
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json)
Hash identifier: kH5X18/r4NsNWkKdIPGTPzl4OiBY9YwqxcnQKyvkGjQ=
Subject key identifier: 8C:FC:D5:6C:E1:D4:71:12:2A:14:87:08:16:5B:10:77:B1:25:42:BB
Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
Manifest number: 0706
Signing time: Wed 22 Jul 2026 22:29:55 +0000
Manifest this update: Wed 22 Jul 2026 22:29:54 +0000
Manifest next update: Wed 29 Jul 2026 22:29:54 +0000
Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: 9+9vkiRwyH5uqIpeWataSBLW7cFWWpE2irKyuchIPBI=)
2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: u0l6ewd10l3CnKNZWLyz/pX9vsxOgLw5k8pS9qZkY3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Validity
Not Before: Jul 22 22:29:54 2026 GMT
Not After : Jul 29 22:29:54 2026 GMT
Subject: CN=6a614463-cf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:46:0b:25:49:64:f0:5f:23:91:6a:6a:92:
94:00:2e:00:e2:1b:cf:42:68:61:bf:48:12:c3:66:
8a:1a:a9:a1:e0:3c:ed:38:0b:2b:c1:13:f4:fd:79:
82:f4:cd:7d:1b:d3:d1:7f:40:79:82:08:bc:3f:b9:
41:cf:d1:fb:28:93:65:1c:11:79:e7:8a:c5:dc:c5:
d9:47:27:71:58:d7:d7:be:26:f2:d6:e3:27:d9:a9:
cb:54:1a:37:92:92:67:71:97:4f:6b:fc:4c:ce:a7:
df:56:58:88:df:2c:03:ce:db:5c:73:ea:07:d0:1f:
4f:23:0b:8e:59:b9:48:64:20:77:4c:88:6b:63:67:
2e:c5:10:d2:2b:a2:16:29:73:98:5a:12:b6:bf:37:
20:b2:4e:62:43:15:b6:cb:ae:b0:fb:2d:58:dc:6a:
2e:27:a1:f6:1f:2d:81:3a:43:51:76:c4:d5:0e:3f:
e2:da:5d:61:7f:28:08:bf:bd:ce:5b:01:21:c8:4e:
7b:83:a0:73:ec:da:b5:17:c1:73:f2:b4:cc:a4:c6:
d3:35:d3:a4:59:da:61:76:6d:53:f0:7f:f3:95:1d:
f3:01:ae:88:4d:94:f6:6c:46:80:eb:00:26:87:0a:
ee:f7:f7:90:1c:fe:20:c4:46:98:bc:12:f4:24:ca:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FC:D5:6C:E1:D4:71:12:2A:14:87:08:16:5B:10:77:B1:25:42:BB
X509v3 Authority Key Identifier:
keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:77:ab:4e:f9:11:e6:b9:a7:97:c9:ec:ff:bf:af:fc:ac:cf:
3f:23:8b:b5:7f:20:e0:d7:f5:7c:42:db:ae:06:5a:f5:f1:b5:
7f:46:86:3a:bb:19:35:98:33:97:cf:8d:cf:cb:d4:4c:83:8e:
e9:9f:4a:b8:7c:35:14:f9:e6:cb:07:b8:08:58:be:fe:d8:32:
9d:da:53:23:d2:fb:d1:9e:92:03:18:d9:5e:91:da:06:4b:a2:
ae:e2:1e:f0:3c:aa:67:7d:5a:f8:d8:68:19:e8:ce:80:ee:74:
1e:5e:89:22:77:07:5c:ee:ec:98:22:0c:87:78:a5:7b:3d:8b:
41:d2:a2:20:ae:9a:28:2c:b4:01:c4:23:3a:a4:b0:e1:77:19:
60:38:8c:00:91:bf:75:b3:a4:0a:0a:4e:33:90:27:82:32:c5:
6f:67:ba:c5:6e:f7:2c:6f:8b:51:c8:55:71:39:34:ce:e7:ac:
73:e9:83:7d:c2:28:b8:01:ee:85:d8:a8:b2:67:7f:b0:55:10:
f9:da:4a:5b:c2:13:66:c1:49:bc:6d:eb:a6:01:ea:35:68:d9:
2c:45:96:63:f1:b8:0a:b5:79:06:58:ba:73:ee:75:f9:73:23:
13:11:ae:fe:1a:bd:1f:87:ae:7f:77:28:66:10:c3:f6:58:36:
b2:28:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:48 2026 by rpki-client