
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json)
Hash identifier: SydB96Fx/KUXQr8wXtegYBvo7v3Tw7FekLf723AoPy4=
Subject key identifier: B0:9C:00:AA:66:4F:30:AD:24:97:5F:96:1C:C0:0F:C4:2A:FB:37:96
Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
Manifest number: 06DA
Signing time: Sun 04 Oct 2026 22:19:02 +0000
Manifest this update: Sun 04 Oct 2026 22:19:01 +0000
Manifest next update: Sun 11 Oct 2026 22:19:01 +0000
Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: A1yu38HJKENfrWMgX36Bp4QgAyjdXWzsYt8p1RnhvAM=)
2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: 8KAuUjRAKsyBi8GlES2lC9s8KKWwTwTgclR9At7r6RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Validity
Not Before: Oct 4 22:19:01 2026 GMT
Not After : Oct 11 22:19:01 2026 GMT
Subject: CN=6ac2d0d6-8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:ab:2c:a7:aa:c3:79:6e:4b:c4:1a:79:9c:
b8:26:e2:6b:cd:f4:6b:94:18:bd:f4:7e:b8:58:58:
bf:34:af:31:60:33:be:81:68:1c:11:8d:11:8b:8a:
d3:14:e8:2b:65:7b:e2:73:6b:83:15:79:e5:ee:6d:
d2:b5:ff:47:af:35:f0:62:2c:74:b9:61:01:c0:89:
2c:b4:47:09:1f:d4:a6:5f:88:43:5f:c6:0e:c3:9d:
a6:c1:76:7c:96:16:dc:0a:89:37:40:83:bb:b1:8a:
89:c6:1e:4b:25:cf:01:ea:86:22:cb:1b:d7:f7:2f:
c4:05:e2:88:50:5a:68:83:bb:81:8e:11:b4:e7:57:
17:26:22:4e:11:eb:82:7c:b6:0b:d6:2b:21:c4:bd:
33:23:93:7e:b2:68:76:e2:13:f5:74:87:2c:e3:94:
4a:b2:9c:27:4b:79:b9:0d:e5:f4:26:4c:d0:24:b7:
ab:30:a5:52:85:ee:98:5a:67:e4:46:fd:bd:63:aa:
bf:6f:b9:5a:a2:47:21:ec:21:b9:bb:38:5d:a3:82:
48:57:dd:a9:ca:c8:5a:13:30:af:18:9d:00:2a:c4:
be:ab:69:05:11:00:04:79:1f:6f:84:33:76:95:2e:
d9:ae:22:32:3e:da:0f:70:34:d6:5f:60:fb:bb:38:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:00:AA:66:4F:30:AD:24:97:5F:96:1C:C0:0F:C4:2A:FB:37:96
X509v3 Authority Key Identifier:
keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:b4:72:25:b0:ef:58:3b:96:86:6a:8a:35:ab:d6:a1:4f:
d0:51:92:aa:03:b3:f6:15:2a:5e:75:6e:bf:3f:be:58:09:ca:
e1:a6:ec:20:ca:90:f8:b8:27:cc:54:90:f8:49:31:21:11:43:
a7:84:dd:82:a8:c2:86:ca:84:e4:0d:4e:91:6b:00:5e:ef:eb:
4f:de:28:e6:3f:49:5f:b6:1f:92:67:54:1f:f7:f3:50:b6:3c:
9e:1e:99:33:73:f0:3f:8b:86:68:75:95:9a:bc:be:bc:6b:ff:
48:50:38:9f:8f:ef:c1:ed:89:8b:45:b7:7d:ce:82:e7:fa:3d:
8c:21:94:f7:f8:dc:79:50:52:01:d3:4e:93:e8:53:70:10:9b:
ed:9a:cf:7c:90:d6:40:46:05:1e:bd:04:3a:03:7d:65:8f:8b:
dd:bd:1b:a5:aa:0d:e6:3b:95:27:1f:33:93:df:3b:7c:bc:90:
87:23:f9:b8:88:47:9a:12:77:07:a8:30:ef:3c:c7:02:23:0c:
ec:60:14:39:3f:ff:76:6e:d3:c1:1d:99:9a:39:c0:f8:6e:d6:
72:66:87:cb:79:26:ed:3f:13:b9:0d:f1:1e:eb:b7:cc:b6:07:
1c:0c:61:6e:6d:8f:4a:18:5b:78:c3:16:c7:63:6e:f0:c2:59:
35:ed:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:55:26 2026 by rpki-client