
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json)
Hash identifier: RHEqWmFe6qJHLFx6FliqCwyJWZSe4ObTUcKIpF03sbM=
Subject key identifier: 36:21:4B:63:57:6B:6A:0B:98:FE:46:8F:55:67:F7:F7:F6:4D:2F:2D
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial: 08BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
Manifest number: 08B5
Signing time: Wed 22 Jul 2026 20:58:43 +0000
Manifest this update: Wed 22 Jul 2026 20:58:42 +0000
Manifest next update: Wed 29 Jul 2026 20:58:42 +0000
Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: ElfLIm3VITFvlMl5UxTq0D7zbmlQnmIYT5t1T4YuG+8=)
2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: Zu7ovE1EUW36D/gzrtGv9a6ZOHHzmdXPGruHnQFEs4E=)
3: 457AD2DC859F11F1866C76AF58A30FBC.roa (hash: vV14M1DlmGoMEdIGjicSFzvlLxO/tuGgfyXG0UkDhf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Validity
Not Before: Jul 22 20:58:42 2026 GMT
Not After : Jul 29 20:58:42 2026 GMT
Subject: CN=6a612f03-9055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:c9:c1:27:95:31:26:c2:77:fc:eb:4a:4e:
62:60:eb:d6:b4:8f:64:40:ce:db:9f:bd:a6:2a:96:
f1:12:14:5d:89:17:dc:d8:12:a6:9d:cc:50:93:00:
26:b0:8a:42:1c:19:e6:71:af:ed:f4:76:db:5a:d7:
e1:74:c5:20:a6:b2:f7:5a:a7:e4:9c:6c:65:52:c2:
17:cf:0e:1b:2c:4e:5b:9a:6e:cf:a4:a8:fa:7b:ef:
f7:da:c2:cc:25:4a:c5:13:e8:95:d6:e1:33:28:81:
43:f3:cb:80:4b:bf:50:f2:9a:ce:65:e0:cb:00:2c:
8f:b5:b1:d0:db:55:f9:e8:1f:9c:9f:83:ff:50:e5:
65:37:02:1c:b6:cc:34:c6:af:d7:fc:f7:cb:cd:2a:
bd:0c:7a:91:09:70:c7:a4:c2:65:96:45:23:f8:bf:
25:6f:35:7e:6c:f1:07:56:d2:86:99:6a:6b:ea:7a:
f2:21:08:41:31:7f:43:d0:6a:66:06:1b:f3:8c:b7:
a4:1e:a1:64:52:b3:a3:82:4e:66:e1:fe:3b:15:0b:
98:61:9e:4e:ce:f1:f2:48:17:01:0c:8e:1a:93:6f:
b9:a1:d9:8b:88:4e:14:ec:6d:1a:aa:da:56:fe:42:
e7:cd:db:a4:c7:a6:56:f4:7d:0c:fe:9d:c0:f0:ed:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:4B:63:57:6B:6A:0B:98:FE:46:8F:55:67:F7:F7:F6:4D:2F:2D
X509v3 Authority Key Identifier:
keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c6:96:8d:7a:ee:07:44:fc:48:53:6a:0f:f4:25:34:2b:d1:
1f:52:fb:a7:6b:43:f3:4b:68:92:b6:a9:fe:31:d0:18:65:7c:
48:8c:7a:9d:46:92:74:54:a9:21:e6:7e:aa:f6:e4:39:52:01:
6e:db:ca:af:af:83:50:69:a7:a6:d4:b7:17:d1:d0:af:fd:5d:
e3:0a:31:67:7f:f3:5f:1b:7c:e3:c4:5a:83:c5:95:07:6a:7e:
f9:6b:2f:f6:09:40:88:83:07:15:ab:43:8a:06:51:e1:8d:12:
64:f4:33:f7:f0:41:a4:e2:20:27:b7:16:fd:7a:06:f2:05:80:
0e:9b:91:eb:26:06:2a:97:9a:59:ed:9d:b0:68:65:13:01:62:
a2:73:97:d0:8f:5e:92:31:6f:27:8b:c7:55:bc:20:17:3c:dc:
35:4b:43:9b:fd:8e:39:00:c5:33:be:90:06:c5:38:cf:8b:88:
ce:3d:42:2e:c1:43:34:64:3f:46:48:2b:0f:3b:d4:47:83:de:
ef:1f:88:68:35:6a:5a:29:46:26:b1:4a:8d:cb:76:8d:f0:fa:
60:a6:68:d3:c0:18:3c:ad:a6:a1:b6:5e:39:87:07:33:56:63:
5a:ee:38:42:09:05:d6:5f:7c:5d:4f:bd:e4:72:c1:68:e7:4d:
78:f4:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:12:31 2026 by rpki-client