
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier: H0iO8Dgj9n+nwW4JLlVdsRMQrcDo5Z6Gk0ZyACao6qQ=
Subject key identifier: B1:79:1B:0C:51:97:EC:CD:BE:A1:69:5B:94:A1:9C:AA:98:1E:86:40
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial: 0685
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number: 0679
Signing time: Tue 24 Mar 2026 22:15:26 +0000
Manifest this update: Tue 24 Mar 2026 22:15:25 +0000
Manifest next update: Tue 31 Mar 2026 22:15:25 +0000
Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: SSGvCKhPDzCH/Q1RAbJZNg6/r07eMrS9p8arTDTkq/o=)
2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=)
3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: rUB8K/gQFaS9QOQ5n+o0moQe0g7Bdol9yJ5xYGhKZ7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Validity
Not Before: Mar 24 22:15:25 2026 GMT
Not After : Mar 31 22:15:25 2026 GMT
Subject: CN=69c30cfd-c8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:12:f1:47:20:d1:d1:da:92:51:40:b6:e2:
53:a2:66:bb:18:99:01:30:9f:2c:ef:45:c4:b9:c2:
22:d2:1c:8b:c2:5f:f0:94:98:68:55:cf:b9:da:90:
5b:58:72:2b:cc:e1:6d:20:2a:f8:3f:d7:d2:2b:ce:
89:29:e4:f6:54:11:39:61:65:13:a6:84:9b:02:5c:
56:23:cf:4f:0c:36:e8:f5:90:98:55:8d:ea:41:43:
ec:15:31:97:5f:0a:35:98:84:a8:5f:15:47:37:bc:
52:5a:a8:88:01:ac:92:84:ae:65:71:9e:ca:8a:b1:
91:23:bf:f7:c9:d6:bc:cf:34:c1:46:89:96:4a:69:
cd:28:81:27:f9:85:ff:d1:af:95:fc:cc:ff:9d:69:
54:88:a3:c2:19:38:97:b1:f8:6e:72:55:5c:a0:cd:
42:34:78:fd:7c:b7:b7:e1:39:23:4f:12:55:5e:f6:
8d:c0:5b:de:68:20:65:2b:71:8b:01:8c:f2:57:fb:
a0:c8:59:86:cd:04:e2:5f:07:51:10:59:d4:49:b4:
1b:4c:f0:0c:01:88:b7:71:8f:d1:14:c3:90:6e:16:
9d:d3:2e:ec:27:17:5d:39:b0:20:f1:35:5d:aa:46:
3d:07:0a:67:29:75:f1:4f:d8:f6:2f:7c:ac:f2:65:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:1B:0C:51:97:EC:CD:BE:A1:69:5B:94:A1:9C:AA:98:1E:86:40
X509v3 Authority Key Identifier:
keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:80:cc:12:78:e4:33:e8:ae:8f:d6:f4:42:57:95:c5:c0:
67:44:00:da:8f:64:00:b6:56:bb:94:e1:88:fc:b9:cc:b2:fc:
26:45:2f:a4:da:67:a3:c0:83:3c:ad:76:11:9f:14:3e:36:e3:
51:62:2b:7d:d2:87:58:5e:9a:6b:43:93:ca:16:6c:c0:09:9d:
66:a2:7d:23:ed:8e:0c:86:bf:4a:27:c9:2b:bf:ab:ae:00:3a:
18:a2:4f:7f:52:09:37:18:f1:89:4f:76:f2:3c:ed:dc:40:88:
57:d7:e0:75:20:2b:50:fa:f2:c6:95:9e:37:44:af:bd:37:30:
fc:7d:a1:55:fb:33:ba:15:2f:6d:fd:24:25:44:82:85:17:be:
f0:6c:12:e9:94:4f:c1:ea:6e:eb:25:02:69:2a:e6:3f:b7:a2:
f5:03:25:96:62:50:b6:05:2a:1a:27:73:e9:e3:dc:d1:d2:1d:
84:e6:d5:b7:5f:e2:85:34:85:f7:f2:63:0c:0b:a1:48:ae:e6:
99:ce:3e:fd:60:71:bd:54:bd:25:ee:01:f6:46:4b:5b:46:89:
d8:f2:b9:e4:7d:88:71:41:e4:cf:aa:ca:74:3f:19:ec:5e:ba:
f0:7d:2b:33:8c:1e:38:f2:58:b0:dd:53:bf:a1:87:fc:0a:25:
02:a1:de:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF
NzA5OTRGMDMwHhcNMjYwMzI0MjIxNTI1WhcNMjYwMzMxMjIxNTI1WjAYMRYwFAYD
VQQDEw02OWMzMGNmZC1jOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2US8Ucg0dHaklFAtuJToma7GJkBMJ8s70XEucIi0hyLwl/wlJhoVc+52pBb
WHIrzOFtICr4P9fSK86JKeT2VBE5YWUTpoSbAlxWI89PDDbo9ZCYVY3qQUPsFTGX
Xwo1mISoXxVHN7xSWqiIAayShK5lcZ7KirGRI7/3yda8zzTBRomWSmnNKIEn+YX/
0a+V/Mz/nWlUiKPCGTiXsfhuclVcoM1CNHj9fLe34TkjTxJVXvaNwFveaCBlK3GL
AYzyV/ugyFmGzQTiXwdREFnUSbQbTPAMAYi3cY/RFMOQbhad0y7sJxddObAg8TVd
qkY9BwpnKXXxT9j2L3ys8mWYewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLF5GwxR
l+zNvqFpW5ShnKqYHoZAMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5
QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS
MnpteU4wTmJGMDNuQ1pUd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoB2AzBJ45DPoro/W9EJXlcXAZ0QA2o9kALZWu5ThiPy5zLL8JkUvpNpno8CD
PK12EZ8UPjbjUWIrfdKHWF6aa0OTyhZswAmdZqJ9I+2ODIa/SifJK7+rrgA6GKJP
f1IJNxjxiU928jzt3ECIV9fgdSArUPryxpWeN0SvvTcw/H2hVfszuhUvbf0kJUSC
hRe+8GwS6ZRPwepu6yUCaSrmP7ei9QMllmJQtgUqGidz6ePc0dIdhObVt1/ihTSF
9/JjDAuhSK7mmc4+/WBxvVS9Je4B9kZLW0aJ2PK55H2IcUHkz6rKdD8Z7F668H0r
M4weOPJYsN1Tv6GH/AolAqHeag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:52 2026 by rpki-client