
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json)
Hash identifier: 5HcIWWB/HG3FGG5mdBTGlzAsLx7PukS7gSMQL26gIOc=
Subject key identifier: 6C:F3:8A:14:E8:2F:19:61:55:5D:B8:3E:6F:BD:95:0F:A3:DE:2A:05
Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Certificate serial: 0689
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
Manifest number: 0675
Signing time: Tue 24 Mar 2026 22:15:05 +0000
Manifest this update: Tue 24 Mar 2026 22:15:04 +0000
Manifest next update: Tue 31 Mar 2026 22:15:04 +0000
Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: fC4MivTrdBfVytRN+REfmzg8u5KFtwb7P177pKtMvGw=)
2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: KuRVVtBymL1UcskS7Gi0UHbMc11CttUTwLtw4F6P+/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Validity
Not Before: Mar 24 22:15:04 2026 GMT
Not After : Mar 31 22:15:04 2026 GMT
Subject: CN=69c30ce9-1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:b0:e3:be:d0:69:18:64:54:08:bd:4f:19:
bb:95:52:12:3a:22:48:29:ef:bc:2f:cc:40:1a:86:
98:b0:9a:fa:47:2f:5b:9b:df:41:cb:a8:5a:ac:67:
09:de:6a:7f:bc:cd:91:5f:55:a5:b4:51:92:e6:ac:
c3:e0:1d:88:96:b8:62:8d:00:44:b5:1a:61:97:e4:
53:47:a2:66:ad:2a:db:28:c4:e2:ad:70:92:c2:7e:
ac:76:f1:30:ff:0b:3f:e5:11:22:30:f1:5e:ae:68:
62:1c:b6:56:44:de:21:6a:68:9b:80:33:c1:ef:5c:
e7:2d:09:94:8f:af:7a:a3:63:44:b4:d7:b8:ad:56:
4b:29:a1:86:ce:be:40:5e:ce:02:07:78:6c:92:a3:
88:ab:61:ba:92:66:1b:65:f6:6a:41:47:cc:8a:50:
00:12:9d:48:2b:31:8e:6b:bd:93:48:2c:10:d7:3f:
7f:9a:45:ee:f0:27:25:46:00:61:c2:ce:8a:b4:f4:
6e:99:2d:6b:20:0e:21:c5:85:b8:1c:95:f4:85:c9:
1c:ea:af:e9:9d:4f:c2:51:60:64:06:c1:07:44:05:
52:af:ce:59:39:9c:3b:b7:c7:01:cd:08:36:fe:28:
b2:e5:e9:48:c5:f7:f6:20:01:e1:a5:c9:f8:02:74:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F3:8A:14:E8:2F:19:61:55:5D:B8:3E:6F:BD:95:0F:A3:DE:2A:05
X509v3 Authority Key Identifier:
keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:d5:d4:bc:a9:21:b6:47:0b:a4:98:57:f9:32:3e:d0:ad:dc:
0f:44:b1:00:18:1e:a7:4b:1a:b9:c9:05:98:63:6f:9d:e4:10:
58:34:89:50:48:d8:48:5d:a6:1e:f7:ea:32:16:8e:ce:fe:04:
c1:cf:9a:af:6e:0a:1d:59:da:85:7f:2b:9d:8e:a0:98:01:cf:
61:aa:9a:22:16:61:40:6d:48:9b:86:95:95:43:dc:09:75:3a:
3b:16:ee:47:1c:7c:ed:74:1e:76:1f:82:86:df:e0:13:99:33:
03:e8:7b:4f:17:82:51:1a:56:ee:2a:79:3e:63:30:21:e2:58:
79:2d:9b:46:29:6d:b8:10:fe:41:ba:4d:ee:7f:cb:26:32:8c:
dc:99:71:bb:89:cb:34:48:c1:c6:b5:d1:95:fb:6f:0a:b4:d8:
00:08:e0:6e:54:ce:42:02:d3:e5:b2:77:51:25:d8:51:f1:c2:
d0:a5:33:59:c6:3b:34:24:66:45:86:d4:77:69:68:c1:dc:ff:
97:a1:f8:e4:a5:96:10:0a:9c:79:2e:e6:ca:e3:30:4b:1b:25:
d2:10:d2:3d:d9:6b:6e:f0:34:77:77:8d:40:39:bb:c7:17:49:
89:db:d0:8c:e4:2a:67:56:b3:72:ac:13:68:0d:7d:14:ff:26:
75:42:14:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz
ODEyNkRDOUYwHhcNMjYwMzI0MjIxNTA0WhcNMjYwMzMxMjIxNTA0WjAYMRYwFAYD
VQQDEw02OWMzMGNlOS0xOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwXuw477QaRhkVAi9Txm7lVISOiJIKe+8L8xAGoaYsJr6Ry9bm99By6harGcJ
3mp/vM2RX1WltFGS5qzD4B2IlrhijQBEtRphl+RTR6JmrSrbKMTirXCSwn6sdvEw
/ws/5REiMPFermhiHLZWRN4hamibgDPB71znLQmUj696o2NEtNe4rVZLKaGGzr5A
Xs4CB3hskqOIq2G6kmYbZfZqQUfMilAAEp1IKzGOa72TSCwQ1z9/mkXu8CclRgBh
ws6KtPRumS1rIA4hxYW4HJX0hckc6q/pnU/CUWBkBsEHRAVSr85ZOZw7t8cBzQg2
/iiy5elIxff2IAHhpcn4AnRUPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzzihTo
LxlhVV24Pm+9lQ+j3ioFMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5
NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81
anRHemNqTkRGems0RW0zSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcdXUvKkhtkcLpJhX+TI+0K3cD0SxABgep0sauckFmGNvneQQWDSJUEjYSF2m
HvfqMhaOzv4Ewc+ar24KHVnahX8rnY6gmAHPYaqaIhZhQG1Im4aVlUPcCXU6Oxbu
Rxx87XQedh+Cht/gE5kzA+h7TxeCURpW7ip5PmMwIeJYeS2bRiltuBD+QbpN7n/L
JjKM3Jlxu4nLNEjBxrXRlftvCrTYAAjgblTOQgLT5bJ3USXYUfHC0KUzWcY7NCRm
RYbUd2lowdz/l6H45KWWEAqceS7myuMwSxsl0hDSPdlrbvA0d3eNQDm7xxdJidvQ
jOQqZ1azcqwTaA19FP8mdUIUZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:30 2026 by rpki-client