
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json)
Hash identifier: 9sHSm8ahK/j71cAga8Ns57fEdnrMmOnWp8QxSMRFsiI=
Subject key identifier: BA:41:EA:45:E4:FB:71:AD:B3:08:06:55:84:9B:EC:AD:3C:0F:84:B6
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
Manifest number: 016F
Signing time: Thu 23 Jul 2026 06:29:30 +0000
Manifest this update: Thu 23 Jul 2026 06:29:29 +0000
Manifest next update: Thu 30 Jul 2026 06:29:29 +0000
Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: IjjoDCe52vkv1SCrFQGc3uE7dKH0GnfbUpa4hd7hQ3o=)
2: 9ECB1908653F11F1B667060D8D47A888.roa (hash: DbvXdABic1KJzkxyhPlZ4fRbKrDPMh8Orj+aI7Km8vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Validity
Not Before: Jul 23 06:29:29 2026 GMT
Not After : Jul 30 06:29:29 2026 GMT
Subject: CN=6a61b4ca-3382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:04:33:91:57:b8:c2:58:b7:a2:95:57:da:
d7:9b:80:5f:5b:6a:a6:ee:db:02:d2:1b:d0:f8:fb:
22:4d:91:d5:9d:bb:b8:54:46:75:ac:9d:95:87:fd:
1d:53:e2:86:31:c3:22:81:26:fd:cc:cb:aa:91:c2:
0f:72:6e:31:19:89:e2:96:b0:af:30:ce:97:92:19:
9a:89:4b:fa:3f:91:33:e9:63:8f:7c:95:ec:71:06:
16:9a:60:91:7d:cf:6d:f1:5a:f1:f4:e0:74:11:5a:
00:8c:f4:97:29:6d:1b:11:7a:5e:ce:e5:61:3d:9f:
2d:28:79:d9:67:62:e8:1d:3a:63:c4:ce:01:20:6e:
54:e1:a0:e8:ec:96:e0:c7:b9:7c:f5:91:fd:f8:15:
78:48:d7:60:9b:b8:e6:a7:ff:22:99:c4:59:44:c6:
b7:96:2a:df:4b:33:36:66:0c:30:87:82:25:32:14:
b3:ed:2b:5d:f3:7f:6e:2b:d6:9c:c5:94:8f:0c:99:
2f:63:ad:9d:bb:27:e6:f9:fa:be:6e:e6:d0:3d:56:
58:0d:e9:e1:fa:52:ee:b9:21:04:ae:48:8c:54:2c:
a3:5c:79:92:d7:7b:15:90:9c:a3:22:ed:30:b1:1f:
19:a9:df:62:b1:62:0d:23:4d:82:68:f7:55:ea:0e:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:41:EA:45:E4:FB:71:AD:B3:08:06:55:84:9B:EC:AD:3C:0F:84:B6
X509v3 Authority Key Identifier:
keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:73:9b:bd:ac:4e:9a:9b:e5:1b:a6:90:e9:c9:7d:64:de:3d:
ad:93:fa:a7:04:31:16:71:c0:f1:93:5f:31:c4:ef:2b:49:0c:
e8:c0:06:88:cf:86:3b:35:fc:75:c0:c9:0f:d2:28:16:06:a6:
4c:c5:34:b5:ff:6f:79:a6:35:33:98:8f:58:07:ca:f9:23:c8:
89:6f:24:87:8a:61:39:eb:bf:e6:1b:36:3d:67:92:08:a7:7c:
6c:3f:16:2b:9a:fb:ad:00:e8:40:29:21:fb:5e:97:e3:16:ae:
fb:9a:1e:9a:5d:0c:f5:b0:bb:58:6f:05:f8:54:6e:da:9f:cc:
12:39:70:74:38:10:2e:f2:9b:62:97:66:fc:17:92:a4:68:8c:
22:93:5b:c8:a3:d1:c4:bc:a9:0e:80:64:99:8c:eb:25:86:c1:
78:9c:74:94:ec:6f:0b:81:f1:17:83:ff:ba:db:40:9c:7e:58:
41:77:20:c6:8f:1f:40:38:aa:70:72:7c:86:b8:6e:aa:1d:c0:
ce:ae:43:1a:e0:0b:0b:35:4b:6a:d9:7c:95:69:39:4f:d0:2f:
e4:e0:73:ef:54:1d:e0:e2:83:ce:6c:f7:10:a8:d2:ca:8e:51:
cd:0d:40:d0:a4:2c:f9:e1:cd:ab:2f:e0:15:ab:77:3d:94:f5:
06:4d:96:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:35 2026 by rpki-client