
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json)
Hash identifier: p17Z/QTlBnyGFTv7hZI6B1GaWQVkmhprK1Mi+kD/3Io=
Subject key identifier: B0:E3:C6:47:DD:E8:63:81:B1:36:59:49:AE:58:E3:6E:6C:3B:0E:4F
Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Certificate serial: 060A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
Manifest number: 060A
Signing time: Tue 12 May 2026 14:18:19 +0000
Manifest this update: Tue 12 May 2026 14:18:18 +0000
Manifest next update: Tue 19 May 2026 14:18:18 +0000
Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: lIG3L85iu5ARWBhTGjpGYmWjOXUXSjbDP5Xsn2lCNEU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Validity
Not Before: May 12 14:18:18 2026 GMT
Not After : May 19 14:18:18 2026 GMT
Subject: CN=6a0336ab-420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:ab:a6:e5:ad:73:ba:c2:a2:4e:de:61:e9:
2c:b8:78:b4:f3:79:ac:12:4a:0e:f9:a4:5e:37:16:
91:4d:c1:4f:ee:b9:70:5a:c5:77:a1:db:68:7c:ad:
12:bc:11:23:6a:d1:56:7f:c1:05:7a:e3:a5:e9:28:
fc:a0:40:cc:e1:5f:71:32:b4:25:bc:13:91:78:51:
66:3c:89:c5:05:ce:61:3c:43:de:a7:b4:0e:4d:66:
9f:32:e6:c1:5d:89:4f:d3:77:ee:33:1b:a0:c4:6c:
be:59:51:72:39:ec:f3:99:2b:c6:4e:a2:16:38:fe:
1c:47:cb:4a:a7:73:f1:d3:69:66:de:a9:2d:b2:d7:
e7:7e:45:37:c9:60:ea:e9:7e:16:ab:66:5c:8d:b9:
08:bf:7f:ce:99:9d:d7:fa:40:1d:ea:cf:bb:a7:2d:
92:be:b6:f7:c3:5c:e2:c4:51:02:30:4c:ad:2f:f5:
59:e0:16:44:12:4a:6c:dc:e6:38:bf:48:07:ba:29:
b1:10:9e:1a:be:6f:4a:85:b7:ca:0a:b5:18:48:7a:
74:d6:3a:94:c7:d6:6c:5b:58:1f:eb:ae:0a:dc:c3:
32:89:79:83:10:ec:71:a9:be:64:db:05:e0:ea:d1:
53:d9:48:bb:bf:ca:6b:83:ff:d9:db:22:d5:3e:78:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E3:C6:47:DD:E8:63:81:B1:36:59:49:AE:58:E3:6E:6C:3B:0E:4F
X509v3 Authority Key Identifier:
keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:31:11:89:30:77:26:fb:4c:6b:a4:82:e6:8b:48:e2:fc:3b:
36:2f:61:e8:4e:b2:d1:85:79:25:5c:fc:62:2a:73:5a:e7:58:
e8:1a:08:74:fd:7b:b0:f3:20:ca:10:89:0e:c9:6f:63:f3:4c:
2b:33:2f:61:fa:ef:7b:e8:81:e1:ae:b4:2c:73:8b:b7:c1:d1:
82:f2:81:0e:72:a2:88:51:6c:86:e7:d5:3f:85:05:10:85:b6:
40:d3:9b:a5:d8:9a:9f:c0:d2:20:ce:4d:88:4d:0e:24:8d:e2:
b1:37:71:6c:46:57:fd:94:51:9f:d3:84:ff:b4:ad:2a:d8:08:
42:db:fc:ed:f4:53:f6:3b:c0:64:9f:00:de:29:f3:49:46:f9:
fd:8e:a6:f7:54:c5:0c:58:79:00:0b:29:d6:d5:64:83:a3:ef:
a0:98:44:d9:5f:45:ad:94:4c:81:b2:92:65:44:fc:45:d3:8d:
71:f4:31:1d:f5:c9:be:e6:a4:76:ad:4f:b5:f7:de:7e:db:a1:
72:cf:f5:cc:8e:12:de:d4:c3:76:07:f7:50:6b:c4:6a:78:8d:
af:8f:d6:0a:e3:3b:d9:e6:27:22:7c:35:9e:f2:9f:03:68:f0:
c1:c8:6b:5c:8d:5e:4e:5b:04:72:33:f5:5b:76:e3:9c:dd:0c:
f0:a9:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:20 2026 by rpki-client