
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
File: kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json)
Hash identifier: T5exiXeYtXnieg2nPFdN8zu+gQedpA1mF/VtmqdR+Bs=
Subject key identifier: 7A:D0:5F:20:D1:E3:A2:30:41:8D:36:E8:7B:5E:8E:D8:BF:D1:39:8E
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Certificate issuer: /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
Manifest number: CB
Signing time: Sun 27 Sep 2026 07:26:15 +0000
Manifest this update: Sun 27 Sep 2026 07:26:14 +0000
Manifest next update: Sun 04 Oct 2026 07:26:14 +0000
Files and hashes: 1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: /tCOGlXDBiSvzz9hfBR9O4qDZZsJca+QDmvcrH1Km+I=)
2: 117F7230ADD611F1A3F789A53C11F970.roa (hash: MvbalvbytGaLCVL9NlFOUAL6a0UY6goTUEonuI/BFVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Validity
Not Before: Sep 27 07:26:14 2026 GMT
Not After : Oct 4 07:26:14 2026 GMT
Subject: CN=6ab8c517-fdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:70:e1:6a:a8:1f:27:61:50:92:59:2b:0c:
84:52:11:f9:cf:60:20:1a:87:02:e7:2e:57:0f:a3:
9f:77:67:b8:f1:7f:ea:ae:bc:c8:d6:b2:35:af:ca:
bd:43:5c:24:39:8d:6e:be:25:db:0a:d5:be:13:1e:
b1:3e:b1:44:34:7e:a6:0e:75:fa:c5:00:77:99:30:
b7:3f:e1:5c:a8:f6:67:4c:4f:a9:f9:78:82:93:26:
09:ba:1f:52:0d:a5:e2:c2:24:de:22:b5:cc:24:d6:
7a:d4:2d:b7:4b:06:f4:c6:3e:93:37:42:31:6d:07:
43:68:03:00:c9:56:8c:d9:b3:10:fa:63:71:cc:6c:
7e:80:26:20:6c:a3:0d:b3:c1:a9:bc:26:9d:0d:19:
e6:35:4a:54:69:cb:e2:e4:77:19:52:09:d9:2a:f9:
a1:f9:37:2d:c7:af:d0:dd:0a:ad:24:76:94:bd:f9:
13:fc:fe:5b:c8:b6:8b:38:5f:f6:a2:57:6b:e0:c2:
56:8c:8d:eb:11:8c:d0:30:4a:e2:aa:ec:cd:89:6b:
b3:aa:ad:66:f8:33:67:f9:db:20:f9:d2:19:0c:ce:
4d:04:68:d2:8f:ae:8e:2a:de:74:c8:a9:52:2e:48:
1c:35:49:4e:05:06:88:6c:22:0d:13:33:3c:54:3d:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D0:5F:20:D1:E3:A2:30:41:8D:36:E8:7B:5E:8E:D8:BF:D1:39:8E
X509v3 Authority Key Identifier:
keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:52:f9:a1:a6:ff:80:00:d6:12:de:8f:e2:3f:c1:ed:ce:
f2:66:f1:75:40:57:67:cf:a5:c7:76:2e:14:79:b9:c5:6d:a3:
fe:2d:0f:fe:e2:69:c3:4b:c8:73:a3:2a:d9:ae:21:db:50:92:
c4:54:30:b7:1e:58:c1:bf:32:aa:07:ec:2b:5c:f2:30:d8:e5:
e3:15:d5:d5:f4:d0:9f:4b:f9:42:6c:54:32:ea:b2:88:76:12:
e9:28:bf:e8:1f:75:98:a1:69:32:76:b8:2b:c1:de:a8:68:af:
ea:a3:18:0e:41:dc:e4:fa:db:21:e4:67:b6:ef:84:3d:fa:89:
7a:ee:13:89:57:e2:2c:cf:a9:73:76:02:f1:c6:70:18:9b:81:
ef:14:16:c3:aa:1a:04:3e:14:09:1f:a5:db:d7:75:4c:6d:75:
f8:c6:1a:5c:a8:e4:71:3f:cb:9b:46:e7:3c:df:60:ce:df:3f:
f1:ed:21:1e:76:16:f1:b4:61:71:4a:84:68:00:9c:46:64:7a:
aa:3b:2c:b5:b6:f6:ef:e2:6b:05:11:ac:27:2a:d7:3b:e1:86:
43:8f:2f:e2:58:4c:69:4e:1c:d0:aa:d1:14:aa:08:8f:b9:7e:
f6:54:d1:58:da:0d:bc:24:df:94:3d:27:17:8d:0c:65:cc:ce:
e5:94:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:58:12 2026 by rpki-client