
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json)
Hash identifier: FmR21BwDECTIQInAOnHcUldTtwp/c4p4hZcGN8lRVUM=
Subject key identifier: 7A:88:D7:FD:2C:BF:2D:0C:84:D7:7B:90:94:D5:E0:AC:87:F4:4A:EE
Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E
Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
Certificate serial: 07C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
Manifest number: 07B6
Signing time: Tue 22 Sep 2026 21:13:28 +0000
Manifest this update: Tue 22 Sep 2026 21:13:27 +0000
Manifest next update: Tue 29 Sep 2026 21:13:27 +0000
Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: Csu16QvbemRT6FCFeUJ5cfFJuMJT11m0s3cZ1G+yNXc=)
2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vHORlkoJ6Ru5YMWSWLfbW4NJ8zoTLLXavRd5Bn2PcOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl
rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989 (0x7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
Validity
Not Before: Sep 22 21:13:27 2026 GMT
Not After : Sep 29 21:13:27 2026 GMT
Subject: CN=6ab2ef78-ec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:04:3c:5e:64:c0:7c:c6:56:c8:94:81:55:
16:db:39:21:9e:5a:b3:aa:74:b0:eb:ac:58:aa:0b:
e7:73:0e:80:1c:4c:c7:e9:a4:de:5e:c4:71:dd:ed:
9d:c6:e2:1f:99:c3:42:c3:f4:1e:2b:06:ac:af:cc:
ec:d7:32:34:3a:90:60:05:94:10:66:67:0d:e8:2b:
94:e2:5d:e3:8c:a6:be:27:7c:d7:39:01:1f:32:2d:
4e:df:05:73:7b:e7:bb:9c:51:b7:f2:7f:90:0e:53:
53:f7:99:65:48:81:b4:fe:e5:71:4d:6b:6a:97:00:
97:af:b5:b3:76:c1:3c:37:35:60:20:d2:f0:60:70:
b2:c7:64:d6:fd:5d:58:d7:ee:a0:1a:a2:6e:b8:ad:
2c:35:19:11:10:af:4c:05:78:93:94:7b:ef:b5:d6:
f5:6f:cd:3b:f9:a8:e7:8a:6e:f2:02:82:bf:88:3a:
d1:aa:bc:65:af:26:14:07:25:6d:b0:db:26:7f:dc:
6c:89:ae:6c:fd:02:5a:c1:0e:27:b7:ba:dc:af:56:
e8:a3:56:5a:cf:aa:94:8f:03:5e:9b:2a:36:e2:c7:
c7:46:e6:e9:97:a1:5c:79:6e:f3:f8:d8:c6:2d:01:
93:2d:b9:d7:93:fe:f3:fd:cb:8f:1f:e4:f4:ca:4d:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:88:D7:FD:2C:BF:2D:0C:84:D7:7B:90:94:D5:E0:AC:87:F4:4A:EE
X509v3 Authority Key Identifier:
keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:78:69:16:e0:7d:39:bd:28:51:6b:4c:3a:25:5f:70:5b:
ef:2e:6c:ca:f8:0b:3c:2b:2a:e2:fb:d2:79:2d:21:d6:de:95:
b7:43:ed:13:08:64:86:90:0d:0e:cb:17:00:c4:b7:73:1c:7d:
78:c1:18:a0:5d:c5:d0:a2:35:51:6b:8e:e2:bd:16:c7:e9:ae:
2f:e8:2f:65:2c:1c:fa:26:4b:fe:63:29:eb:71:df:d7:31:95:
59:18:43:fb:7f:87:76:d6:3d:17:57:11:78:37:23:b1:a0:70:
83:37:5b:9d:88:cc:49:64:ad:04:c1:3e:4c:d7:a1:4c:bc:1a:
03:64:81:f8:6f:00:9a:49:10:2d:7f:75:3a:8f:70:93:ab:e8:
5b:e2:97:70:cf:e9:29:0f:43:6b:f5:41:fb:09:8e:3d:d1:e6:
20:5e:00:60:11:ce:74:df:49:5e:a1:ef:00:92:5f:43:ef:4d:
fc:e3:8a:f9:41:8b:65:d0:0e:4c:c1:a5:0c:bd:75:88:32:ec:
64:60:73:72:fb:b2:f9:1c:e1:a9:87:88:f0:44:23:e6:ac:90:
25:e2:53:4d:95:e8:42:57:41:bb:9a:87:3b:88:6f:09:32:b0:
25:79:5a:63:85:5f:e0:dd:6a:34:39:f7:69:25:eb:1b:2e:ea:
20:3c:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:12:25 2026 by rpki-client