
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier: 78ByGMQPpybbewIc9zxK0fDYPHmKXeeG7QlXYM1esuU=
Subject key identifier: ED:9B:9E:B6:AC:A0:78:71:DB:4F:E3:36:0C:7C:69:8A:2E:72:93:80
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial: 08FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number: 08F1
Signing time: Wed 22 Jul 2026 20:47:14 +0000
Manifest this update: Wed 22 Jul 2026 20:47:13 +0000
Manifest next update: Wed 29 Jul 2026 20:47:13 +0000
Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: /yFOrkv1ZciP+DXev/JIvVyiwwXYI1ymcB75aWpCCps=)
2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: rnY6JMeUBXZyAbrqoE5qS3jLHGJ339SuOypSORwx/lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Validity
Not Before: Jul 22 20:47:13 2026 GMT
Not After : Jul 29 20:47:13 2026 GMT
Subject: CN=6a612c52-0a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:b6:cf:3b:bb:b8:af:f3:ac:0c:be:cf:c1:
7b:3c:b6:49:5f:65:1c:98:4b:3d:5d:90:47:3b:af:
91:1d:50:31:70:5f:56:26:3d:a3:2f:c1:08:2c:94:
42:51:49:9d:bf:b6:22:eb:b5:4e:2a:a8:93:6d:77:
bf:81:41:b1:ec:50:74:fe:c8:df:cf:16:b7:ee:95:
60:3c:ed:71:e9:8d:6d:c9:72:d8:23:22:a3:b4:5e:
38:04:bc:77:51:97:11:6f:97:4c:3a:17:fb:d2:f1:
66:2a:fb:d5:7e:6e:41:f9:c7:da:20:30:f3:58:bf:
bf:53:24:d1:46:d9:7c:57:10:d4:e1:23:c6:2d:ec:
e1:3d:d6:64:53:e1:76:82:ec:c0:97:40:19:93:30:
91:1b:fb:ca:fd:92:3e:73:4d:54:de:db:e6:dd:03:
5a:10:77:d1:35:8e:3d:c0:c8:9f:c0:da:ce:dc:e2:
0f:05:a6:eb:3b:d4:68:fa:95:a9:92:25:4e:fb:b0:
e3:ec:22:ce:4c:6e:ae:1f:2f:f8:18:ad:07:3d:bc:
4e:fb:25:d2:97:51:00:5d:e9:bb:25:e8:56:96:ed:
44:55:d9:ab:53:8a:c6:ba:1f:6f:85:af:22:e9:42:
6f:c5:d7:98:fd:2c:4a:40:54:7a:be:b1:42:ee:6e:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9B:9E:B6:AC:A0:78:71:DB:4F:E3:36:0C:7C:69:8A:2E:72:93:80
X509v3 Authority Key Identifier:
keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:2a:b8:9c:7b:0e:f0:bc:4a:06:4e:56:4d:f7:52:69:3e:48:
d5:46:08:c9:a6:9f:1d:a7:51:3e:3c:68:d1:8e:5b:40:2d:bb:
21:cc:13:b4:cc:36:dc:2a:8f:4f:a7:b8:6f:7f:7e:5d:9a:33:
20:06:f1:a6:99:4f:06:94:0e:91:1f:f2:c1:6c:ae:28:61:7b:
9b:6c:54:fc:a4:e9:22:11:25:39:e8:21:6d:ce:b7:02:de:2a:
86:e9:d0:97:e9:71:bb:c4:ca:f0:6d:bd:25:e8:b2:70:ef:1f:
71:5b:17:95:4f:bd:61:7f:c6:2d:7e:40:fb:d8:a0:97:d3:f4:
88:67:b6:64:f8:de:fa:f2:21:0a:fc:44:34:f8:72:c8:41:7e:
f8:5c:bc:52:e6:92:f6:5d:66:bf:a1:95:d6:33:28:10:cb:5b:
b3:4d:3a:23:d6:ab:f2:4b:f7:0f:bb:37:47:6d:76:38:e5:f0:
e0:78:8b:86:aa:5d:33:83:d3:79:13:2b:31:13:5a:37:ce:3a:
4e:fd:13:36:84:db:08:87:9d:59:87:be:69:cd:b9:87:02:6b:
bc:11:cb:e9:db:10:79:c0:1d:65:a4:6f:a1:bd:32:ed:c0:a7:
b4:c1:da:ac:f1:d8:3b:d8:12:65:0f:2f:96:bc:00:46:78:6a:
fc:2a:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:42 2026 by rpki-client