
$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft
File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json)
Hash identifier: GGHK8Nar/SkqRxaREmMTPDvR0AhfsGSaboFzZVv22bw=
Subject key identifier: 8E:1F:BA:72:55:8B:48:C6:2A:8F:64:02:EE:CC:D7:60:50:FF:2F:E6
Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9
Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft
Manifest number: 94
Signing time: Wed 25 Mar 2026 06:42:08 +0000
Manifest this update: Wed 25 Mar 2026 06:42:08 +0000
Manifest next update: Wed 01 Apr 2026 06:42:08 +0000
Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: dthXNL3V+koE08FCXP7wCbGH4lVxQFG/hzq/81mN1uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl
rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9
Validity
Not Before: Mar 25 06:42:08 2026 GMT
Not After : Apr 1 06:42:08 2026 GMT
Subject: CN=69c383c0-545f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:36:0b:e7:0e:3b:f6:d3:3c:2b:14:c0:ef:
ef:c5:83:19:2b:17:b4:39:89:44:a5:73:98:b5:66:
60:22:ff:c9:9b:5b:73:4e:ff:f4:b1:58:7c:b5:ec:
65:a0:6b:79:da:09:41:55:ff:e9:c1:c2:d1:3c:08:
75:9d:b6:02:3f:bc:61:3b:32:22:88:ac:51:c1:4c:
76:11:c2:cb:8b:f6:59:84:4b:1d:1d:19:25:f9:e5:
b3:d4:35:c2:29:70:e3:59:ff:4a:9b:b1:e9:e9:24:
ed:ee:47:87:a0:da:04:e9:e0:7a:77:48:91:56:2d:
48:64:a7:f7:2d:6e:dc:82:27:7d:96:f8:fd:b9:f3:
2c:56:da:e5:66:2b:55:71:70:7a:5b:82:ea:47:a5:
5a:53:05:ea:f0:d1:db:e0:96:b3:2e:a6:b1:2e:c9:
5d:1b:a8:8b:81:19:22:55:f1:fa:ad:5b:db:aa:b3:
16:69:47:8b:37:60:f3:00:ae:a7:55:0c:92:59:7b:
dd:42:40:17:5a:94:1b:a5:b4:38:6a:59:0f:d5:e4:
0b:eb:e9:7d:22:8d:62:13:f8:f1:cd:a1:66:2b:da:
93:64:2c:c5:07:5e:d0:9c:77:3e:af:ea:be:f9:e5:
c9:e7:a7:b2:c5:79:2c:dc:88:0e:75:3d:d3:4a:7b:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:BA:72:55:8B:48:C6:2A:8F:64:02:EE:CC:D7:60:50:FF:2F:E6
X509v3 Authority Key Identifier:
keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:93:97:84:99:c5:ab:45:c7:c4:71:6a:14:00:eb:66:70:
d2:a6:7e:b4:23:0d:24:d5:46:5e:e0:89:4f:89:a4:7b:8a:f8:
6a:42:66:02:05:14:77:3c:61:69:aa:4a:92:56:3e:3b:de:45:
f9:55:8e:54:8e:3b:36:ae:80:aa:04:f0:b1:27:be:02:b3:6a:
22:2e:49:e9:14:dd:19:17:cd:76:aa:96:b4:3d:8d:98:4c:11:
d3:d2:f7:5b:64:a0:0e:7c:3a:0f:92:1d:02:56:90:ee:91:6b:
74:36:77:3e:7b:f9:74:bd:f6:6e:74:a1:6e:74:a1:c9:0a:2c:
1e:3d:93:e9:9a:92:8c:e0:4d:e5:c0:2d:70:28:e6:ee:ff:6b:
bd:0e:54:93:ef:69:8d:2f:66:a8:8a:6c:3a:26:15:b5:ba:c5:
60:fb:15:7a:3d:44:fa:bd:8a:78:e3:4f:7b:63:42:a9:85:d3:
1c:c4:06:dc:45:54:a7:5a:45:78:30:e5:5e:0a:b4:6e:a4:42:
3d:7c:93:d5:dd:f9:33:a2:67:c1:a2:a9:bc:97:e8:c3:fb:d2:
c8:2e:f1:c5:00:55:7f:0e:ea:ad:f6:dc:97:fd:54:75:3c:1a:
bf:9f:26:21:47:25:45:ba:9f:96:1e:d5:b6:57:5c:3b:43:c6:
e6:26:03:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEzQTUxMTAvBgNVBAUTKDkwMjFCRUZGM0I2M0VFNzI0OEI5MEREQUE1RERCRkE3
RTMxMjFDRDkwHhcNMjYwMzI1MDY0MjA4WhcNMjYwNDAxMDY0MjA4WjAYMRYwFAYD
VQQDEw02OWMzODNjMC01NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZk2C+cOO/bTPCsUwO/vxYMZKxe0OYlEpXOYtWZgIv/Jm1tzTv/0sVh8texl
oGt52glBVf/pwcLRPAh1nbYCP7xhOzIiiKxRwUx2EcLLi/ZZhEsdHRkl+eWz1DXC
KXDjWf9Km7Hp6STt7keHoNoE6eB6d0iRVi1IZKf3LW7cgid9lvj9ufMsVtrlZitV
cXB6W4LqR6VaUwXq8NHb4JazLqaxLsldG6iLgRkiVfH6rVvbqrMWaUeLN2DzAK6n
VQySWXvdQkAXWpQbpbQ4alkP1eQL6+l9Io1iE/jxzaFmK9qTZCzFB17QnHc+r+q+
+eXJ56eyxXks3IgOdT3TSnsQnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4funJV
i0jGKo9kAu7M12BQ/y/mMB8GA1UdIwQYMBaAFJAhvv87Y+5ySLkN2qXdv6fjEhzZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNBNS9FNTdGMzU5MjRC
NzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajduSkl1UTNhcGQyX3AtTVNI
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTNBNS9FNTdGMzU5MjRCNzcxMUYwQjFDQjlFMjdDNEY5QUUwMi9rQ0ctX3p0ajdu
Skl1UTNhcGQyX3AtTVNITmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASZyTl4SZxatFx8RxahQA62Zw0qZ+tCMNJNVGXuCJT4mke4r4akJmAgUUdzxh
aapKklY+O95F+VWOVI47Nq6AqgTwsSe+ArNqIi5J6RTdGRfNdqqWtD2NmEwR09L3
W2SgDnw6D5IdAlaQ7pFrdDZ3Pnv5dL32bnShbnShyQosHj2T6ZqSjOBN5cAtcCjm
7v9rvQ5Uk+9pjS9mqIpsOiYVtbrFYPsVej1E+r2KeONPe2NCqYXTHMQG3EVUp1pF
eDDlXgq0bqRCPXyT1d35M6JnwaKpvJfow/vSyC7xxQBVfw7qrfbcl/1UdTwav58m
IUclRbqflh7VtldcO0PG5iYDWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:04 2026 by rpki-client