
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json)
Hash identifier: qR7xEpdE5ZAfpeDR/xKZv4HpsHB+0IAQPV6kFQvJLvA=
Subject key identifier: 94:87:B3:5F:39:05:16:A3:EE:B3:FF:CF:C8:F8:EA:E8:CD:81:21:2A
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial: 179F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
Manifest number: 1786
Signing time: Tue 28 Jul 2026 16:39:28 +0000
Manifest this update: Tue 28 Jul 2026 16:39:28 +0000
Manifest next update: Tue 04 Aug 2026 16:39:28 +0000
Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: UHDIz2MW8k/OcLw1NYZrXVd9jX3h0HPcV3Fi2jmxj7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6047 (0x179f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Validity
Not Before: Jul 28 16:39:28 2026 GMT
Not After : Aug 4 16:39:28 2026 GMT
Subject: CN=6a68db40-2884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:74:7a:55:9e:ba:c3:bc:0c:61:fd:df:0e:
81:7d:c4:88:59:f8:2b:6c:ce:7d:ec:f4:3e:11:82:
7a:04:9e:b3:ee:96:cb:00:b7:68:53:2a:81:b5:b2:
60:3a:f7:91:b8:48:80:42:d1:2c:ac:67:d6:e3:c2:
1f:57:ed:cf:23:8a:36:85:a6:77:1f:6d:a8:db:8d:
d6:4f:13:0e:00:dc:90:95:4d:51:17:06:57:0e:65:
8e:ba:76:9d:40:da:0e:48:be:80:02:83:78:55:48:
b9:80:bd:cd:b0:ce:c7:ba:5c:7a:1b:1b:f5:8c:f8:
df:d0:a0:7c:e8:68:15:32:4f:ff:b3:68:92:16:a9:
62:ad:0f:78:fe:52:a9:61:58:45:3c:21:b1:d5:ce:
5a:e7:a3:d5:0a:13:17:ea:b1:76:af:9c:9c:22:03:
f9:86:36:97:dd:f7:de:28:ad:2d:44:7e:57:f7:d8:
34:de:d9:04:3c:ff:f8:c3:44:06:e3:99:9d:59:93:
4f:c2:9b:2d:ef:05:58:fc:4f:e8:b1:59:74:52:fa:
78:82:c2:1c:86:34:bc:df:8b:1b:e2:af:ab:61:2a:
67:23:d1:7d:37:48:88:12:8f:c1:d6:9b:46:cd:0d:
a8:64:70:01:66:10:40:5f:61:4b:12:08:53:b9:eb:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:B3:5F:39:05:16:A3:EE:B3:FF:CF:C8:F8:EA:E8:CD:81:21:2A
X509v3 Authority Key Identifier:
keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:20:78:68:3a:8f:08:3d:59:f1:a7:01:a4:db:91:a8:6c:04:
cb:43:09:39:0d:6f:03:f2:05:ec:c9:46:14:fb:0d:60:73:ed:
47:8b:7d:86:dd:b4:20:26:77:53:b3:7d:bd:db:51:c6:27:9d:
4a:14:f6:8a:3c:71:79:35:54:19:57:40:73:23:93:5f:7b:2c:
e4:42:47:ab:31:ae:69:b7:f0:78:7c:db:af:73:9e:cd:1a:21:
f1:12:77:e1:91:8e:b1:8d:42:95:01:98:07:77:e8:0d:8f:d0:
d2:ec:1c:26:ab:ea:c1:ac:38:13:75:f1:1d:7d:3f:6f:23:35:
cb:4e:45:46:e6:fd:ab:52:0b:71:80:d0:8a:6e:4c:2a:49:ad:
b8:0d:d4:52:cd:fc:40:a0:23:b5:52:67:c6:ec:b3:c6:93:c2:
bd:c3:c0:88:e5:ac:63:79:bf:4f:22:c4:9a:3f:57:fd:4b:47:
17:eb:7f:25:fa:20:bf:69:8a:5f:ef:c5:5b:80:2b:c7:ab:db:
f7:1c:3d:f0:0a:f5:d7:cc:02:3c:06:62:7f:88:8f:3d:b4:37:
ca:d5:3c:24:47:ad:3c:3d:96:98:f6:cf:79:ae:66:ef:9f:e9:
15:6f:0c:c4:4f:a4:5c:16:94:3e:d5:4b:17:17:a0:92:6f:9c:
71:e1:08:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw
QUVEREJCNkIwHhcNMjYwNzI4MTYzOTI4WhcNMjYwODA0MTYzOTI4WjAYMRYwFAYD
VQQDEw02YTY4ZGI0MC0yODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3nl0elWeusO8DGH93w6BfcSIWfgrbM597PQ+EYJ6BJ6z7pbLALdoUyqBtbJg
OveRuEiAQtEsrGfW48IfV+3PI4o2haZ3H22o243WTxMOANyQlU1RFwZXDmWOunad
QNoOSL6AAoN4VUi5gL3NsM7Hulx6Gxv1jPjf0KB86GgVMk//s2iSFqlirQ94/lKp
YVhFPCGx1c5a56PVChMX6rF2r5ycIgP5hjaX3ffeKK0tRH5X99g03tkEPP/4w0QG
45mdWZNPwpst7wVY/E/osVl0Uvp4gsIchjS834sb4q+rYSpnI9F9N0iIEo/B1ptG
zQ2oZHABZhBAX2FLEghTuesGkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSHs185
BRaj7rP/z8j46ujNgSEqMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE
MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1
MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS
UjlnQms5bDNEclVLN2R1MnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuCB4aDqPCD1Z8acBpNuRqGwEy0MJOQ1vA/IF7MlGFPsNYHPtR4t9ht20ICZ3
U7N9vdtRxiedShT2ijxxeTVUGVdAcyOTX3ss5EJHqzGuabfweHzbr3OezRoh8RJ3
4ZGOsY1ClQGYB3foDY/Q0uwcJqvqwaw4E3XxHX0/byM1y05FRub9q1ILcYDQim5M
KkmtuA3UUs38QKAjtVJnxuyzxpPCvcPAiOWsY3m/TyLEmj9X/UtHF+t/Jfogv2mK
X+/FW4Arx6vb9xw98Ar118wCPAZif4iPPbQ3ytU8JEetPD2WmPbPea5m75/pFW8M
xE+kXBaUPtVLFxegkm+cceEIoQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:16 2026 by rpki-client