
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier: G6PXgrtfwSoy+y4Rs/wBzhALVSqG9AmeOjfaf1+6Aeg=
Subject key identifier: 3E:C1:FF:C6:AF:8A:C7:7F:D7:51:AD:AC:67:B2:22:C0:8D:AE:B3:9E
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial: 0B2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number: 0B1F
Signing time: Tue 22 Sep 2026 19:08:50 +0000
Manifest this update: Tue 22 Sep 2026 19:08:50 +0000
Manifest next update: Tue 29 Sep 2026 19:08:50 +0000
Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: 9Ch3TXPiJO7OOSqbcbcGukEe/B13DSwtZkhDanMFGag=)
2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: +6MnWixCvzMt3rLSJSp2YvtRQcWH4ISzu9SV3GhK8Pw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Validity
Not Before: Sep 22 19:08:50 2026 GMT
Not After : Sep 29 19:08:50 2026 GMT
Subject: CN=6ab2d242-225c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:bd:5b:1a:45:1f:51:b5:05:da:02:73:40:
e7:5e:3b:86:5e:4b:90:ec:55:bf:d4:a8:fd:1b:66:
f8:86:1f:1c:a9:8c:fc:85:f5:0a:f7:04:ad:27:4c:
4e:c5:a1:c7:7d:79:73:2e:f6:22:64:04:8a:c3:89:
2e:11:23:dd:ff:38:ca:9b:cf:64:a0:3d:3a:f3:1a:
9a:5d:bf:d2:3d:f9:f8:fd:07:47:e1:b6:9f:37:c1:
5a:35:8a:b3:71:fc:53:25:f3:aa:a5:cb:e2:66:dd:
87:1e:e1:ea:e2:91:ef:b4:1d:0e:f9:82:d6:80:69:
15:6b:39:e1:b9:bd:9c:40:c1:6a:ec:3d:73:86:a6:
9b:4f:9a:84:45:de:0c:94:b2:01:af:b0:fb:bb:fd:
57:19:20:c4:91:9d:2c:5c:19:ca:7e:1d:a4:18:e0:
4d:fd:fd:37:bf:a9:ed:42:b7:c0:c5:29:4f:94:98:
98:76:b2:8d:7b:f6:0c:5b:f7:49:9c:57:0c:9c:76:
d8:c6:15:85:e0:47:17:f2:d7:ea:eb:45:da:d9:e5:
24:b8:a5:d6:a9:6c:58:76:1d:8c:a0:28:00:e0:50:
16:d4:a3:6a:f8:96:ee:15:e4:29:13:6e:d7:b9:cd:
44:08:b6:17:6c:95:f7:be:32:dc:0a:9a:ef:98:68:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:FF:C6:AF:8A:C7:7F:D7:51:AD:AC:67:B2:22:C0:8D:AE:B3:9E
X509v3 Authority Key Identifier:
keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b8:5f:67:89:fc:2e:96:5d:70:a1:29:e1:ce:1a:cb:98:7a:
07:09:e6:53:cd:c7:4e:80:10:fa:35:7f:45:ca:32:d6:dc:16:
ef:c1:1b:7b:f6:24:27:17:c9:dd:d6:ee:83:e2:f1:cd:1b:40:
f7:4a:b6:60:fe:85:c9:92:42:10:81:f4:e1:f2:41:a5:b8:e0:
2c:db:9a:b5:a7:da:65:2f:14:81:13:e8:8f:4a:ca:4f:73:ce:
86:0f:de:24:65:d8:cc:f5:34:c7:21:4f:bc:d8:7d:04:a0:ea:
5d:d2:de:32:68:20:c8:46:57:c5:9f:10:2b:3e:e8:7c:d6:d6:
47:4f:9a:22:ca:2f:76:33:45:05:2e:13:f1:f8:48:8b:90:a6:
46:2f:f7:1c:1b:b9:1f:49:5a:88:75:ca:28:7e:2c:3e:aa:5e:
e7:79:1d:b0:08:6b:a1:57:db:1f:11:74:aa:7c:15:d3:36:cf:
c2:9f:64:a4:0a:e2:a4:00:94:66:be:73:04:db:3d:73:03:67:
62:a1:c0:02:68:04:85:80:84:f7:ef:8f:95:e9:f3:91:ab:62:
3d:74:0f:04:a5:bf:1a:e2:82:2c:b2:95:f8:86:22:57:c2:95:
af:c0:0e:29:d9:66:ad:37:92:4b:a0:a0:99:fc:8d:bd:7d:c1:
20:a2:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:51:41 2026 by rpki-client