
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier: +Kbq7PplbneF5C/c1NEFPNBgdxCELHnuNkSMRG+o160=
Subject key identifier: 32:07:8C:1F:0E:10:84:73:20:4F:7E:F7:82:F7:22:D6:C3:37:EA:63
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial: 0AC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number: 0ABE
Signing time: Tue 24 Mar 2026 19:16:05 +0000
Manifest this update: Tue 24 Mar 2026 19:16:04 +0000
Manifest next update: Tue 31 Mar 2026 19:16:04 +0000
Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: 2LqQGCP+DXBhiOVv630ZAZVhiKu3KFoX2yctlV/ZwYE=)
2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: AkREMdUY9iw5osiiQhe7w1xnANjcqb+Bqi344RCqSk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2759 (0xac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Validity
Not Before: Mar 24 19:16:04 2026 GMT
Not After : Mar 31 19:16:04 2026 GMT
Subject: CN=69c2e2f5-38b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:22:ed:0b:39:91:d2:99:76:f6:d0:53:93:
bd:fb:18:96:21:7c:48:79:95:bf:36:fb:41:24:ed:
3e:2b:b2:70:d6:68:3e:b3:63:75:d7:70:3f:7d:8a:
69:49:f3:ea:cb:f5:1a:91:b0:4a:9a:83:a4:5d:4e:
2c:fa:8e:ac:83:38:16:b3:fc:3e:bb:60:b7:10:2a:
2f:41:8c:c1:0e:48:79:d0:ea:ba:ab:23:72:44:df:
d5:a0:d4:24:08:0e:c3:55:ef:4d:0c:33:20:d7:72:
ad:66:14:75:bd:9f:9b:da:b4:ac:db:e8:a7:01:ec:
b7:1f:4e:71:d2:7f:65:a9:2b:71:a7:d1:ed:59:c0:
ad:88:cd:ed:93:c3:70:bb:43:06:50:bd:4d:b2:84:
fe:de:08:47:7f:f7:7c:28:0f:c4:d4:e6:4a:d3:db:
2f:03:73:c2:e4:35:56:fa:42:7b:ae:75:db:49:db:
96:3e:af:21:4f:0e:49:c6:63:a4:14:53:54:2e:34:
61:8f:46:24:fc:89:dc:98:40:bb:fa:de:2a:b0:60:
80:d0:b5:57:a4:18:b3:11:2a:99:5e:b1:f7:86:00:
9b:a2:1c:72:a9:c6:16:ee:aa:e6:79:bb:6a:3a:56:
4a:bb:38:e8:36:e1:c9:4f:c4:eb:5e:77:44:65:a1:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:8C:1F:0E:10:84:73:20:4F:7E:F7:82:F7:22:D6:C3:37:EA:63
X509v3 Authority Key Identifier:
keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:27:44:42:e1:f1:8a:c9:62:6a:be:3f:61:29:70:17:6e:5e:
b0:d1:bf:18:f9:18:cc:80:f6:96:d3:04:b4:c8:43:1b:a3:be:
c1:0e:fa:53:24:59:32:50:ce:b4:46:56:4c:73:5b:cb:c4:9c:
15:6a:7b:96:9a:27:85:b1:b0:c6:39:2f:84:03:20:1e:9c:1a:
bc:bd:86:ae:f9:6a:af:81:6c:b5:ad:69:ab:f2:b2:26:68:b2:
a5:06:9c:73:f8:e1:4b:48:e0:21:d1:ec:54:f0:25:cf:48:6c:
1b:8c:a0:60:35:f6:4a:70:bf:db:2c:10:1e:d8:6f:83:e3:b4:
48:ac:a7:45:1e:50:70:53:07:23:fc:c0:b2:29:20:4f:66:6c:
ac:bb:94:b5:7e:e5:72:14:da:f3:5e:18:d1:de:5f:c4:d6:90:
68:e5:3a:70:8e:a9:a9:f2:9a:72:4f:6f:48:58:10:25:45:87:
5c:a2:77:7d:f2:b9:12:f9:35:52:c9:49:b4:c9:03:31:6d:e3:
02:2a:9e:de:d0:f8:84:34:b3:9f:8d:36:cd:02:34:c8:21:05:
af:76:33:f0:ca:78:ec:64:b3:3f:d0:b6:c2:dc:c9:76:89:db:
94:12:ab:29:6c:27:b9:be:43:f5:20:74:37:2c:da:fc:57:b4:
c7:22:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:49 2026 by rpki-client