
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json)
Hash identifier: WWW8VeJYoVb7mwQheIEm9r9zjAMvYvBDdCmWWZ24QkU=
Subject key identifier: 96:2D:0B:9B:60:59:2F:4C:77:F8:2C:43:DE:F9:49:10:06:01:F3:9F
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial: 10E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
Manifest number: 10CD
Signing time: Wed 22 Jul 2026 17:28:10 +0000
Manifest this update: Wed 22 Jul 2026 17:28:09 +0000
Manifest next update: Wed 29 Jul 2026 17:28:09 +0000
Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: PGCw+d2uvjl1Xf4XhgXpy1hRVuicVxV/QRalo12oCA8=)
2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: vMIdusdjtj9hlcGq2gI+hsj/mLp2lRpI2Yrz/QIdsz8=)
3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: xjuxHTm+G9he/JFBNF/J7ScezC0X5PCaznrRtGeATtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4322 (0x10e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Validity
Not Before: Jul 22 17:28:09 2026 GMT
Not After : Jul 29 17:28:09 2026 GMT
Subject: CN=6a60fdaa-a06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:cb:5f:9a:9d:27:ad:0c:90:02:70:dc:46:
7e:63:1a:9d:59:5a:77:1b:ba:b2:ce:83:96:47:9e:
05:c3:5e:48:41:e0:b2:d3:fd:ff:d3:92:53:70:90:
9c:05:08:99:4c:d4:aa:59:31:aa:33:14:81:a7:a5:
58:bd:e0:b2:f0:a6:38:20:55:58:c1:ab:86:33:fb:
51:55:e3:c7:6a:40:59:e1:a3:f1:df:e5:b3:7f:a4:
c1:96:4d:18:5f:16:a2:a6:bc:e5:d8:bc:a3:af:5a:
af:f3:3f:83:19:f4:f6:18:70:81:f3:4f:51:51:69:
04:16:7a:82:b1:45:ac:8e:83:7f:92:ed:ff:38:45:
ee:49:fb:74:8a:4b:a3:73:0b:f2:ed:1b:8c:44:cd:
aa:28:dd:7d:87:5c:cf:03:43:cb:6a:cc:30:92:19:
40:d3:f5:d4:46:29:d6:c3:94:20:37:83:4d:9d:95:
d7:1c:4e:11:86:bb:4a:39:9b:97:3d:c8:4c:f4:3d:
d0:7f:18:3c:e2:81:c5:d1:9b:ee:d4:b5:af:67:7b:
a0:8a:cd:33:90:1a:9f:a3:aa:2b:8e:25:ec:ce:a3:
af:5c:64:87:7f:0a:c7:d5:8e:f8:71:bf:77:d7:06:
77:74:ca:26:a1:43:be:db:84:8e:7c:de:4d:fe:91:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:0B:9B:60:59:2F:4C:77:F8:2C:43:DE:F9:49:10:06:01:F3:9F
X509v3 Authority Key Identifier:
keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:7b:e8:b2:e2:50:8f:88:cd:0f:33:1e:a8:d8:2e:cf:7d:
db:4a:48:56:1e:f3:47:df:50:3d:a8:f9:33:dd:36:df:04:ca:
c2:0e:ff:bd:96:97:b7:78:47:f1:78:63:0f:4b:a0:da:d4:3d:
48:ee:84:9f:60:20:cc:7b:cb:f3:4c:c5:67:94:be:f8:b5:80:
a9:23:e3:44:45:57:97:84:c7:c4:37:2e:7c:86:ad:d2:d9:65:
15:33:6c:c3:fa:8d:7d:2c:b8:95:ea:17:79:06:69:55:64:1d:
98:35:50:69:ea:e7:63:db:1e:ba:4a:8d:d9:fd:6c:bf:ae:5f:
00:12:55:f8:2c:21:29:8a:53:9a:bb:dd:9a:ef:1d:de:65:f9:
fe:1f:94:c2:c4:12:9f:cd:ca:b3:a6:51:ef:ae:f8:8a:41:ac:
b0:f4:15:ea:43:e2:dd:4a:40:ad:63:aa:47:15:d6:64:11:ef:
ad:0a:a0:5f:43:f7:fa:e5:cf:4f:a9:31:2a:1b:94:a4:37:ea:
76:b0:d1:52:cd:db:a1:22:b6:17:47:dc:5d:7f:e3:38:cf:fa:
a3:15:15:2d:52:a9:f8:0f:f7:b0:c3:35:fe:fb:60:d4:dc:ce:
af:01:e7:0f:2c:21:78:bc:15:07:14:08:80:d3:e7:9a:1c:0f:
e7:74:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:14 2026 by rpki-client