
$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json)
Hash identifier: xUZF+n+NAlGYisd9q8JF5Z9sAzqpDkFihx+DeGwxtpE=
Subject key identifier: A5:3D:AD:05:19:5A:84:63:F5:34:CC:90:D7:C9:21:58:43:A1:AA:01
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
Manifest number: 025A
Signing time: Thu 23 Jul 2026 03:37:18 +0000
Manifest this update: Thu 23 Jul 2026 03:37:18 +0000
Manifest next update: Thu 30 Jul 2026 03:37:18 +0000
Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: rk/C80gtvSWvouJPfqBoi4YUjc24u5MJYgWZAqavsJk=)
2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: vs2Gbdu50+XToE8E4WRhYDNiQq7PIlKd89VDKs3X2wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Validity
Not Before: Jul 23 03:37:18 2026 GMT
Not After : Jul 30 03:37:18 2026 GMT
Subject: CN=6a618c6e-67ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:79:ad:46:48:b3:17:fe:ae:a9:9c:d7:38:
9a:d4:20:2a:ca:2c:df:43:46:3c:3d:86:0a:06:7b:
44:a9:7d:f7:1e:95:50:a4:a5:fa:4c:75:74:a2:ec:
0f:76:bf:8c:48:09:a3:de:cd:04:85:7f:ca:62:1d:
43:70:ba:e7:0c:2c:47:1e:8c:8d:60:e4:74:fb:e4:
cc:2b:08:8e:ea:cf:1d:51:db:95:df:25:5e:85:bb:
0e:2b:2d:76:e6:79:7d:1e:6e:a5:a8:00:92:70:f9:
39:dc:0e:a5:ef:19:09:6a:a4:ae:74:a8:c5:65:60:
93:a3:b2:76:c3:31:20:1d:af:e0:a3:3b:e9:9d:44:
dd:c7:12:1b:b0:f8:f4:db:24:b5:36:50:ea:a2:13:
49:0a:73:ab:00:b9:3d:cb:a1:0b:02:13:06:cc:8c:
4b:01:3b:70:07:d9:b5:c6:47:39:8d:7a:07:6a:cc:
99:59:f7:07:84:70:ee:3a:2c:04:54:ab:bd:ab:72:
69:7a:3a:3f:b8:34:b3:48:0f:40:ec:a5:f1:47:62:
ac:18:8a:95:33:5d:92:14:e0:83:18:ac:22:ed:0f:
ae:cf:f6:9b:2e:59:19:3f:05:82:7e:a1:3b:25:b3:
e0:ed:df:1f:83:4e:b2:fc:d7:0a:5c:8e:7e:b4:bb:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:AD:05:19:5A:84:63:F5:34:CC:90:D7:C9:21:58:43:A1:AA:01
X509v3 Authority Key Identifier:
keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:4b:50:f5:d9:10:65:ee:f6:ba:3b:38:c4:a4:0e:2a:da:
42:6e:09:d3:e5:66:81:07:e4:fb:19:09:71:17:c1:32:eb:c3:
07:cf:93:fa:8f:15:d4:d3:e0:27:c4:7b:52:74:39:35:3e:a1:
00:c1:c6:7d:7a:ac:ad:3f:b9:0d:85:7e:15:e7:55:7a:94:70:
69:51:cb:5f:12:16:24:ea:14:98:dd:41:ac:00:1d:31:e6:c8:
a2:46:5f:9a:1e:e3:43:af:a6:8b:c2:65:a2:dd:86:b9:bc:6d:
a1:01:3f:7a:18:a4:bd:b0:f4:66:2e:cb:19:06:4a:ed:4c:7a:
b1:47:1f:01:60:62:e4:b4:ba:4c:25:5b:48:88:a3:a8:79:5a:
08:73:ac:de:5f:4e:bf:d9:39:99:dd:75:5a:b8:e1:c4:f4:33:
01:3e:e1:8d:0e:18:c2:97:3b:ed:a4:f8:43:88:4d:1e:5b:27:
61:c9:1c:02:35:1f:16:9d:38:f1:c0:61:8d:51:0b:d2:e9:ad:
8f:1f:d1:1d:6c:51:ad:e4:12:4a:23:2f:6f:b0:84:de:90:99:
63:5a:71:15:06:4f:b2:01:91:1e:05:c2:dc:85:d7:72:e2:7b:
b5:93:db:92:8a:04:88:fd:75:6b:5e:c5:a3:dd:d9:8d:92:af:
6b:15:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:47 2026 by rpki-client