
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier: MVYbLP6G9hksxkOkiMijE6BMh3ltRsEzELJ+7Nvx37Y=
Subject key identifier: 44:18:72:85:72:26:FD:82:C7:4D:75:D2:D7:1B:E9:24:60:DF:87:FA
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number: 0290
Signing time: Thu 23 Jul 2026 02:56:57 +0000
Manifest this update: Thu 23 Jul 2026 02:56:56 +0000
Manifest next update: Thu 30 Jul 2026 02:56:56 +0000
Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: dvGuM4UNEnh3Er/oWZbT0uD3nUBQxGlUqNITnBe38Yc=)
2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=)
3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: tHSDJxi9sVsTRoz1reKONBiKsyiwl7G8bqwueLtrVHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Jul 23 02:56:56 2026 GMT
Not After : Jul 30 02:56:56 2026 GMT
Subject: CN=6a6182f9-9fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:ee:dd:f4:e3:f1:d5:f8:4a:e4:d3:cf:8b:
a4:c7:2d:90:57:8d:c3:72:2b:f7:f9:5f:fd:92:3a:
2d:c4:e2:a7:bc:0a:20:be:79:ff:68:35:2c:3e:cc:
ad:99:6e:ed:23:d8:2c:57:e6:b9:54:13:51:49:ef:
1d:41:97:da:8a:db:f2:e4:bc:dd:0b:d0:21:bf:9f:
1a:79:1a:f2:84:54:aa:2a:06:f4:7c:39:6a:22:56:
b6:73:81:be:50:3b:93:18:82:f0:18:51:a5:c2:43:
21:dd:6e:7d:93:ce:89:79:10:92:0a:77:0b:36:4b:
13:dc:9a:39:31:ff:6f:86:b3:2b:ab:63:45:7b:73:
a5:b2:0f:0e:77:14:1c:2a:c3:ab:e0:7c:48:e4:32:
be:43:75:df:26:d7:52:17:dd:39:24:1a:dc:91:77:
9e:4d:11:cc:02:7c:e3:b1:46:4b:48:de:03:da:55:
44:0a:40:67:37:75:cf:7b:ba:b1:de:82:59:32:a0:
91:ca:4b:27:bf:5c:6f:4a:10:52:44:5f:02:6e:7c:
0c:90:84:b7:c6:f3:76:59:40:b5:5a:5e:fd:af:53:
09:a7:b5:b6:f3:6f:81:9a:08:4b:30:79:18:55:c6:
55:0c:35:56:2f:a0:a5:de:e1:aa:ba:12:60:d9:e1:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:72:85:72:26:FD:82:C7:4D:75:D2:D7:1B:E9:24:60:DF:87:FA
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9b:4b:21:07:9b:b8:e2:3c:91:7f:a6:32:3f:cf:da:52:2a:
63:b7:b8:74:b5:0e:ba:dc:7d:81:5f:76:ce:4e:c4:f9:18:4e:
2f:3d:01:fa:6c:c3:a9:69:85:2e:e6:c5:e7:ca:54:a2:2c:8c:
3a:ba:7e:bd:52:49:78:9f:6a:8a:1e:e9:33:95:51:1f:0e:d7:
37:6c:aa:4a:b4:f4:81:55:3f:95:c9:6a:b6:66:3e:a5:a6:aa:
28:0a:75:44:bf:f8:81:15:75:4e:e1:64:6a:d0:42:5d:5a:99:
d9:a6:7a:2b:0e:ff:c1:1b:2b:51:81:ac:ef:04:2a:ca:66:26:
37:12:b6:72:da:53:e2:6b:74:24:62:01:67:8f:85:fd:41:68:
39:a6:fc:31:55:68:53:4b:3e:7d:b5:72:c6:09:b3:07:6b:2a:
2d:91:48:48:86:c1:3a:8f:8e:f3:da:bb:2d:d7:53:5d:c9:fc:
4a:d8:7a:36:12:72:fe:84:1f:ad:44:03:e1:37:dc:c0:19:a9:
83:fb:b8:ac:bc:71:be:5b:75:15:21:f1:85:fe:be:95:d5:03:
e4:61:0e:7d:2a:f3:f4:09:f9:2b:60:ca:c2:5e:92:a8:d6:82:
05:65:d9:76:60:60:bc:e2:5c:06:f9:d3:81:b8:d0:fb:06:6e:
1c:61:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:00:35 2026 by rpki-client