
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft
File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json)
Hash identifier: f6L+FFFScyaQ2wa43AWAb0pYuQ+k/T5jzCj5x2ugwTI=
Subject key identifier: 05:20:8A:40:7E:F6:EA:63:38:B2:07:7E:05:6A:28:98:CD:6E:47:AD
Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0
Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft
Manifest number: 80
Signing time: Thu 23 Jul 2026 09:33:23 +0000
Manifest this update: Thu 23 Jul 2026 09:33:22 +0000
Manifest next update: Thu 30 Jul 2026 09:33:22 +0000
Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: RVrz0KlJMsPEayz2UAIIci+HnJRT7uBIuS+nwXHLYVo=)
2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: HfEZG4t3DF1Mxy+ybb6Jvu5Sd5lj1h6Aq1UoSU2rExQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl
rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0
Validity
Not Before: Jul 23 09:33:22 2026 GMT
Not After : Jul 30 09:33:22 2026 GMT
Subject: CN=6a61dfe3-997c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:b6:74:e1:52:9b:26:bb:11:9b:4c:12:4c:
84:59:24:7d:48:31:90:aa:5f:74:1c:13:f7:a6:9a:
50:6f:a5:c8:e5:d8:6a:9e:25:1d:ef:4a:52:9d:19:
c0:cb:fa:6e:fb:6e:4b:c4:62:f6:c2:09:23:b0:81:
9d:30:fc:5f:e3:f6:67:e5:75:f0:58:2e:e3:d5:d9:
7c:d5:7d:e1:75:52:6a:3b:55:94:35:c8:5e:d6:20:
7c:98:2d:0a:75:eb:5c:94:ee:26:e5:6f:a5:62:d2:
1c:8d:1d:b5:be:d6:3a:0c:41:2f:70:99:69:f8:0e:
e9:bc:e1:a1:30:e4:09:08:0e:a6:a6:6f:fe:e1:d5:
f4:e9:aa:16:85:50:f9:13:51:22:44:84:4e:5a:d3:
8c:d4:96:7a:a4:d2:84:cc:5e:0c:ad:28:d8:fb:16:
b7:0c:0f:eb:1a:ee:07:7a:9f:25:45:a8:ab:15:69:
60:f1:39:65:42:e0:70:7c:d5:7d:05:a2:e8:26:af:
b5:4c:8b:df:53:e3:5c:6b:49:6e:be:ff:27:55:8c:
fb:68:f2:70:a3:32:4c:07:21:10:8e:9f:c1:cf:fa:
37:3c:f1:49:f7:e0:91:82:9a:a0:cb:59:61:eb:3e:
79:fe:09:1d:6b:f1:89:23:4e:65:1a:bc:66:e9:d9:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:8A:40:7E:F6:EA:63:38:B2:07:7E:05:6A:28:98:CD:6E:47:AD
X509v3 Authority Key Identifier:
keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:c6:c9:fe:d0:48:ab:57:e9:d5:ba:50:d0:50:f6:ac:f5:
f7:97:bd:4c:3e:8b:21:d7:57:3f:68:68:fa:05:b7:57:c7:28:
e8:9f:02:77:f9:cd:31:3d:47:ec:0c:81:05:64:4e:02:24:67:
45:be:45:cd:30:35:4c:37:a4:be:94:0c:fa:c9:08:08:3b:3d:
b9:bb:ee:f3:6a:21:1e:c7:19:e4:a4:08:3d:d5:4d:d5:6a:71:
ac:c0:7b:d1:a9:b0:dd:ec:18:e3:4b:f2:e4:fa:20:aa:d4:d0:
33:26:8c:55:ed:b5:e6:f6:1b:dd:9a:d0:8a:b4:77:8c:54:86:
1e:86:47:e0:8b:b8:ca:62:d1:2e:28:24:18:66:8d:2d:0b:c9:
e4:1a:ab:8b:a6:7e:6a:ff:b1:ad:e3:42:70:5f:44:d3:75:15:
b9:e1:ae:c7:52:95:cb:c8:47:98:62:fd:fe:85:5a:24:29:7a:
80:1f:af:74:2a:d3:c3:14:ec:2b:fe:9c:99:bf:c0:0e:03:c3:
86:21:17:6c:fb:83:72:e7:2d:cf:ec:20:5d:c5:89:21:b3:23:
a3:ac:64:7b:63:42:10:cb:b4:e3:4d:8e:61:c1:25:76:86:88:
f1:0d:41:6a:55:81:7e:18:be:a2:a8:e9:b4:48:f3:ef:46:d3:
c6:76:cb:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJENTYxMTAvBgNVBAUTKDkxQjI4OTkxNkI1RUY3QjM2ODY5QjNCQTgxMEMyNDVC
MzY0RTQzQzAwHhcNMjYwNzIzMDkzMzIyWhcNMjYwNzMwMDkzMzIyWjAYMRYwFAYD
VQQDEw02YTYxZGZlMy05OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz062dOFSmya7EZtMEkyEWSR9SDGQql90HBP3pppQb6XI5dhqniUd70pSnRnA
y/pu+25LxGL2wgkjsIGdMPxf4/Zn5XXwWC7j1dl81X3hdVJqO1WUNche1iB8mC0K
detclO4m5W+lYtIcjR21vtY6DEEvcJlp+A7pvOGhMOQJCA6mpm/+4dX06aoWhVD5
E1EiRIROWtOM1JZ6pNKEzF4MrSjY+xa3DA/rGu4Hep8lRairFWlg8TllQuBwfNV9
BaLoJq+1TIvfU+Nca0luvv8nVYz7aPJwozJMByEQjp/Bz/o3PPFJ9+CRgpqgy1lh
6z55/gkda/GJI05lGrxm6dnY/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUgikB+
9upjOLIHfgVqKJjNbketMB8GA1UdIwQYMBaAFJGyiZFrXvezaGmzuoEMJFs2TkPA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ1Ni9FREJCREZEOEM1
MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3Tm9hYk82Z1F3a1d6Wk9R
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQ1Ni9FREJCREZEOEM1MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3
Tm9hYk82Z1F3a1d6Wk9ROEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOtnGyf7QSKtX6dW6UNBQ9qz195e9TD6LIddXP2ho+gW3V8co6J8Cd/nNMT1H
7AyBBWROAiRnRb5FzTA1TDekvpQM+skICDs9ubvu82ohHscZ5KQIPdVN1WpxrMB7
0amw3ewY40vy5PogqtTQMyaMVe215vYb3ZrQirR3jFSGHoZH4Iu4ymLRLigkGGaN
LQvJ5Bqri6Z+av+xreNCcF9E03UVueGux1KVy8hHmGL9/oVaJCl6gB+vdCrTwxTs
K/6cmb/ADgPDhiEXbPuDcuctz+wgXcWJIbMjo6xke2NCEMu0402OYcEldoaI8Q1B
alWBfhi+oqjptEjz70bTxnbLGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:42 2026 by rpki-client