
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier: 2yqGxrZ2RAKd25+dgPEqi+FcV6Y58OJ/ZsqJpKTtwBI=
Subject key identifier: 0E:28:16:6D:42:45:DB:2C:82:28:13:5A:9B:29:51:F5:A9:D6:47:AE
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number: 010C
Signing time: Sun 27 Sep 2026 06:34:59 +0000
Manifest this update: Sun 27 Sep 2026 06:34:58 +0000
Manifest next update: Sun 04 Oct 2026 06:34:58 +0000
Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: gyOquRbQ1Zrb9PIOCe/RrcxTWO7V982sy78XF6gxxBE=)
2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Validity
Not Before: Sep 27 06:34:58 2026 GMT
Not After : Oct 4 06:34:58 2026 GMT
Subject: CN=6ab8b913-8dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:c8:86:66:c2:65:90:b8:3f:19:2b:9e:9d:
b9:3d:1d:60:7b:bc:01:4d:c0:56:4a:cd:b3:a9:34:
c8:29:63:53:5b:da:d3:13:ad:af:fc:a0:a3:98:da:
b1:67:3e:f3:40:2f:a4:94:5c:93:35:b7:fb:93:58:
c2:d2:58:12:fd:d1:64:9f:56:7d:16:03:a5:ed:ec:
21:1c:00:0d:4c:52:73:b9:cf:ac:8c:cf:0b:66:cd:
55:84:7a:d8:06:3f:32:00:42:77:1b:79:2c:2d:32:
1e:f0:a2:74:7c:95:d7:5c:e1:59:1c:a5:95:e5:d5:
07:bc:cc:56:9b:45:47:73:24:dd:0a:af:28:09:c1:
69:7a:6b:a1:a9:95:e0:a6:2c:9f:36:26:dc:fd:ca:
d4:d0:56:4b:38:7b:2a:83:cf:a9:3e:cb:81:e7:66:
de:88:24:43:76:5f:bf:0b:4d:f6:89:54:8c:7c:c5:
23:6e:98:0b:f5:d3:b7:b3:bd:56:b3:44:23:59:49:
90:21:cc:ec:7f:5e:7c:33:ca:8a:bd:f4:da:11:cc:
f5:c7:81:3a:0d:0a:89:99:dc:e6:8f:17:7a:19:0d:
19:5f:af:10:c6:79:02:4d:12:1a:6d:13:cf:a7:92:
37:7e:00:88:3e:0b:3e:13:09:23:04:85:9c:29:c7:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:16:6D:42:45:DB:2C:82:28:13:5A:9B:29:51:F5:A9:D6:47:AE
X509v3 Authority Key Identifier:
keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:42:b2:95:df:69:e4:d1:56:67:4e:f1:35:35:51:92:08:
02:97:d1:73:68:13:4e:0e:68:e3:92:9f:42:91:dd:b9:e2:c5:
de:cd:3d:a6:b8:d3:56:7e:44:f8:07:ce:97:42:ff:89:23:ee:
2f:9b:8d:33:80:5b:47:17:8d:92:07:97:b6:4f:1f:08:d9:2a:
be:80:5f:0f:2d:ae:11:ed:57:bc:6f:e6:82:50:d5:3a:da:dc:
32:d5:d6:16:da:d5:60:2c:82:4e:a6:40:2d:bb:32:20:19:a4:
02:b8:f3:36:64:6e:12:48:e3:42:a4:c1:a4:67:88:fd:80:c2:
d8:26:5c:88:9a:00:c7:74:c3:04:b9:82:16:59:34:cc:db:b3:
4a:38:08:7d:fc:79:1a:5d:4a:0f:13:32:4a:d3:74:f4:f1:6d:
83:12:0f:60:2e:54:ad:47:84:3b:af:96:59:23:15:84:61:d2:
c6:c8:25:32:6e:e3:7f:f3:01:b6:11:d3:10:a7:0d:b3:f9:7a:
d4:df:65:e6:c0:1d:47:c9:74:fa:8a:a7:ad:71:d4:c7:92:33:
59:a4:00:9c:4e:ff:b8:9e:32:a1:c4:c5:56:b5:5b:13:cc:1d:
65:7b:9b:ed:2c:0f:28:2c:b4:28:7f:42:c9:37:66:2a:6c:e1:
54:1a:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:33:22 2026 by rpki-client