
$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
File: KbnmrAGSmMyglt6Jcancj3144dk.mft (raw, json)
Hash identifier: Q+YHPJxtFW9M+t87OnBqST6OGk8apvuANmhIwJoZSU4=
Subject key identifier: D3:6B:E4:ED:65:A6:7A:56:F7:EC:7C:94:5A:57:B3:5A:5C:30:92:72
Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9
Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9
Certificate serial: 1282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
Manifest number: 1274
Signing time: Tue 12 May 2026 17:06:27 +0000
Manifest this update: Tue 12 May 2026 17:06:27 +0000
Manifest next update: Tue 19 May 2026 17:06:27 +0000
Files and hashes: 1: KbnmrAGSmMyglt6Jcancj3144dk.crl (hash: nntN87Rsi1OQriqQbOkGLHewlUS/dQ1Dv5jt+5RZNF0=)
2: B6C2A27AF16A11E89550B621C4F9AE02.roa (hash: h+tzRhpe2AsXoHJ8CBPjL2tTeLXiRNNuDMYfrMmyPpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl
rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4738 (0x1282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91371E4, serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9
Validity
Not Before: May 12 17:06:27 2026 GMT
Not After : May 19 17:06:27 2026 GMT
Subject: CN=6a035e13-ff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:c0:dc:25:d4:92:bf:53:32:cd:32:af:de:
10:fd:c7:da:66:2d:ee:8b:c3:0f:e3:f3:71:c0:17:
f0:15:79:90:ad:34:5b:d0:51:df:bb:e5:e3:6e:7c:
1b:dc:1a:8c:af:fe:0c:08:f9:0f:de:c1:1a:5a:8a:
20:c1:56:0c:cf:b3:fd:c6:7e:ec:af:ba:df:92:b9:
4a:cd:5e:8d:9d:a0:3b:fb:cc:5a:d0:96:b0:d6:cf:
b1:7d:a9:ef:29:bc:41:28:07:c7:29:84:9a:90:45:
81:a6:ae:60:73:94:3a:dd:7a:6f:a7:cf:95:1d:02:
c4:f1:5e:a1:73:ea:7e:93:a9:6f:7b:a9:a1:fe:99:
43:21:55:a2:4d:a2:c9:9f:24:4a:e6:70:16:f6:68:
50:5e:50:6d:7c:b4:bb:fe:18:ec:27:72:c5:8e:79:
86:33:0a:7e:cf:c7:95:68:d0:5c:cf:4c:2e:1b:81:
c6:b2:7a:91:a4:b0:73:3b:26:0f:9c:7e:ec:51:c7:
9f:17:26:c6:75:06:68:67:cf:b6:72:d8:a0:c5:9d:
5f:3a:62:cc:1a:26:53:10:31:8f:9f:a2:d8:b0:2c:
59:db:7e:9b:85:00:d9:5e:66:66:0d:49:1a:86:c1:
fb:f7:e4:ee:58:ee:e0:0c:ee:3b:3f:62:a6:56:8e:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:E4:ED:65:A6:7A:56:F7:EC:7C:94:5A:57:B3:5A:5C:30:92:72
X509v3 Authority Key Identifier:
keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:95:1a:41:de:2c:d1:f7:79:8b:e4:4c:eb:ef:5c:f3:fc:d9:
85:59:7f:93:ee:3d:d9:74:4d:f5:e5:b4:eb:b0:c9:67:38:37:
cf:c0:9b:cf:31:31:a0:66:5e:69:1e:ef:9e:24:b7:2e:e2:39:
f6:4e:c8:81:48:14:56:46:85:cd:be:a2:aa:c6:58:ac:d9:1c:
c8:e2:05:91:c2:7a:c6:c7:b6:af:78:99:d5:e4:47:b9:0d:65:
77:a0:27:57:0b:ef:86:2f:bc:9b:c9:0e:68:84:e8:1c:79:77:
4d:bd:6d:4e:9a:f6:2c:28:cb:16:0b:80:ed:c1:6d:76:a8:b4:
45:46:df:25:1b:12:a4:63:18:17:60:e8:03:64:d5:92:28:40:
dc:8b:c6:6c:d8:da:79:7b:d3:b5:52:d7:00:89:7e:12:c1:5f:
10:06:d6:6b:08:39:2d:fb:e9:23:59:ef:d6:d7:7f:61:0d:eb:
11:1a:b7:a9:13:12:5e:e3:6a:79:dc:1a:6d:06:40:4c:e2:37:
ec:68:a2:32:0a:d7:28:86:ab:d2:69:8e:2d:36:a9:bd:88:6c:
f1:11:24:51:c1:94:68:53:4e:db:9c:86:d4:8d:7a:98:d1:4d:
4b:79:96:02:1e:d6:19:a6:99:5c:0b:db:a5:4c:6d:c6:9a:63:
65:55:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:43 2026 by rpki-client