
$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json)
Hash identifier: ViEcSWaySZ0MFTHK17kFVgr+QWvhfUpLHX2lSDOewxA=
Subject key identifier: F2:05:73:53:EE:96:DB:74:62:53:E5:F8:6A:91:B8:4F:63:D6:EA:EE
Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91
Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
Certificate serial: 0AC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
Manifest number: 0AB8
Signing time: Tue 12 May 2026 19:31:40 +0000
Manifest this update: Tue 12 May 2026 19:31:40 +0000
Manifest next update: Tue 19 May 2026 19:31:40 +0000
Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: P0hYNqTPaAVi1HzE4kLx37/hS1p1x5EjIbY0KbhZQ+w=)
2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: Id7TiyhCjT/ugnXENLjQbEWCxTp2YV8p5peHTAxcG5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl
rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2752 (0xac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
Validity
Not Before: May 12 19:31:40 2026 GMT
Not After : May 19 19:31:40 2026 GMT
Subject: CN=6a03801c-0d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:6e:10:57:9f:6b:97:8a:34:68:40:07:93:
33:ab:00:ce:35:ce:b4:ca:b7:e6:22:eb:85:cf:11:
19:c6:b2:61:5d:c7:1a:7b:95:f2:55:e1:3c:ba:60:
02:cb:6d:7c:6a:e9:e3:c7:56:da:f4:26:77:f6:ab:
98:84:54:19:f2:d1:a6:93:4b:c7:46:84:14:74:e3:
e0:6d:6b:8f:f7:a6:50:b1:80:46:b0:de:7b:73:3f:
8c:79:fd:00:9c:7c:0d:97:33:21:30:06:94:42:41:
f4:a4:5a:00:0c:7d:cb:34:eb:67:a8:c7:72:1d:a3:
ab:f2:d1:e5:79:f0:e1:a3:76:d8:62:bc:ac:fe:a1:
b9:bb:52:04:b6:68:fe:1b:78:5e:45:e1:83:ed:f8:
4e:f7:a8:89:68:05:d1:52:11:f9:47:59:38:0e:33:
4c:43:e7:7b:c4:ce:46:da:6f:da:46:8a:81:0d:28:
2d:00:88:65:de:93:4c:41:45:40:45:03:c6:76:6a:
3b:a8:93:e5:0f:df:f8:68:f3:eb:66:0c:98:a5:5b:
d1:a3:3f:ee:6f:9d:5f:ce:6c:42:73:ad:43:94:1e:
ca:5f:68:30:e6:d4:38:fd:0f:20:f3:41:9f:6d:c7:
94:25:f1:a1:1a:63:14:7a:e2:09:ad:1d:93:fa:1c:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:73:53:EE:96:DB:74:62:53:E5:F8:6A:91:B8:4F:63:D6:EA:EE
X509v3 Authority Key Identifier:
keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9b:47:e9:6b:9a:52:1d:92:c8:b4:44:0f:6a:01:27:46:7a:
4d:98:15:7d:87:e7:e1:f8:0d:68:75:56:7f:8b:7b:9c:ab:7d:
56:43:49:aa:08:21:03:ef:72:b7:a1:91:aa:18:98:06:9e:0e:
25:4a:18:54:71:11:ef:f8:0a:52:7e:59:5c:df:21:3b:86:0f:
7f:47:bd:3a:ca:da:0a:9b:08:c6:09:cf:74:24:48:f4:5d:71:
e8:23:ef:66:78:22:a4:3d:7a:da:3f:c5:ef:70:62:30:50:3b:
52:7f:9a:72:f5:1b:b3:3e:a9:68:b8:2c:4f:69:b5:b5:d2:c2:
bd:85:c5:9f:31:0e:27:00:86:ee:8f:da:80:a7:6c:7e:1a:52:
ef:e4:1b:20:d1:52:1a:46:57:1d:29:f5:87:88:9f:de:78:48:
04:d4:ce:22:d1:68:e1:1b:27:25:9c:63:01:55:b3:d4:df:59:
a5:0c:40:7d:fd:1e:4e:45:3c:2e:cf:00:bf:6d:a5:4b:7c:9b:
50:b9:ab:07:7c:7b:7b:88:97:92:7b:45:e0:fd:5e:21:1f:b8:
8c:dd:33:38:a7:32:7e:b4:ac:12:86:2b:75:18:73:40:43:f9:
d5:b8:47:37:f2:75:4d:d2:98:55:cb:fc:71:63:39:76:04:19:
6e:47:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:22:29 2026 by rpki-client