
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json)
Hash identifier: L5MdMccWtiKVVw4llwH+y7W+uImTzGGOEQlV86V36lA=
Subject key identifier: 50:08:79:88:8A:A6:2F:33:40:43:D2:91:60:54:E7:34:A4:2C:20:C7
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial: 1112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
Manifest number: 1108
Signing time: Tue 12 May 2026 17:17:33 +0000
Manifest this update: Tue 12 May 2026 17:17:33 +0000
Manifest next update: Tue 19 May 2026 17:17:33 +0000
Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: jgIb9fvFjw3YMI32lw5EUY1pqP/KigTL2DFA8Hg7KzY=)
2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: 4agi+QhWWtUPKmH1/dW+seJgI+qk+4RdSuU9ar5oRKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4370 (0x1112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Validity
Not Before: May 12 17:17:33 2026 GMT
Not After : May 19 17:17:33 2026 GMT
Subject: CN=6a0360ad-4bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:3e:76:9c:17:c3:d5:f9:fd:e3:00:31:d8:
e4:4c:6b:96:1a:22:8b:f1:7b:43:ad:7e:22:4b:ce:
03:91:af:79:66:ff:96:c0:fa:0d:e9:d8:2f:bf:68:
a5:df:54:a8:7a:bc:5f:7b:81:30:4d:51:89:53:d4:
fe:63:b2:d2:38:13:ef:bb:ed:5e:5b:24:3f:62:54:
95:01:bd:12:d7:29:e0:b8:e8:a5:b5:de:bf:ea:cb:
a8:3d:78:85:9f:47:61:17:2c:e7:63:d1:3f:9e:77:
c8:e6:cd:52:77:7b:be:70:cb:7d:7c:11:cb:fe:dd:
5f:64:53:8e:a9:98:57:70:d5:fa:24:46:7c:b5:02:
f6:93:8a:b3:fb:c4:7e:0d:37:56:32:1c:7f:5f:7d:
a0:a7:81:55:83:f1:9a:f5:d5:59:d9:e3:60:d4:ea:
b5:ab:86:71:bb:80:58:7a:78:25:9d:1d:4f:de:1c:
0c:cb:2e:75:73:ff:74:73:88:4a:e2:74:e1:6e:8f:
ab:14:61:95:81:82:9f:2a:6d:67:16:4a:da:20:b3:
24:e5:cb:6a:26:b0:17:d4:16:b6:b6:ef:87:b5:b9:
cc:ab:79:ae:0d:83:6d:5d:ae:16:e1:4f:5f:33:84:
a1:9f:ff:66:5c:ef:ad:d6:09:fc:0f:d9:1c:61:46:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:08:79:88:8A:A6:2F:33:40:43:D2:91:60:54:E7:34:A4:2C:20:C7
X509v3 Authority Key Identifier:
keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0e:cb:fb:96:90:e3:c8:a9:87:77:30:c3:63:b8:40:58:7b:
16:40:5b:c1:6d:03:ec:74:07:bf:d1:36:ac:94:2a:34:8c:3e:
f2:aa:5b:ad:29:26:0d:e2:bd:e7:d3:8b:23:eb:53:c8:fc:e3:
07:17:6f:95:02:f5:1b:d9:32:d7:e1:65:49:6f:9f:ac:f0:0d:
f5:7b:2a:fe:73:b2:25:df:7a:62:de:55:72:14:8a:99:bb:c5:
ab:d3:c6:68:c6:e6:f3:0e:5b:89:ca:90:46:ef:82:12:a5:90:
a6:cd:a0:3b:2f:f1:ca:f6:9d:5f:eb:ed:b5:71:8b:9d:5b:7f:
82:71:8d:df:07:62:53:a1:8e:98:0c:ad:03:26:b2:38:ef:c1:
9a:15:c2:26:88:53:52:0f:d2:bd:2a:27:5d:b8:6a:d5:da:37:
38:c2:3f:d6:41:5b:ff:77:25:9a:10:96:22:77:12:84:de:1c:
92:9b:30:dc:e7:b5:5c:43:2c:dc:5a:5a:d8:d1:54:ef:e2:00:
2c:7c:d1:25:10:e2:b7:6f:d7:16:f1:e3:4c:07:06:f7:9f:c5:
35:b4:53:56:73:f6:c1:35:57:3d:fa:bc:8f:e0:6b:cb:78:2b:
01:8e:4d:8c:87:8e:9b:b6:e9:b9:bc:c4:76:fa:0f:f5:48:10:
12:a6:37:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:03 2026 by rpki-client