
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json)
Hash identifier: N1bdI+Wc5SsNZUEFE9qyOfHRmhPdjvhm5uUsfspbJrY=
Subject key identifier: 47:F7:08:92:6F:59:98:F2:BA:97:FA:10:9D:FD:D9:DD:2B:1F:8A:98
Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Certificate serial: 0AAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
Manifest number: 0AA1
Signing time: Thu 24 Sep 2026 19:28:33 +0000
Manifest this update: Thu 24 Sep 2026 19:28:33 +0000
Manifest next update: Thu 01 Oct 2026 19:28:33 +0000
Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: qEkPu3mlhcEI9gYf3BIyWWj7Qn1H87Msvj2zGB3sC/w=)
2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Validity
Not Before: Sep 24 19:28:33 2026 GMT
Not After : Oct 1 19:28:33 2026 GMT
Subject: CN=6ab579e1-eab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5a:52:ee:cf:37:28:b0:90:4e:fc:cc:b1:d2:
fb:e7:c4:b8:ac:7a:fb:c9:31:db:4e:10:26:53:b9:
b3:b6:4c:81:de:e4:ef:c7:9a:ab:10:29:71:1f:44:
51:30:ab:e9:af:9f:73:f2:27:da:3b:f0:78:5c:c7:
4a:37:a7:49:6e:fd:5c:15:32:8f:48:c7:97:a4:4e:
47:5b:31:a0:ad:5a:da:3d:40:c4:3b:9f:1b:a2:06:
11:e2:19:70:1a:24:3e:bc:02:17:fe:62:df:97:50:
42:0b:d4:d9:5d:aa:c6:c5:0d:3f:2e:a9:e5:86:fe:
0c:f7:a9:23:8d:a1:ab:c5:05:ce:bb:8d:e9:7b:e1:
e3:b3:cb:6d:b8:2d:d8:e1:10:cd:4b:30:5d:dc:73:
00:0d:f4:b8:af:c4:2d:94:6b:93:d1:8a:6e:b1:ed:
e3:d7:0e:35:01:9f:6b:51:08:83:af:ac:ff:5c:47:
fc:1d:be:ca:ab:73:ca:3d:81:f3:93:ee:24:ab:64:
79:e9:c7:4e:d9:c4:34:e5:2d:62:0d:ed:c1:45:70:
0c:c3:81:e0:6d:ef:e2:3b:27:15:7d:3c:30:ef:a1:
de:39:99:27:0d:98:dd:39:8d:a0:10:04:05:0f:d4:
f8:85:fb:a2:7f:4a:45:cc:fe:32:02:fe:c9:6d:56:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:08:92:6F:59:98:F2:BA:97:FA:10:9D:FD:D9:DD:2B:1F:8A:98
X509v3 Authority Key Identifier:
keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f5:b3:3b:44:bf:4a:2a:80:4b:6f:64:fb:a7:f5:0c:65:d1:
ec:68:f6:18:13:4b:ad:93:45:9a:e8:9b:a7:5f:25:ba:2a:45:
c4:87:7b:8a:56:e1:a9:91:5f:7d:28:61:05:23:0a:d5:d7:09:
c6:7e:70:c4:89:79:2b:f7:cf:53:46:cd:4b:00:e1:5c:f8:bb:
85:5a:fa:0b:c4:a8:23:8a:5b:b3:0f:33:d4:bc:78:06:73:98:
d6:d3:0b:7c:1a:5a:d5:8f:ac:9a:e5:0a:b5:66:4b:4e:73:b6:
e7:58:31:fc:21:c9:bd:47:65:44:5d:3a:be:94:22:5f:16:d2:
06:2a:91:a7:7b:3b:a0:68:93:e7:37:5a:14:5c:9c:de:df:ce:
25:8f:33:b9:18:17:77:e9:f5:d0:08:68:43:72:d3:cc:b9:0f:
7a:46:4f:8e:91:78:83:48:56:7f:99:06:8e:d4:3d:9b:ec:e6:
74:f7:a2:8e:7b:e6:30:fc:58:e6:b2:63:d3:78:f9:f8:41:d6:
65:aa:c9:46:66:0d:41:97:ac:a6:0d:ff:2c:46:7e:b9:02:20:
36:2b:eb:83:a1:3d:2d:ac:43:df:aa:7c:d5:58:84:26:ef:fc:
88:5d:29:b5:de:00:8c:b3:1a:91:6b:82:87:ee:5e:c3:d7:24:
b2:25:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:48:39 2026 by rpki-client