
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json)
Hash identifier: FxDQ93aJnFCxHpM52q9EgsMcU7s8/hOOPHedhBMyyOc=
Subject key identifier: 1C:B9:D9:5C:51:B7:06:DD:29:E9:EC:26:4A:5B:8B:2E:6F:A6:0A:5D
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
Manifest number: 0193
Signing time: Mon 11 May 2026 04:38:53 +0000
Manifest this update: Mon 11 May 2026 04:38:53 +0000
Manifest next update: Mon 18 May 2026 04:38:53 +0000
Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: U5HXmK81MjfpwsnhrqQZmG5Kuk+MaGvNCWyCPDmSsNo=)
2: ECD8F45832C711F1809C448B9A833773.roa (hash: vdA7Y0+FQqP1B/PSwPlcTDY8ijwH4/m6ZdsYH/Ip2Uo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Validity
Not Before: May 11 04:38:53 2026 GMT
Not After : May 18 04:38:53 2026 GMT
Subject: CN=6a015d5d-fd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:b8:f0:a3:18:3c:3b:29:c8:57:a7:80:3d:
8f:eb:27:c0:d3:b3:c1:5f:b5:bf:18:f8:15:66:1a:
9b:8b:d4:b2:8e:1b:77:0a:00:77:3e:4d:a5:9b:c0:
fa:bf:f9:90:14:67:44:da:ad:3f:37:bc:8e:0d:ff:
5a:dd:fe:05:a9:d0:1e:92:25:81:2d:82:24:9d:64:
7c:a8:06:36:cc:51:7c:77:62:ef:ad:d3:c9:85:2a:
9f:03:14:6d:b6:cf:17:62:3b:3b:e3:05:fa:41:e2:
0a:60:fe:c1:c0:33:b4:c0:f5:ad:1c:92:05:60:04:
7d:0a:33:6d:ab:ba:6b:e2:33:07:a2:a7:84:48:b5:
77:af:cf:86:17:47:83:fc:5b:69:ac:84:6d:53:7a:
0e:52:5c:77:78:a2:f7:be:6e:43:79:1c:8d:36:9e:
30:5b:50:bb:67:89:f9:68:12:c8:c5:5c:9a:82:16:
5a:d7:65:55:2b:f5:6b:aa:99:0e:60:a2:31:9a:59:
19:56:cb:0b:ed:13:3d:b4:90:a7:3a:7a:01:8c:58:
65:36:48:ce:5e:19:ab:de:b2:d8:cf:0c:d8:29:86:
35:bc:e6:9f:03:b2:f3:b3:4d:da:0e:40:dd:da:b6:
16:d6:98:3f:dd:d5:ea:5d:4b:05:25:de:e3:68:cc:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:D9:5C:51:B7:06:DD:29:E9:EC:26:4A:5B:8B:2E:6F:A6:0A:5D
X509v3 Authority Key Identifier:
keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:9d:7b:25:e2:73:dc:d2:3e:8d:ae:33:13:f3:d6:2b:1c:
df:0c:18:1c:e8:51:e7:45:6a:a4:e9:8f:34:d7:a0:1b:98:2c:
56:0f:ce:bc:69:f4:f3:e7:75:e0:55:e6:8e:93:54:7c:f2:50:
c6:90:13:d2:95:13:7a:a2:34:a2:58:ba:91:de:7f:73:6e:0c:
4a:ec:13:22:92:82:07:43:10:56:9f:b5:86:08:45:ee:0a:11:
02:46:60:d7:3a:30:a0:c9:45:85:75:6d:d1:6b:87:0f:46:c4:
34:2c:0a:a1:8e:6d:d5:3e:49:a6:2c:7a:cd:63:bd:ea:bd:4b:
fa:09:ea:b7:77:a2:6b:2b:3c:0b:f8:bb:65:39:96:be:ae:1c:
52:a5:c7:40:8d:54:12:93:11:f6:3e:2e:a0:22:a9:cf:94:a6:
31:83:53:03:9b:55:5d:a4:7b:0b:36:01:fb:55:f4:19:ef:a8:
85:eb:50:f2:b7:42:49:68:22:c7:0e:28:a2:97:5c:2d:70:3e:
4a:aa:02:70:2c:cd:38:06:1a:ce:da:92:98:75:63:0c:a9:75:
89:e4:ff:97:b9:bc:7c:df:5e:07:61:71:c6:6b:26:8c:b3:a3:
55:c4:bf:a2:f2:9a:94:3e:82:7f:cd:29:5a:e5:83:ce:74:bd:
b8:12:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:40:11 2026 by rpki-client