
$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
File: KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json)
Hash identifier: LjCxvdIjiJEufYJDrn8C7Jb7ZcHedGteKZKdUiJw7tU=
Subject key identifier: 21:65:D2:D5:95:54:E4:3D:43:54:9C:A4:16:24:14:53:69:97:6C:E3
Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
Manifest number: 94
Signing time: Wed 25 Mar 2026 06:41:12 +0000
Manifest this update: Wed 25 Mar 2026 06:41:12 +0000
Manifest next update: Wed 01 Apr 2026 06:41:12 +0000
Files and hashes: 1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: zfea6roO1s5mkmMuj2Be7a/t6DI2KovlGjC2Gbiwpqc=)
2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: YZdUm7+WLurwEjDF7nwXv0d6iTCyzNott8Mq+jpg6ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Validity
Not Before: Mar 25 06:41:12 2026 GMT
Not After : Apr 1 06:41:12 2026 GMT
Subject: CN=69c38388-04f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:f7:26:85:79:2b:03:53:39:cc:39:89:5e:
99:86:40:b2:be:af:a4:31:05:a5:5d:5c:18:d0:45:
ee:cc:71:24:c7:05:0d:a8:dd:46:1b:bd:67:9c:96:
a7:50:b6:b3:59:ed:29:c5:0b:fe:94:27:db:e7:41:
d4:e5:00:ce:8c:77:6d:c0:e8:56:a6:41:10:1e:59:
26:3d:ed:45:dc:d2:20:a8:cb:8d:c6:5c:dd:6b:9a:
73:1a:db:7a:69:1a:6d:ed:7d:ef:d5:23:af:ef:e3:
14:2c:74:63:26:b6:59:f6:2b:92:b1:05:32:62:66:
0a:c8:3a:31:f1:57:c3:97:f6:f2:b5:9e:16:1d:e6:
da:95:e5:c6:22:33:45:ca:56:c4:0a:3e:f5:07:5d:
73:d4:b1:4c:a4:fa:14:1c:ab:6b:ea:b5:48:07:6c:
e5:c5:94:47:c4:8f:75:33:9b:89:e5:9a:24:06:12:
9c:c5:45:5b:6f:7c:91:2a:bd:77:33:b9:e2:2d:36:
7b:a8:37:fb:b0:96:0f:57:52:ad:1c:05:93:84:6f:
9d:83:db:f7:8b:b1:ae:0b:34:16:a0:0a:66:ac:0a:
e0:a9:3c:01:41:83:0e:b5:1b:fd:ae:e4:58:8a:b4:
af:98:89:05:03:41:de:80:ec:40:78:f6:d0:19:80:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:D2:D5:95:54:E4:3D:43:54:9C:A4:16:24:14:53:69:97:6C:E3
X509v3 Authority Key Identifier:
keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f1:8a:53:10:39:51:af:de:7c:f5:7d:34:3c:e0:a5:22:98:
c0:d5:9a:57:50:4b:0d:8e:84:0c:d9:67:b2:86:24:14:5d:ad:
d2:cc:9e:cb:40:67:5e:1d:5b:5c:74:ba:47:bf:f1:ec:04:aa:
14:3c:93:cb:7e:23:8d:c8:fd:e1:a6:13:aa:6d:27:75:d0:66:
a2:37:08:89:0a:6a:65:40:49:07:81:26:ac:14:66:9e:49:b5:
d8:35:59:65:f6:a0:4e:d2:e6:0f:82:06:b9:60:0e:bf:5f:81:
8f:b4:3b:1f:81:6b:51:05:1c:a7:f9:56:14:b9:f8:ac:b0:47:
a0:ed:44:67:68:91:57:2e:eb:13:01:a9:c9:9a:21:5a:8d:af:
d6:d4:f9:ef:4b:dd:ff:f4:6c:50:14:8d:aa:87:fd:20:06:ab:
ce:c9:8a:88:71:9b:ad:86:b9:24:3b:aa:24:29:b9:11:87:8d:
ce:25:40:03:54:54:d2:ce:5a:04:c4:f5:0c:53:ca:86:2b:f4:
5d:87:5b:bb:d1:58:9f:9d:95:07:b4:b1:28:9a:93:4a:92:59:
10:0b:6c:4c:f5:c2:bb:45:20:93:d4:10:c9:05:be:18:2c:f4:
86:66:6d:76:6a:70:a1:63:d8:f7:b0:c0:2b:d2:54:20:fe:8e:
a7:0a:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:38 2026 by rpki-client