Subject: CN=69a3016a-b277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:83:3e:42:ec:ae:cf:26:4e:93:99:ed:47:
77:8f:27:00:20:ae:9c:da:9b:59:0e:90:6b:61:24:
a0:0b:19:dd:0b:6f:43:28:8e:25:8f:eb:32:aa:c0:
ef:79:52:3f:35:da:a1:67:0c:bc:cc:2c:5e:3a:c4:
ec:83:34:b7:18:84:03:d5:5d:8a:ec:a5:1c:a6:f7:
22:94:36:d9:6e:2a:3e:2e:a8:f0:d4:dc:1d:c9:2f:
ea:70:5d:02:d6:7b:ae:65:3d:d7:32:6f:60:cf:1f:
49:58:01:af:85:56:92:38:6b:bc:28:14:b6:f2:98:
bd:21:0b:06:78:3c:5b:bb:1f:37:6b:7e:da:16:f7:
ac:41:4d:f8:1b:41:80:89:44:d3:32:de:41:fe:6a:
77:3e:cb:86:78:86:2b:eb:03:2b:c8:d2:a7:24:ba:
4d:30:b7:17:08:d2:92:00:2e:7b:4a:0e:4d:02:ca:
67:83:16:71:3d:7b:04:6e:73:39:7e:e1:b8:59:d4:
46:65:d4:24:5f:bf:5c:b0:1f:7a:44:89:2f:61:df:
e7:bf:9f:8f:c1:76:4b:4d:ec:0a:74:30:53:32:4f:
f6:93:d7:7d:7d:ba:41:f8:55:51:28:00:5b:eb:3b:
ec:94:91:a8:f3:5d:b8:df:04:98:cc:2d:28:56:ce:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:DC:00:44:95:37:EF:FA:ED:F6:F0:87:07:F7:59:01:F9:58:03
X509v3 Authority Key Identifier:
keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:36:2e:c6:34:1e:12:28:4f:f7:2a:aa:e1:e2:e7:58:10:
52:e4:11:f6:a7:f7:20:26:1f:11:1c:80:b7:6e:c8:5d:a6:64:
0f:da:bc:73:f6:36:cf:16:1c:7d:bd:05:14:72:6a:4c:e5:61:
c5:65:df:cb:f4:32:ad:5b:da:1f:69:0c:9c:83:00:33:d6:a4:
7c:7d:4d:c2:18:66:fe:50:47:96:d5:62:f4:43:ce:7f:25:08:
a6:ac:bf:7a:13:f5:b9:cb:26:fe:2a:f1:26:32:97:15:f5:19:
0a:88:d2:47:7b:40:4c:24:00:68:8e:62:5c:f5:b8:19:da:c0:
04:4e:16:3d:6d:38:82:a7:9b:d9:d8:e8:26:0c:15:a6:86:7e:
52:0d:74:15:95:4f:ee:5a:45:c0:83:45:ab:02:bb:a6:c5:b0:
7a:0d:88:99:c4:ad:68:2a:b5:92:ab:5f:5a:c9:04:ae:1f:44:
ee:ec:6e:13:d3:c0:79:e3:0a:d4:4d:13:ce:81:e7:1a:4a:32:
3f:31:d6:8c:0f:67:4c:16:d5:d8:ea:e3:03:81:56:9e:76:59:
8f:2a:42:55:92:19:99:5b:7e:d1:37:86:54:80:3d:2f:56:67:
8b:f3:e1:94:64:71:f9:e7:b3:5d:34:d8:c6:51:85:0c:c3:6b:
8a:a8:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:20 2026 by rpki-client