
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json)
Hash identifier: T70/o0tbGI1mKfo1VKPOZy2Npl3NwlR3KK8bvO2J9WI=
Subject key identifier: DE:0B:71:54:93:99:05:4D:2D:1C:5F:CA:04:12:8C:D9:E1:12:84:C9
Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60
Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
Manifest number: 0464
Signing time: Thu 23 Jul 2026 01:02:40 +0000
Manifest this update: Thu 23 Jul 2026 01:02:40 +0000
Manifest next update: Thu 30 Jul 2026 01:02:40 +0000
Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: VhJHT9tCrKjAw/2gJxxW2Sm/L6HamNRoVDTutimRrlY=)
2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: xky0bkAGJZiPmJrh1utEauZh7Xc1VAPTEfxwrtpScXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl
rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
Validity
Not Before: Jul 23 01:02:40 2026 GMT
Not After : Jul 30 01:02:40 2026 GMT
Subject: CN=6a616830-d8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:09:ee:b1:73:e6:bb:46:4a:46:20:68:67:32:
34:25:27:fe:b6:bd:fd:7a:ce:ea:6c:c8:f8:10:64:
b2:90:c0:d7:93:2f:a2:3b:d4:76:ba:b6:1e:f2:15:
b2:44:64:2f:1d:1c:d6:8f:47:5f:8f:c4:b3:c6:f3:
36:95:1f:97:18:7a:fa:fa:77:e5:91:7c:c6:98:82:
10:3d:86:64:9a:6d:3d:41:ef:33:70:e8:76:3c:e8:
8f:93:cf:69:52:b9:b7:ca:ac:a6:7d:e6:e4:f4:b1:
c7:1f:11:66:eb:b5:15:5b:1c:a9:e2:f7:74:12:9f:
71:08:50:4f:1f:4d:29:e3:ee:67:a5:e4:d0:90:17:
83:86:5d:57:85:0c:e0:c6:cc:93:4f:80:c3:94:30:
41:21:7c:3f:76:0d:44:0d:3a:27:40:70:fd:f6:71:
8a:82:13:aa:87:8b:00:21:ce:72:a3:45:28:00:48:
b7:33:ec:91:b0:8e:e9:ca:ef:22:b3:08:86:8f:cd:
a7:f9:80:1f:23:26:a9:90:9f:81:4a:a3:27:60:a4:
ac:fd:21:5b:38:dc:f9:19:83:7c:62:fe:f2:02:7b:
bc:05:dd:9f:85:e2:f0:2d:67:b0:8c:27:bd:ac:ec:
bb:12:0d:32:dc:fd:a4:b0:62:35:07:8f:2f:42:04:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:71:54:93:99:05:4D:2D:1C:5F:CA:04:12:8C:D9:E1:12:84:C9
X509v3 Authority Key Identifier:
keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:f6:a6:ee:5a:38:0b:2f:98:8f:8b:f0:7e:9a:9a:d6:aa:37:
52:bb:73:2e:83:db:92:df:b3:a6:7d:74:4f:ae:cf:38:c4:b5:
a3:7e:92:15:25:bb:45:34:7b:9d:35:6e:b0:b5:b3:1d:6d:a8:
a3:e4:dd:02:cc:30:1d:0b:b3:a0:56:d6:fe:0c:93:4d:61:54:
a2:24:b3:f7:c7:0a:4f:32:e9:af:0a:f6:d0:0a:6d:22:65:be:
20:4f:ae:4f:ee:a4:94:79:7a:51:c8:6f:4d:c3:59:c8:da:9f:
d2:75:fa:57:50:ba:f4:18:ac:97:57:9c:df:12:08:2b:8a:49:
0d:77:1c:b0:a0:be:ef:e1:20:a6:47:55:49:7b:fc:71:a2:4f:
b9:36:61:9b:d3:dd:e8:dc:b0:30:a8:fe:ae:9c:b5:44:2e:d3:
6e:81:db:f5:d1:10:ea:4f:ba:46:51:d6:ad:62:a6:a8:9a:84:
66:d2:04:f7:9f:a1:69:c6:1c:b7:17:7a:92:87:5f:7d:d8:fb:
fb:40:f2:da:78:f1:98:2f:88:b2:cb:68:60:12:b1:83:44:02:
c7:ab:70:2c:f9:80:6d:d4:9c:b9:90:6a:5c:47:65:db:8e:cc:
59:8a:00:dd:66:a5:71:c2:6f:49:a1:19:49:7a:61:cb:c1:58:
80:31:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:40 2026 by rpki-client