
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json)
Hash identifier: K6ZfYt7wirvQ0ePtqeNBDVSsVpZUOeDehuoXvBaVAiw=
Subject key identifier: 15:33:8A:38:21:57:6A:F2:24:0F:EE:46:C6:2C:64:15:5E:C9:92:09
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial: 07E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
Manifest number: 12E2
Signing time: Wed 22 Jul 2026 19:39:52 +0000
Manifest this update: Wed 22 Jul 2026 19:39:51 +0000
Manifest next update: Wed 29 Jul 2026 19:39:51 +0000
Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: gy/onEUeQpbVa2rwToTOWMDjRrR/as73FacNp3Ne4Is=)
2: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=)
3: 6243075E653411EB98060C17C4F9AE02.roa (hash: v0uC7Tgqg5Ka5gyjZsM8cExfBYnQ3ib9cJkCqTADvOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Validity
Not Before: Jul 22 19:39:51 2026 GMT
Not After : Jul 29 19:39:51 2026 GMT
Subject: CN=6a611c88-603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:27:0a:b1:11:81:6b:a1:38:a4:18:63:b3:
23:c8:fe:d3:96:e1:e6:6d:a1:7a:7c:37:52:74:b1:
d7:3d:ad:70:2f:ce:92:2b:e0:7f:59:19:52:07:2c:
b1:7b:da:6e:10:a5:22:f9:5d:e5:c9:c5:1a:aa:f9:
ee:53:ca:0c:df:eb:6e:b4:18:e5:86:1f:8e:0a:c8:
fb:e3:4a:50:a1:4b:98:cc:57:e8:62:c2:16:40:ba:
41:18:f7:e4:3c:10:54:63:9f:56:cb:a6:1e:20:1b:
3b:72:29:75:dd:15:4b:48:2e:19:00:70:20:35:a2:
46:d0:b0:43:b4:5e:21:f3:19:4e:29:34:21:70:10:
5d:20:bc:b2:15:f8:a1:ea:ac:9b:fd:f9:c6:4c:8c:
36:92:95:90:9b:43:03:2c:ae:99:b5:7f:09:50:67:
4e:f2:68:2c:e6:9b:66:07:64:dd:05:04:62:75:a2:
f3:07:44:03:50:d6:e3:e1:5d:c3:39:98:27:90:03:
6e:b7:6f:50:08:a6:9b:8a:8e:fe:0c:72:e9:33:29:
75:c8:03:48:ef:c6:27:7d:5c:8a:2e:7e:87:aa:78:
2f:9d:6f:30:68:35:26:5b:68:40:09:87:5b:61:88:
da:53:7e:bf:02:34:39:85:01:1d:61:2d:2b:d4:e3:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:8A:38:21:57:6A:F2:24:0F:EE:46:C6:2C:64:15:5E:C9:92:09
X509v3 Authority Key Identifier:
keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:2e:b7:71:d6:78:b4:18:e3:a3:22:fc:01:92:b8:a7:89:ef:
d0:22:39:a8:60:81:63:ac:a1:55:bd:8d:3d:22:00:a8:ad:8c:
91:7f:c3:d5:32:bf:3d:29:b0:cb:a8:53:26:08:ca:0d:97:3b:
47:7a:38:f4:15:0c:1b:11:1d:4e:9f:db:77:12:c9:71:5e:3c:
47:44:66:bc:c6:52:43:0b:56:c5:b3:73:04:b1:99:f2:74:2a:
ff:b3:13:62:74:86:57:b6:5a:ad:3b:8d:8b:e6:e1:ba:e5:ad:
e8:52:b6:60:45:c2:e8:f1:5d:4b:14:3b:99:7c:e0:15:bd:8b:
f5:f8:49:30:bb:c0:72:20:5e:07:d2:0d:84:38:40:c4:8a:5d:
3e:87:f2:a1:74:19:0b:f5:b3:73:8d:16:59:4a:a0:38:16:c5:
78:66:fb:4a:15:52:03:50:95:07:d7:3d:aa:d6:8f:ec:a8:bb:
5a:73:fe:ff:cc:52:9b:2e:d3:0f:37:38:57:a7:4f:83:9d:04:
4b:78:34:94:ae:87:7e:31:0f:4b:e1:13:ca:d0:bc:b6:04:66:
96:b7:a6:17:4f:ad:33:90:bf:76:cb:66:bf:da:a2:4e:be:16:
79:8c:1f:7c:0f:88:b8:1f:6a:0f:33:c0:76:ba:81:bb:af:72:
a7:b2:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:15 2026 by rpki-client