
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier: n1vzMK90gI4AYC43uwielkp/B/SeL54jlZlEoVFxnMk=
Subject key identifier: DB:96:C6:0D:3F:7E:B5:75:49:B5:09:ED:D2:F8:A3:C6:BE:C2:5F:89
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial: 08D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number: 08CD
Signing time: Tue 12 May 2026 20:27:37 +0000
Manifest this update: Tue 12 May 2026 20:27:37 +0000
Manifest next update: Tue 19 May 2026 20:27:37 +0000
Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: 9prpE6H/YE1Hd2lLh8dDY2bHJW2FvkJbmgue4arHQbw=)
2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: rnY6JMeUBXZyAbrqoE5qS3jLHGJ339SuOypSORwx/lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Validity
Not Before: May 12 20:27:37 2026 GMT
Not After : May 19 20:27:37 2026 GMT
Subject: CN=6a038d39-3c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:04:b6:68:a0:ea:d9:ab:96:81:af:4e:a6:
1d:02:c0:35:f9:90:f7:1a:07:a1:9d:e6:e5:e6:08:
71:f9:36:de:f5:4c:86:fa:7a:c7:06:18:d9:77:53:
d9:6d:84:3e:b1:ca:58:d0:d0:26:e1:50:6a:e2:14:
2c:74:a0:d8:82:3a:16:b9:30:4f:c0:ef:b2:ac:cb:
fa:e8:c6:92:59:cf:c8:b5:06:f1:e4:8e:ff:6e:a7:
27:54:81:7e:1c:29:07:3c:97:2a:4d:20:fb:e8:59:
e6:26:e1:2d:90:ab:41:cc:14:da:1f:07:e3:7d:5d:
6d:8c:58:3b:6b:fc:b1:9b:53:93:65:50:52:24:01:
dd:cd:62:ff:c5:2f:ea:e7:b9:9e:5a:95:96:90:d1:
cd:83:40:f4:6d:31:c9:fa:4d:ac:f6:ca:9f:4f:6b:
32:e5:48:14:d7:64:20:b0:05:54:3e:f6:61:e4:89:
5e:ac:30:d3:c7:af:a7:83:c7:fd:64:d2:e6:39:f8:
9a:38:28:33:52:31:8c:7e:37:96:30:b2:53:d3:f3:
1f:cb:96:93:bc:46:88:5b:c6:ff:4b:64:22:f5:a8:
61:e7:35:e9:f2:85:88:60:89:af:a4:51:e3:b1:04:
94:ce:99:05:66:19:62:61:f0:79:36:c3:f4:c7:88:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:96:C6:0D:3F:7E:B5:75:49:B5:09:ED:D2:F8:A3:C6:BE:C2:5F:89
X509v3 Authority Key Identifier:
keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:23:b2:dd:db:b1:8b:70:54:6a:c4:f5:62:f1:c0:5a:e4:5d:
86:02:16:47:0a:b1:10:cb:74:60:51:40:a6:fb:11:ca:b0:f5:
22:ae:70:0d:2d:b6:22:1e:c7:cb:93:8d:c5:8d:5a:6d:6c:bb:
15:e8:61:ac:c3:90:b0:f6:50:b2:66:7f:a5:5d:32:16:d9:90:
d7:a9:9e:66:72:a1:d9:63:8e:26:7c:ee:5a:9b:7c:f5:e8:b5:
a7:31:c1:86:c2:ac:1d:39:6c:1d:42:17:d2:25:bf:7f:0b:e1:
bc:67:36:5f:d4:8e:4a:70:e3:32:95:df:c1:17:65:88:fb:74:
7c:ac:32:ad:9c:e8:13:c1:64:33:bb:d0:bc:9c:d9:36:ee:fb:
f4:01:3c:ed:a6:f7:bb:29:d5:60:e6:7f:34:70:9a:8b:5e:89:
aa:42:02:6a:a3:33:ac:73:88:6b:da:f5:f3:ee:60:56:aa:1e:
47:bc:27:dc:c3:92:bd:53:e2:69:63:a2:cf:2e:f2:f6:19:49:
02:8b:75:3e:d9:1c:c8:41:c9:76:60:71:98:2a:04:01:e2:36:
92:b1:3a:d3:b1:d5:d4:60:60:07:21:59:bb:12:3c:65:fb:a3:
62:79:09:f5:0f:58:b9:71:d6:ca:9a:72:41:c3:73:b7:4a:94:
42:cd:82:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3
RDcxNjQyNEIwHhcNMjYwNTEyMjAyNzM3WhcNMjYwNTE5MjAyNzM3WjAYMRYwFAYD
VQQDEw02YTAzOGQzOS0zYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs50Etmig6tmrloGvTqYdAsA1+ZD3Ggehnebl5ghx+Tbe9UyG+nrHBhjZd1PZ
bYQ+scpY0NAm4VBq4hQsdKDYgjoWuTBPwO+yrMv66MaSWc/ItQbx5I7/bqcnVIF+
HCkHPJcqTSD76FnmJuEtkKtBzBTaHwfjfV1tjFg7a/yxm1OTZVBSJAHdzWL/xS/q
57meWpWWkNHNg0D0bTHJ+k2s9sqfT2sy5UgU12QgsAVUPvZh5IlerDDTx6+ng8f9
ZNLmOfiaOCgzUjGMfjeWMLJT0/Mfy5aTvEaIW8b/S2Qi9ahh5zXp8oWIYImvpFHj
sQSUzpkFZhliYfB5NsP0x4iLrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuWxg0/
frV1SbUJ7dL4o8a+wl+JMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3
ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3
V0NtSl9NdHlfSko5Y1dRa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHiOy3duxi3BUasT1YvHAWuRdhgIWRwqxEMt0YFFApvsRyrD1Iq5wDS22Ih7H
y5ONxY1abWy7FehhrMOQsPZQsmZ/pV0yFtmQ16meZnKh2WOOJnzuWpt89ei1pzHB
hsKsHTlsHUIX0iW/fwvhvGc2X9SOSnDjMpXfwRdliPt0fKwyrZzoE8FkM7vQvJzZ
Nu779AE87ab3uynVYOZ/NHCai16JqkICaqMzrHOIa9r18+5gVqoeR7wn3MOSvVPi
aWOizy7y9hlJAot1PtkcyEHJdmBxmCoEAeI2krE607HV1GBgByFZuxI8ZfujYnkJ
9Q9YuXHWyppyQcNzt0qUQs2CTQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:17:07 2026 by rpki-client