
$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File: rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier: O3bQTRfDcnOvXVL8Xqd57p/q/5it9+2PfgsU9E8XAQ4=
Subject key identifier: 61:14:BB:CC:50:13:A0:06:F8:4C:35:1E:7C:BF:BF:39:58:CC:57:43
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer: /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial: 0861
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number: 0859
Signing time: Tue 24 Mar 2026 20:30:14 +0000
Manifest this update: Tue 24 Mar 2026 20:30:13 +0000
Manifest next update: Tue 31 Mar 2026 20:30:13 +0000
Files and hashes: 1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: Hpmigl/7MRywNWPEnXfDvv6yg+ESlHtL3kirKiQkYv0=)
2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: dCi6VvBG8Kieh+LiRI/8SoC0c+Kf0Pviv2GOgnuUocs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Validity
Not Before: Mar 24 20:30:13 2026 GMT
Not After : Mar 31 20:30:13 2026 GMT
Subject: CN=69c2f456-7be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:db:8f:64:0f:22:97:59:cb:15:9a:60:23:
83:27:6c:22:6f:b1:e9:af:89:e9:13:60:c6:80:e2:
16:c2:fd:72:93:4f:dd:84:91:17:bf:1f:e4:61:e4:
a0:5b:62:13:ba:03:3c:11:dc:9e:05:bc:ca:db:b3:
66:0b:b8:4f:41:2a:6c:80:0b:f4:9a:e8:4d:5f:e2:
90:ef:24:05:7f:da:5f:89:06:bb:a7:e5:f6:30:fa:
fa:d8:46:b4:ec:e9:af:25:13:03:ed:2b:b3:f2:1c:
2d:89:ac:8c:38:5c:67:ec:d6:7d:a3:9a:8f:a9:8c:
dc:2d:06:4c:28:49:90:4f:2a:5f:41:c0:62:bb:7a:
76:3f:f8:ad:eb:9e:05:b8:03:74:0b:5f:d6:62:dd:
dd:7b:fb:22:31:05:7d:73:79:09:61:b7:bf:1e:93:
92:d1:35:0d:bd:70:5e:37:36:45:b8:dc:3a:b4:3e:
8e:8b:0d:fb:b1:c9:7a:d5:c4:17:d9:32:0a:b2:3a:
ac:f2:2b:f0:2f:44:37:ff:39:34:89:1a:91:14:8a:
26:0e:1f:98:8a:d5:a1:dd:d6:06:16:a0:45:dd:ad:
04:b9:42:23:32:96:34:a4:e2:fd:ce:b2:c8:96:c1:
8c:d9:58:e2:42:83:31:65:4f:2d:d3:d5:b8:e0:e9:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:BB:CC:50:13:A0:06:F8:4C:35:1E:7C:BF:BF:39:58:CC:57:43
X509v3 Authority Key Identifier:
keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b9:d7:ae:12:e2:65:42:9a:5b:b9:fd:c2:e8:1b:9d:5f:4b:
52:03:0e:df:6d:af:c1:5b:d7:a1:27:e2:ff:08:c2:95:4f:f8:
98:20:58:12:fe:1d:0d:79:a8:36:60:ed:f7:ce:1c:f2:cd:72:
88:27:bd:a5:47:d1:74:ec:98:fc:cd:7b:25:34:09:34:d1:5d:
68:8e:84:1e:02:ba:ae:53:05:5b:b9:48:08:93:0f:f4:cd:90:
db:0f:06:74:d8:f1:01:14:89:78:99:12:a3:e4:f3:bd:98:81:
08:1e:e6:84:48:a9:14:f1:71:d8:11:5e:47:08:2f:57:19:e9:
48:bf:42:38:14:a4:e5:67:33:c7:1d:a4:01:ec:13:30:62:58:
3f:eb:2e:b3:57:20:47:ec:f1:b9:8b:ff:74:5e:fb:c8:8f:5c:
d9:bc:e7:76:c7:57:20:5c:04:e1:f1:60:75:e5:0b:d2:b4:54:
f2:ca:17:b6:9e:13:28:ee:45:bc:25:32:6c:2f:fd:2e:0a:d0:
12:7b:4b:db:bf:a2:8b:7e:f3:23:91:d9:70:40:3d:87:d9:5e:
a8:0b:19:c6:19:b8:fa:78:48:7e:e1:5c:a6:1f:dd:14:cc:ac:
de:97:2a:e7:60:fc:66:e0:98:cd:22:81:8b:1c:09:da:4d:a8:
67:5d:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:44 2026 by rpki-client