
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json)
Hash identifier: 8qwwzqSO5BA1gq6fP3YTHe50DKdnh5oIDsxKg+k5mec=
Subject key identifier: 13:23:1B:FF:5F:EA:10:1D:E5:38:C4:AE:2F:42:F2:7B:AE:4C:76:E3
Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Certificate serial: 0A8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
Manifest number: 0A80
Signing time: Wed 22 Jul 2026 19:59:11 +0000
Manifest this update: Wed 22 Jul 2026 19:59:11 +0000
Manifest next update: Wed 29 Jul 2026 19:59:11 +0000
Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: fU1mCdqB/KcQexGIpewIDuDOnOIMcgE1pW4ip3U3NLU=)
2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Validity
Not Before: Jul 22 19:59:11 2026 GMT
Not After : Jul 29 19:59:11 2026 GMT
Subject: CN=6a61210f-c3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:1d:31:9d:08:f9:86:a8:a9:3a:da:9b:3f:
cb:ae:8c:e2:bf:13:29:54:1d:0d:fa:ef:4e:75:3f:
bb:19:45:a9:b5:bc:a9:c6:27:31:9e:8d:10:ea:17:
10:cd:c6:46:d1:c7:d9:5a:6c:cc:ff:e0:32:f2:f7:
73:05:12:f2:db:33:3c:43:21:ef:28:c3:b4:a3:bb:
b8:5e:2a:27:3d:c8:e6:7e:d5:e2:80:a9:c1:25:bf:
19:c6:08:89:e8:f5:26:d2:83:78:c7:d9:49:db:22:
9d:59:b1:3d:38:f8:21:1f:59:73:6c:07:75:19:d0:
a0:dc:b3:a7:a8:8e:87:15:99:bf:3f:d3:4d:43:58:
42:b5:55:93:49:00:38:20:d4:1d:a4:a2:63:3a:26:
ee:04:be:1c:70:fb:bd:bd:41:1b:8f:23:b4:cb:46:
82:96:13:04:f7:f7:df:35:73:10:70:26:81:34:63:
9c:f6:53:c9:57:f8:fa:c2:00:aa:dc:68:72:b9:d8:
12:c3:e8:d2:f1:c6:26:4c:10:bc:49:21:64:48:73:
2d:73:db:8d:89:05:ac:20:d6:dc:99:43:09:3c:cd:
4a:ae:f8:1a:64:96:34:1d:52:c7:2c:f2:1e:c3:ff:
8d:52:80:03:1c:53:08:82:4f:5e:ce:0a:06:9c:57:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:1B:FF:5F:EA:10:1D:E5:38:C4:AE:2F:42:F2:7B:AE:4C:76:E3
X509v3 Authority Key Identifier:
keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:67:7b:b3:0b:08:bb:9a:8d:e0:17:08:a2:c0:da:59:0e:c0:
71:0d:50:33:1d:32:1f:50:74:2e:77:05:ea:17:62:9d:c9:0a:
06:4d:38:66:c4:93:1f:f8:09:e0:32:9d:07:e0:8d:cf:17:0b:
25:61:f7:2c:ff:6b:b4:7b:ca:d6:78:20:81:76:f3:3e:54:7e:
d3:ab:65:61:d8:38:18:44:33:07:38:d2:ae:78:4e:66:08:94:
86:d0:f1:44:ee:fe:ce:bf:f8:b5:63:e1:35:6e:75:0a:b3:a8:
f5:f0:a1:68:bb:dc:6c:af:02:7c:62:15:65:ab:6b:c5:11:01:
ef:90:83:e0:28:e9:7c:5d:7c:de:29:47:cc:4b:52:31:9b:e2:
4b:c7:9a:82:ca:40:6b:33:2b:b9:f9:e0:2b:d4:b0:eb:bf:0d:
ff:11:f0:cf:1f:a8:08:69:17:86:7f:62:47:7f:52:b3:99:54:
57:07:be:28:38:cd:71:36:3a:4e:06:ce:24:c6:29:4a:77:e4:
b8:20:dc:4c:b8:e4:5b:0a:74:75:d3:35:8e:94:27:08:9e:cc:
f6:ec:7f:9e:82:bc:51:ee:20:3b:62:2a:b6:ba:b9:cb:b5:34:
6e:89:60:c8:24:45:94:e5:11:9e:5a:14:b4:61:4e:ed:a6:0b:
cd:82:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:44 2026 by rpki-client