
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json)
Hash identifier: XQkcd1lPXZUv3Xvqbaj5L5x0ISIuZ7ftRrYSm3FDNEY=
Subject key identifier: 45:05:30:A4:FD:03:6F:8D:63:89:BE:D1:02:4B:09:F5:16:71:27:35
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial: 17C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
Manifest number: 17AA
Signing time: Tue 06 Oct 2026 16:35:20 +0000
Manifest this update: Tue 06 Oct 2026 16:35:19 +0000
Manifest next update: Tue 13 Oct 2026 16:35:19 +0000
Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: Wt2lJhJN2T/ogy65Z+7/sed67ZmmCEOZlJzIocBUG8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6083 (0x17c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Validity
Not Before: Oct 6 16:35:19 2026 GMT
Not After : Oct 13 16:35:19 2026 GMT
Subject: CN=6ac52347-7295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:5c:d0:36:35:aa:b1:94:69:d2:df:9d:ed:
ea:48:70:74:9e:cc:d4:42:6d:5b:29:7f:53:ee:c8:
7c:02:2e:81:95:7a:d4:b3:b4:1a:15:56:95:b6:0d:
70:4d:79:37:e8:1c:b1:f4:26:dd:63:3c:1a:4b:b3:
31:0c:be:83:c0:e0:63:76:ec:f5:52:06:4d:df:59:
59:6c:c7:5f:71:9b:43:21:8c:6b:5a:52:86:47:13:
56:6c:80:74:bb:f1:f1:e3:30:8a:8e:b2:52:7b:39:
b8:ae:96:73:9a:1d:80:fe:08:37:a4:63:18:a0:3a:
e9:9e:ae:53:c1:c6:c4:2f:1a:9f:14:d4:14:8d:ac:
2c:0d:1d:f1:f4:e8:7a:07:7f:03:fa:26:b2:d4:be:
a9:88:68:bf:f9:6b:92:e1:62:d2:2b:c5:3f:90:f9:
d1:51:73:bd:3f:33:5f:31:25:af:d0:8f:28:61:83:
a7:4f:da:7b:1a:30:71:6e:48:80:31:8a:65:62:86:
30:b7:cb:e6:50:36:96:bd:ba:1c:e7:8f:c2:29:1b:
d3:f9:93:fc:cb:e1:fc:26:4a:b1:aa:b3:51:51:c7:
ff:b6:a4:6b:bf:3d:89:d9:a0:01:b6:af:5f:5a:fa:
64:b2:ff:c2:7a:45:e9:71:c7:25:c0:13:5e:75:72:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:30:A4:FD:03:6F:8D:63:89:BE:D1:02:4B:09:F5:16:71:27:35
X509v3 Authority Key Identifier:
keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:e9:b4:bb:61:dd:26:40:40:4c:ea:b0:bf:2b:7f:7e:06:0c:
b2:9f:1c:d5:9a:8c:1f:40:29:63:35:d4:85:fb:77:cd:d9:dd:
fd:ef:6d:7e:7d:37:13:4f:4b:55:69:3a:a3:11:bc:e2:fb:17:
6c:bb:b1:b4:14:81:4f:b5:0f:c8:62:d7:17:d1:27:3b:f0:25:
31:b4:76:c4:4d:c0:8e:d2:09:5f:04:a3:c9:b5:f3:90:7a:9c:
2e:43:e9:0f:71:10:57:1b:52:34:4e:e9:d7:56:ad:35:f5:e5:
51:a2:f9:76:22:91:e0:4a:a3:56:0c:2d:5b:94:91:cf:eb:6f:
59:1c:c7:66:fa:3f:4b:76:e8:4c:1a:f7:ee:05:94:4c:6d:c3:
0c:61:69:ce:1d:9d:f6:50:7f:4e:e9:a5:fb:18:e0:2c:13:e3:
78:74:1a:4a:c0:48:a7:59:2c:aa:3c:56:9a:cb:84:7b:92:6c:
8f:c7:70:da:40:f7:30:84:30:09:e3:9f:15:6d:54:c9:8b:54:
83:78:51:2d:bf:10:29:49:fd:d6:b5:92:0a:e6:38:ea:7e:66:
75:63:e6:72:23:81:c5:45:bb:25:2d:ff:61:fa:fb:9f:7f:a9:
8b:b8:25:3c:3b:f3:08:57:af:b7:4b:36:9d:20:77:19:0b:ec:
17:c8:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:50:10 2026 by rpki-client