
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier: iMLoSumYe/2zntVNgkkOC8u3q/W0RJ3hv2Jsc5ANI5k=
Subject key identifier: CD:B8:63:DF:90:99:A9:6E:8C:87:37:6E:3E:3E:9A:A0:0F:E0:D9:C9
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial: 1087
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number: 1087
Signing time: Thu 26 Mar 2026 17:18:45 +0000
Manifest this update: Thu 26 Mar 2026 17:18:44 +0000
Manifest next update: Thu 02 Apr 2026 17:18:44 +0000
Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: A7RNFAuislxViZaSLQmCsMpbKC6cTPaxfGVoKR4yKxM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Validity
Not Before: Mar 26 17:18:44 2026 GMT
Not After : Apr 2 17:18:44 2026 GMT
Subject: CN=69c56a75-8bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:7b:3b:f4:2f:4b:c0:40:56:b3:1f:40:d9:
25:12:41:32:07:3e:f5:aa:e9:3f:b1:0e:03:e7:8b:
9c:ad:ba:51:1c:e6:b6:9f:66:10:d7:44:70:7b:4c:
0a:83:e6:f6:c5:3f:7a:87:24:2d:07:dd:f3:db:94:
90:2e:cb:9f:78:b4:c5:58:9a:1d:c8:63:87:b0:8a:
98:5a:7a:f5:c1:c3:5f:4e:3e:2d:f6:f0:b1:23:87:
81:f4:04:65:60:9e:57:cd:d8:74:18:73:38:f4:dc:
23:b8:fe:46:af:4c:73:88:50:bc:07:78:4e:8d:40:
7b:bf:fd:be:50:ae:ef:6c:b5:91:af:ee:50:a3:50:
56:26:0f:24:92:04:0a:f8:63:32:e8:fc:d8:9c:2a:
d9:d3:7c:2b:7c:8c:4c:62:92:f3:6a:37:c5:ba:1b:
91:99:55:57:f5:b9:74:d1:35:b4:da:68:45:a6:76:
61:67:49:86:bf:50:5a:17:87:5e:f5:e5:45:6a:3e:
84:b8:60:7c:52:ae:f3:81:5c:e8:12:a9:aa:69:d8:
c7:c4:c7:75:a6:4a:e9:bf:80:82:d7:a5:7d:a2:ad:
b1:26:e9:f3:96:67:e2:08:71:40:aa:18:b0:04:2c:
5d:e0:72:b7:7a:81:e2:61:e5:7c:ac:5d:5e:09:6e:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:63:DF:90:99:A9:6E:8C:87:37:6E:3E:3E:9A:A0:0F:E0:D9:C9
X509v3 Authority Key Identifier:
keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:df:98:03:4e:3b:93:72:29:c6:a5:0e:cd:e1:b4:de:c2:5c:
66:f4:21:60:09:ae:54:10:d1:06:be:9e:bd:07:6d:85:73:5d:
f3:fe:fe:b7:fd:53:0c:2a:de:e9:5f:82:24:61:99:63:a2:12:
4e:ca:38:5e:17:ae:6f:4b:5f:83:54:a3:60:dc:e3:38:1c:b4:
99:1e:ab:1d:7d:19:1b:db:e2:c1:21:23:26:c3:b9:f5:6f:68:
08:04:aa:15:22:7d:49:24:0a:cb:d9:81:86:46:ae:09:6b:b1:
8a:56:0f:20:a9:f7:ec:a2:50:db:e1:d3:24:49:3d:86:b6:48:
66:bb:1c:78:2b:e6:27:46:52:1a:43:79:f6:db:d0:0a:fe:49:
51:27:b6:ad:2f:0f:93:1f:b6:9e:c2:4b:bf:66:3b:4e:06:94:
d7:76:9b:e1:0f:6f:c9:fb:b2:54:71:bd:ab:f4:a5:de:51:1b:
7a:98:ef:1b:dc:d0:15:ff:86:cb:01:1f:2f:a4:31:95:77:87:
d0:cc:70:b3:a3:67:fc:d2:93:ad:36:6f:4c:b9:d5:56:cd:a4:
aa:91:1f:21:db:0a:79:3c:46:47:db:73:33:23:7e:4d:f1:3d:
ba:d5:fb:66:68:65:f2:7c:c8:58:7c:1b:ec:29:cc:20:b7:3d:
39:38:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:10 2026 by rpki-client