
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier: OTtNoOTiRhRGGbupnayLUaiOkkk1IkO6mMeyZmU19hQ=
Subject key identifier: 61:D6:0C:10:57:4A:63:EF:77:3D:93:B4:C5:E0:53:D9:2C:38:73:CF
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 039E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number: 0394
Signing time: Wed 25 Mar 2026 00:25:40 +0000
Manifest this update: Wed 25 Mar 2026 00:25:40 +0000
Manifest next update: Wed 01 Apr 2026 00:25:40 +0000
Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: eGQKEmt4XGYH6DeTrsAAUWs7gvJpWCzKRFbIwipT4DI=)
2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: noY77zuBNX8xTUWwrf35ANzxZz07dvvKvq+tI08iw0s=)
3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Validity
Not Before: Mar 25 00:25:40 2026 GMT
Not After : Apr 1 00:25:40 2026 GMT
Subject: CN=69c32b84-c33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:6b:02:32:a4:9a:3c:83:92:28:30:84:98:
f7:9c:4f:a7:49:e2:ec:f0:87:b9:01:78:d9:dc:e4:
17:8f:18:2d:69:c3:bb:7f:b8:f2:77:f8:be:7e:12:
94:58:9f:25:d9:b1:f1:79:83:4d:c0:38:2a:7d:cb:
58:68:a8:d0:09:03:9a:8a:5c:f8:07:b2:51:37:53:
45:fd:30:d5:6b:d9:c0:37:80:be:46:23:5b:f8:28:
e3:15:f4:e9:af:4c:fd:0e:5b:c0:17:18:83:4e:69:
29:90:6b:d1:f3:53:1c:84:bf:dc:4c:b4:3f:f3:92:
ef:7b:44:31:50:d4:b4:e4:25:31:88:e9:bc:89:0c:
bf:31:f2:91:6b:97:1d:28:ca:d2:ff:c0:98:da:37:
ff:04:ec:10:81:23:fd:cb:17:95:16:76:a0:ca:53:
eb:d4:5f:26:84:f7:e5:65:d0:9c:70:6a:01:ca:42:
71:ed:45:e1:78:76:cd:f4:5e:d3:af:76:1b:39:6a:
54:8a:07:c0:d5:31:38:a5:16:43:96:75:f6:fa:cb:
68:84:e0:ba:90:5b:b9:02:53:74:21:8d:63:57:ab:
1f:e9:dc:48:f6:c4:6d:a9:5a:d4:96:4b:1a:45:55:
ca:73:db:aa:5a:98:2c:f2:0c:94:dd:d7:f9:5d:45:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:0C:10:57:4A:63:EF:77:3D:93:B4:C5:E0:53:D9:2C:38:73:CF
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bb:49:a7:52:0c:f7:1a:c3:58:cd:58:b4:04:a9:3c:65:b4:
a6:bc:69:89:29:56:2d:17:e9:26:a1:77:d1:e4:98:ff:1c:9a:
30:4e:b2:47:9d:92:ae:5a:8a:28:fa:b4:84:43:95:02:8e:77:
0a:a8:58:44:d7:ce:f8:53:71:54:9c:46:ab:6b:06:08:99:a5:
23:70:9b:90:d8:e4:fd:c5:61:90:bf:eb:a2:89:13:32:b9:43:
c6:93:84:e5:19:f4:85:f2:e9:9e:ba:33:22:61:b9:f5:0c:a5:
18:d8:38:c1:6f:56:d6:d2:6d:8f:db:91:d4:bf:49:3a:b3:33:
d7:3c:8a:06:92:f1:e0:ed:8a:e6:e2:57:b5:8f:ad:4e:32:17:
4c:f8:3f:50:0d:a9:b2:67:08:71:d3:36:91:7e:70:9e:b6:14:
36:64:17:3f:e2:b9:83:61:57:87:db:b8:2f:48:de:77:e3:e2:
dc:b9:e5:ed:b5:e4:e1:18:a6:d7:50:01:b9:18:8b:af:ef:77:
9f:16:e8:37:40:2e:2f:2c:b5:42:e1:23:46:88:eb:d3:f8:8b:
19:df:3d:e7:2e:e9:c4:b7:5f:ac:4d:39:ec:93:34:21:83:92:
4f:d4:8c:c7:b2:e7:a2:e1:18:15:99:95:56:93:be:db:e9:8d:
d4:b9:53:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC
MURERDg5OEQwHhcNMjYwMzI1MDAyNTQwWhcNMjYwNDAxMDAyNTQwWjAYMRYwFAYD
VQQDEw02OWMzMmI4NC1jMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJZrAjKkmjyDkigwhJj3nE+nSeLs8Ie5AXjZ3OQXjxgtacO7f7jyd/i+fhKU
WJ8l2bHxeYNNwDgqfctYaKjQCQOailz4B7JRN1NF/TDVa9nAN4C+RiNb+CjjFfTp
r0z9DlvAFxiDTmkpkGvR81MchL/cTLQ/85Lve0QxUNS05CUxiOm8iQy/MfKRa5cd
KMrS/8CY2jf/BOwQgSP9yxeVFnagylPr1F8mhPflZdCccGoBykJx7UXheHbN9F7T
r3YbOWpUigfA1TE4pRZDlnX2+stohOC6kFu5AlN0IY1jV6sf6dxI9sRtqVrUlksa
RVXKc9uqWpgs8gyU3df5XUXohQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHWDBBX
SmPvdz2TtMXgU9ksOHPPMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB
REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ
Yml4N3V5MklxNjJ4M2RpWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALbtJp1IM9xrDWM1YtASpPGW0prxpiSlWLRfpJqF30eSY/xyaME6yR52SrlqK
KPq0hEOVAo53CqhYRNfO+FNxVJxGq2sGCJmlI3CbkNjk/cVhkL/rookTMrlDxpOE
5Rn0hfLpnrozImG59QylGNg4wW9W1tJtj9uR1L9JOrMz1zyKBpLx4O2K5uJXtY+t
TjIXTPg/UA2psmcIcdM2kX5wnrYUNmQXP+K5g2FXh9u4L0jed+Pi3Lnl7bXk4Rim
11ABuRiLr+93nxboN0AuLyy1QuEjRojr0/iLGd895y7pxLdfrE057JM0IYOST9SM
x7LnouEYFZmVVpO+2+mN1LlTqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:50 2026 by rpki-client