
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier: P7K4e2kXriJBtopX8IXCsQLCBcHTdfR7mUz257diVc0=
Subject key identifier: 26:07:8F:A5:EE:CB:DD:68:3D:BD:13:B1:EA:4D:DD:58:4C:B0:B9:CB
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial: 0B34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number: 0B1E
Signing time: Wed 22 Jul 2026 19:41:08 +0000
Manifest this update: Wed 22 Jul 2026 19:41:07 +0000
Manifest next update: Wed 29 Jul 2026 19:41:07 +0000
Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: JEG3KIkPk7OSLrz7gKHXhsIT4fUwLBdkaHPMYMBlfTc=)
2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=)
3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Validity
Not Before: Jul 22 19:41:07 2026 GMT
Not After : Jul 29 19:41:07 2026 GMT
Subject: CN=6a611cd4-fb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:2f:a7:28:d2:64:fe:24:ac:79:a2:4d:d4:
10:10:fd:d0:e6:b5:e0:b1:b9:27:82:b8:6c:dd:b6:
c6:51:1c:6f:24:0a:9f:4b:c8:e1:02:96:1e:90:50:
eb:4e:48:a9:16:9a:f7:c2:5b:91:b7:48:57:5f:b3:
60:8e:57:85:57:9a:69:aa:fa:6e:3c:29:7e:fe:c2:
fb:78:b4:8c:66:3f:1e:d4:e4:03:98:5b:a4:d0:b6:
86:71:66:fe:0a:2e:49:2f:ff:0f:a6:0b:c5:78:5c:
ee:e3:f8:88:5d:c5:05:c2:e8:24:b3:55:e5:76:b7:
e7:d3:f1:bf:90:9d:a1:24:c8:21:b6:80:71:83:ac:
43:d0:e7:2f:c9:6d:fd:c0:3d:80:1a:18:56:72:56:
dc:15:5d:9c:ce:10:ad:ef:92:8e:0f:36:dc:7b:b3:
44:28:2f:1d:70:13:29:f5:28:94:be:11:ee:d5:49:
7b:6d:cf:ca:41:a4:4b:4a:a0:3f:79:3b:d4:5e:a8:
c6:cf:7f:e1:2f:2f:a5:4f:99:bf:3b:88:75:c9:0c:
8a:89:93:c3:7d:9d:30:29:3d:4e:81:fd:c7:18:a5:
83:e4:6c:05:e5:8b:82:93:1a:00:ed:74:be:e4:18:
9b:9e:fa:a4:07:3d:5f:83:4d:bc:6a:5b:9b:d5:9f:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:07:8F:A5:EE:CB:DD:68:3D:BD:13:B1:EA:4D:DD:58:4C:B0:B9:CB
X509v3 Authority Key Identifier:
keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:20:6c:86:3e:df:94:eb:c8:35:11:63:61:26:3d:04:06:ad:
f2:c3:34:43:17:13:03:f4:47:ab:5d:73:62:11:67:39:33:2a:
ba:e5:2a:57:56:b8:17:79:a3:46:86:1b:17:c7:e2:63:9e:1a:
23:b9:d3:42:68:b2:92:2d:d5:fa:8e:7f:73:84:aa:ef:2a:d7:
66:4f:40:fb:55:fe:d0:b4:e2:da:32:de:ce:59:c8:7f:2a:6a:
df:ee:27:48:24:1b:e4:99:66:81:39:0b:f5:7b:62:03:31:b5:
cc:39:53:e5:39:1d:3d:2d:dd:5c:14:57:f5:52:43:e1:c2:15:
ac:d7:78:f0:e7:9e:26:d5:89:92:c3:8b:4e:93:d0:df:df:4f:
a1:45:3e:0b:61:f4:ee:b1:82:ef:c7:5c:7d:9a:a5:18:06:10:
95:a2:b3:0e:2d:35:a9:25:17:06:97:7c:5c:38:4c:4d:f4:8f:
74:44:3e:71:4e:58:64:2d:4c:d7:7c:76:a0:4b:3f:11:20:a8:
13:ff:b7:d4:be:ed:a9:d0:7e:c6:d4:e8:31:4c:b5:5d:7b:96:
ca:06:dd:bf:28:a6:76:23:93:4d:4f:04:b1:cb:9c:2a:91:50:
78:17:50:71:06:f6:5a:3f:01:38:3e:01:c1:59:cf:70:94:7b:
4b:b4:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:25 2026 by rpki-client