
$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
File: kUEwRSpecDu47DyNiG5A8gWqYB4.mft (raw, json)
Hash identifier: TTYebml3CYIQRqC8Gdx0pvXz5ZtzDLFAYOK40DnHsO8=
Subject key identifier: A9:0D:0B:E2:86:3D:4F:92:DD:AA:77:95:5B:F1:C5:EE:0C:D2:8C:E2
Authority key identifier: 91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
Certificate issuer: /CN=A91274A4/serialNumber=914130452A5E703BB8EC3C8D886E40F205AA601E
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
Manifest number: 27
Signing time: Wed 22 Jul 2026 19:03:10 +0000
Manifest this update: Wed 22 Jul 2026 19:03:10 +0000
Manifest next update: Wed 29 Jul 2026 19:03:10 +0000
Files and hashes: 1: kUEwRSpecDu47DyNiG5A8gWqYB4.crl (hash: CUqrIozbu+5fN4FXt8xzjR2TdTDbQD7CAZUfj6LBqyI=)
2: AEBEA978526211F190265F7DBC833773.roa (hash: GPfKfNNIXjai1EnUV/N7eUbMHwWj9TZDA5mP+AllUjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.crl
rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=914130452A5E703BB8EC3C8D886E40F205AA601E
Validity
Not Before: Jul 22 19:03:10 2026 GMT
Not After : Jul 29 19:03:10 2026 GMT
Subject: CN=6a6113ee-8ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:59:31:5c:28:78:be:96:d4:40:b4:a6:5b:
f0:4e:20:7d:ae:1a:57:8c:8d:25:61:53:b6:f2:e3:
19:68:04:f5:3b:67:8b:9a:9e:52:f7:b0:2f:03:5d:
c1:a2:13:1c:78:db:26:d1:a5:43:2a:ca:71:b5:61:
16:0a:98:80:a9:03:00:54:ab:44:1c:aa:7c:5a:ac:
f9:ec:f5:16:a1:59:5b:f8:2e:ed:fb:b8:b6:9a:b7:
d5:1c:68:32:46:90:b5:80:80:a9:98:44:85:13:e9:
65:44:48:a7:c3:09:c2:93:2b:81:c0:d0:f6:61:39:
eb:f2:03:56:37:df:4f:ad:38:76:f3:b7:21:29:7a:
5a:fc:39:21:e8:f6:5f:c5:9b:b1:44:79:88:7e:80:
8b:83:21:45:2d:aa:80:bd:f2:15:f6:bb:02:1b:c3:
9a:29:34:97:b1:6c:b7:48:fd:7d:75:29:03:c6:1b:
05:d7:a3:28:0e:7c:8d:a9:23:e8:ee:52:f2:91:65:
3f:62:c5:0c:7d:f0:5d:a4:3f:fa:8d:b8:84:51:3c:
f0:7d:3f:c0:8b:42:36:6d:64:5a:e3:80:60:3c:9a:
08:6c:de:75:98:28:ea:cb:ba:12:0c:fb:fc:99:c3:
d3:11:3d:16:75:41:1a:a6:03:5d:8a:45:0f:32:07:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:0B:E2:86:3D:4F:92:DD:AA:77:95:5B:F1:C5:EE:0C:D2:8C:E2
X509v3 Authority Key Identifier:
keyid:91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:8a:56:47:a5:4a:aa:cc:c3:4e:0e:c2:99:92:0a:47:8f:
b8:0e:53:a7:b0:c2:b7:2e:ac:05:20:d2:02:50:dc:a6:c2:83:
0d:26:68:c1:96:6f:62:1d:7f:0b:16:c9:a3:d8:93:07:ce:09:
22:0b:61:86:66:73:4a:39:72:dc:8e:57:df:82:ce:dd:48:e9:
22:27:dc:c6:58:ab:06:7f:46:32:e3:36:f3:8e:b3:0a:f4:22:
41:83:63:64:97:e3:9f:79:f3:be:c9:2f:b2:ff:f1:18:a9:01:
01:d4:e7:3b:d8:ea:a6:9f:ea:61:b8:31:28:64:0f:1a:ce:d5:
08:64:db:15:19:ae:70:1c:c2:e2:6b:80:20:70:45:01:3f:b4:
13:6b:db:38:59:95:65:a2:7b:0a:01:10:53:0c:6e:92:62:ef:
c0:25:8c:9a:30:c5:2a:4f:ff:cf:88:69:fa:f6:3a:cc:8a:48:
ad:5c:b3:d7:fd:bd:4e:55:a3:0d:5f:02:3b:ee:cd:eb:cb:35:
90:5e:98:21:1d:da:0c:78:16:b5:a1:e0:8e:31:59:44:0b:b7:
00:ed:2c:9a:f1:16:50:43:5e:7f:d5:c1:67:ba:74:9c:70:af:
b3:55:8f:7c:4a:12:99:d0:89:16:56:33:d6:b9:be:52:6e:ce:
df:ec:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:11 2026 by rpki-client