
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier: Y6IHLiRwJcaQhbVPmvc/0S3p6hgWnE8VdExAB3OQ27Q=
Subject key identifier: F4:70:51:B5:70:3A:E7:6F:60:9A:F0:8D:9E:C7:2B:31:7A:87:5B:F8
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number: FC
Signing time: Mon 11 May 2026 06:17:29 +0000
Manifest this update: Mon 11 May 2026 06:17:28 +0000
Manifest next update: Mon 18 May 2026 06:17:28 +0000
Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: NC6zT1PI4DpbDTYqi1nn7zo+bgQDUtWJ7RAdhBdfXoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Validity
Not Before: May 11 06:17:28 2026 GMT
Not After : May 18 06:17:28 2026 GMT
Subject: CN=6a017479-b338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:e5:e2:53:00:c3:22:5e:3f:5c:91:f9:bf:
b5:a1:56:ec:05:65:bf:27:73:57:ac:c0:59:2f:f2:
ea:ae:d5:22:ac:f5:05:8f:a7:53:af:e4:6a:41:e5:
23:47:be:ab:01:28:6c:d7:ad:b8:c7:51:1f:89:ed:
7c:09:4c:29:54:cb:05:95:b6:9f:47:06:37:76:65:
fe:8a:ac:5a:29:b1:fa:b9:18:71:a7:74:02:6b:6a:
97:70:7a:23:a1:cf:7f:8d:86:81:9c:ae:8d:2f:25:
85:96:5c:c5:7c:38:87:60:8f:88:68:a0:fa:2f:8a:
27:fe:b7:1d:88:c7:6b:5d:df:dd:da:0e:7d:77:22:
d1:46:81:b0:b5:fd:d4:fc:ad:e4:e9:72:ae:fe:ae:
bc:69:71:c6:77:45:d9:60:8c:47:67:91:55:51:34:
0a:15:06:a8:e2:e9:48:51:5f:f8:83:b8:13:87:5d:
9c:f9:b5:d4:3e:e1:32:25:dc:2b:9e:47:f7:17:fb:
bc:5b:69:23:83:b6:58:39:bc:31:fa:a7:20:60:e3:
1d:5d:86:12:62:b6:71:30:1f:2c:a0:a6:e7:5d:6b:
b9:1f:1e:11:6d:df:03:5f:c0:e1:18:9e:a9:52:ab:
10:a9:1a:71:44:ca:7e:20:d8:d9:96:5d:22:94:59:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:51:B5:70:3A:E7:6F:60:9A:F0:8D:9E:C7:2B:31:7A:87:5B:F8
X509v3 Authority Key Identifier:
keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9b:da:d3:90:bc:be:fb:0c:5f:6a:18:1a:55:be:a3:c3:04:
19:38:20:b2:75:3a:af:3f:af:90:63:11:b1:52:c5:0a:c3:63:
5d:7a:dc:c8:75:2c:f4:a9:2a:c8:57:ec:c2:e4:b2:38:62:58:
6c:78:e9:03:1e:e6:b5:00:84:03:8c:eb:88:ad:fd:e4:48:f9:
bc:53:11:10:84:ca:d6:51:54:23:1e:f7:7a:b3:1c:6e:6b:3d:
75:77:a2:af:9a:6b:6a:6c:a0:81:da:6d:4d:98:68:74:b5:7a:
16:ec:1f:40:c0:29:69:8a:7b:bf:35:66:b2:80:ef:71:a4:c7:
12:c5:22:06:3f:33:cc:0f:29:52:a7:5e:05:4a:a5:b7:ae:bc:
34:d7:a1:a8:d2:d3:77:ec:1b:06:8c:65:d2:30:4f:e1:ac:c8:
80:d3:0c:d3:3a:ae:ad:52:be:1f:34:e4:ad:b9:0c:ce:34:67:
d7:40:a5:63:96:68:ca:5a:d2:34:65:81:0a:db:17:cb:7a:ad:
f5:21:5a:bd:a9:1f:22:ac:aa:df:21:d0:af:a2:24:e9:ca:d4:
de:dc:c8:85:48:8f:a9:db:75:d0:d1:dd:84:a4:29:8e:a7:d9:
df:5c:bf:48:65:10:e2:f6:46:8c:06:f3:d0:f0:ef:5d:5c:ee:
3f:48:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:13 2026 by rpki-client