
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json)
Hash identifier: WnC7zTMWMRGE6lNRXlERl5K+XV5yS++qoIl+clxVaYo=
Subject key identifier: 05:DE:49:AA:05:C7:20:72:A9:0C:E8:61:9E:2C:85:AC:B2:35:4B:6C
Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
Manifest number: 01DB
Signing time: Thu 23 Jul 2026 04:50:22 +0000
Manifest this update: Thu 23 Jul 2026 04:50:21 +0000
Manifest next update: Thu 30 Jul 2026 04:50:21 +0000
Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: ug6WKOQ1AwLtvsZy5gb0fmz8lq0ayR53ST1ROHa9QX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Validity
Not Before: Jul 23 04:50:21 2026 GMT
Not After : Jul 30 04:50:21 2026 GMT
Subject: CN=6a619d8e-c0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:fe:e9:3f:49:22:77:5e:23:04:65:6a:87:
db:f7:2a:34:44:02:86:80:ea:87:22:3c:f8:2d:d0:
bd:89:6b:c5:2d:70:42:9d:84:2f:86:c9:46:10:fb:
f0:51:9b:4f:2f:05:6c:83:e4:88:87:5d:1e:8d:a1:
b6:f9:39:2d:d8:ce:04:d1:ca:fb:0c:d3:4b:43:15:
b5:5f:ab:1e:6a:25:4a:b1:83:d2:eb:e4:10:87:20:
b8:d0:8c:00:33:96:d4:6f:9d:1c:c8:c6:50:e0:be:
2c:20:dc:d1:9c:ff:eb:77:74:a4:d7:f6:64:2c:c2:
0e:92:59:2b:3a:16:ba:6a:58:96:3d:73:f6:ac:67:
b8:f1:62:75:62:a6:f4:e5:ab:47:c2:80:59:80:b8:
c2:6c:0e:9a:ec:c7:3d:81:f8:fe:94:f6:b9:1e:01:
40:fc:5d:c6:0a:22:9d:9f:56:4c:14:47:46:02:0f:
9c:cb:b5:fc:be:85:45:e5:3a:2d:f2:63:f2:aa:97:
9b:b9:32:00:fa:a4:29:dd:a8:0a:4f:a9:d5:9e:93:
03:1c:52:24:9b:8f:31:aa:a2:03:82:09:89:85:98:
a0:bc:cd:15:85:61:24:a6:2f:e1:b6:52:0d:96:9b:
8f:8d:37:10:5c:98:29:3a:37:ba:45:95:cc:c2:32:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DE:49:AA:05:C7:20:72:A9:0C:E8:61:9E:2C:85:AC:B2:35:4B:6C
X509v3 Authority Key Identifier:
keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:70:e0:9b:67:ea:e8:85:26:ea:bd:d9:89:62:ef:b3:1b:30:
48:18:0d:71:7a:5b:2a:c1:9b:9e:38:28:31:ad:27:ed:88:7e:
89:75:0a:5d:0e:13:43:d1:47:a2:19:62:c6:c2:8d:f9:5c:f6:
7a:c7:01:a3:c6:e1:3f:64:a3:7c:67:35:d0:ee:ee:5b:39:3d:
ca:c4:da:02:eb:4d:a7:ec:a5:d9:a4:7e:a1:f6:b5:79:12:13:
83:6a:bf:23:ac:d5:86:20:d2:6a:7d:46:7d:09:d6:4b:ff:fc:
02:45:f9:85:e6:5e:5c:97:87:c3:2c:3e:f4:e9:bc:c0:b7:45:
1b:ce:8b:b2:a7:d0:68:f4:58:cb:24:66:e7:de:72:f9:cb:a3:
db:81:64:92:08:03:6f:8f:2a:63:5b:71:00:35:9b:05:a8:f9:
fb:e4:db:dc:e0:ab:2f:52:d0:5f:d9:59:55:a9:7d:d7:84:99:
36:da:61:f8:a9:5b:d1:86:75:1a:82:0b:51:98:84:95:e7:6a:
e6:ca:b0:f9:47:9d:05:94:48:4c:d8:46:c7:76:c0:be:d4:49:
2a:7f:0e:56:68:16:f3:60:9e:21:48:0e:40:3d:d2:e5:89:68:
78:94:d3:75:5e:fb:98:69:99:ef:d2:d4:d8:c3:ae:92:d7:23:
5b:36:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:15 2026 by rpki-client