
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier: hARn9K6Ez0rE68+CfkZCO7hZmY20lSLwl0YbYV+e/VI=
Subject key identifier: FE:1C:44:34:5E:2E:62:56:12:FE:61:7B:4C:70:99:66:1C:E4:AF:EF
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number: 6A
Signing time: Wed 25 Mar 2026 07:06:53 +0000
Manifest this update: Wed 25 Mar 2026 07:06:53 +0000
Manifest next update: Wed 01 Apr 2026 07:06:53 +0000
Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: R9SoNIlQtbXU2AfKXZbxfZR/a2yYFVDgDJURgxhaKeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Validity
Not Before: Mar 25 07:06:53 2026 GMT
Not After : Apr 1 07:06:53 2026 GMT
Subject: CN=69c3898d-1d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:d6:8e:64:4a:6c:28:81:e3:4e:b1:9f:49:
1e:a1:4c:46:9a:81:68:5c:c9:a1:5b:72:21:22:b8:
30:5d:5f:6a:6f:14:6c:d7:0f:9d:fb:e0:cc:a0:37:
1f:3c:26:89:a9:37:2e:93:8a:ad:86:a6:61:48:ff:
aa:ab:64:58:22:59:ff:e2:d6:15:28:4b:9c:1d:fe:
39:9f:61:ad:18:a5:de:2e:2a:f8:47:1c:f2:f6:43:
4a:6e:63:42:85:7d:0c:73:3c:37:c8:d7:cb:69:ca:
a7:43:00:6f:30:3d:4d:1f:18:52:a9:25:47:ac:e5:
1c:ca:c1:ff:20:d3:ed:8a:50:61:eb:88:d7:dc:17:
65:d8:9c:8e:24:d7:5a:51:45:c0:91:19:2e:6d:14:
1e:33:5a:36:19:4d:7f:14:51:2b:2d:ac:46:ab:88:
87:8b:6b:07:6f:0b:b9:8c:cc:8e:b6:c3:cc:b6:c4:
4c:45:96:4b:31:cb:72:b5:20:f3:9e:c5:89:94:fb:
b5:80:54:db:29:60:59:16:9b:68:1c:a3:8c:4a:d3:
4d:78:d9:e2:38:9a:41:27:f4:a8:53:4f:a9:ae:1e:
28:37:57:47:59:52:e9:8a:dd:f6:2d:57:24:65:99:
04:a2:57:1f:b8:d3:41:99:b8:6e:19:28:1b:94:a1:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1C:44:34:5E:2E:62:56:12:FE:61:7B:4C:70:99:66:1C:E4:AF:EF
X509v3 Authority Key Identifier:
keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2b:53:71:f7:30:80:b5:d9:9b:64:60:75:b7:47:cc:e8:14:
61:55:e9:38:40:3a:96:3b:e3:6b:2f:0a:4c:0a:32:e8:51:11:
5e:cc:8f:3a:70:65:8c:c3:e3:72:95:1b:81:81:65:7a:ee:a8:
c9:af:51:13:2a:8d:07:2b:a1:1e:77:65:13:ef:ea:da:53:63:
65:ea:e6:ff:f3:80:8d:78:77:1b:0c:46:46:70:2a:5e:4f:e2:
12:28:d9:47:cb:74:1e:a1:2b:8e:33:1b:1d:7f:75:f9:c3:cd:
73:eb:9c:71:15:0b:25:e9:d9:f8:e9:47:9a:63:bb:dc:30:d5:
da:b7:bb:eb:b8:d4:1f:37:9e:90:7d:02:5b:ee:5f:40:06:2e:
0d:9b:57:3e:f5:8f:86:d2:68:46:e0:03:d0:c7:19:0c:36:b2:
8f:39:89:1b:ae:af:87:94:b4:0e:9f:d3:b8:31:09:c4:f0:b9:
6f:15:0e:c6:dd:a6:b8:7b:01:56:04:7f:9b:ce:44:5a:d3:81:
20:72:e1:18:cb:dd:df:05:9a:02:24:a2:dd:eb:ac:1f:66:ed:
4a:7d:a8:80:1f:00:b1:88:f9:74:b0:f7:c4:79:7a:b0:51:d9:
31:40:d5:e8:43:5a:b3:f7:a2:61:2c:5f:48:da:35:bf:ac:5d:
60:39:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:08 2026 by rpki-client