
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json)
Hash identifier: bU08G2WjsWMNrD54jHL6Hwmby/ZxdKtYxRM0mM+JpNg=
Subject key identifier: F4:FC:F8:7D:93:A9:4F:81:86:37:14:F3:84:2A:82:35:A7:FC:87:D9
Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Certificate serial: 07C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
Manifest number: 12F7
Signing time: Wed 22 Jul 2026 19:34:57 +0000
Manifest this update: Wed 22 Jul 2026 19:34:57 +0000
Manifest next update: Wed 29 Jul 2026 19:34:57 +0000
Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: tGh3FDfTz0s1jqusxS4N9Q5ftI1AV1A4+XHDMNmr7g4=)
2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992 (0x7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Validity
Not Before: Jul 22 19:34:57 2026 GMT
Not After : Jul 29 19:34:57 2026 GMT
Subject: CN=6a611b61-a8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:16:1f:89:9b:98:cc:b9:61:90:48:28:16:
e8:96:87:ce:c9:2d:53:9c:4d:d3:41:5a:05:c4:a4:
6f:f0:2a:e7:68:d8:d3:5c:4a:4d:c4:98:20:5b:c0:
d2:c7:f6:12:c5:b0:31:f9:e7:fa:22:53:be:dd:52:
5b:1e:08:d9:d6:1c:0d:82:db:96:3c:bf:a9:e2:48:
1f:96:16:70:00:c6:57:da:d1:c8:88:d8:5c:26:3f:
15:b2:b5:91:af:7f:cc:fb:3b:a9:a7:51:f2:aa:fd:
aa:60:ca:fd:3a:98:c7:81:8d:8b:90:b4:d2:45:fe:
6a:3b:74:a7:f9:52:9a:d4:3e:21:a4:63:62:dd:cf:
f4:5e:9a:f1:9d:84:82:b2:30:27:f2:24:fd:c6:b5:
e3:7d:1f:16:8c:ca:d8:85:4a:91:50:62:d0:bb:1e:
cd:7d:c7:17:4b:75:7d:56:b8:33:33:4c:98:b0:52:
ab:f0:76:74:73:fb:03:eb:49:79:97:78:72:6d:a4:
da:0b:d6:21:a0:75:ed:a3:8a:c6:15:4a:d6:b1:45:
fe:7b:05:4d:3b:e2:d6:ab:6a:bf:6f:61:c7:58:50:
4a:0e:98:6e:e5:6c:f2:b3:67:f3:09:5b:ca:08:82:
ae:9e:93:d0:6a:1a:25:76:e4:70:8a:a3:15:46:7e:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:F8:7D:93:A9:4F:81:86:37:14:F3:84:2A:82:35:A7:FC:87:D9
X509v3 Authority Key Identifier:
keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:01:1b:07:bc:4a:89:e4:e4:0e:9f:25:f3:05:4f:8d:a2:e0:
b7:69:c0:fb:01:90:f2:32:c9:fa:b7:97:bc:f8:52:a1:a7:10:
0f:31:05:1e:74:ec:ed:48:08:73:30:65:9f:8d:19:85:8c:fd:
7a:87:4f:81:db:c3:79:15:26:84:78:bd:ad:fb:b7:8b:bb:bb:
e7:fc:bf:4e:c4:cb:38:30:dd:54:d4:b9:80:d0:fb:eb:9f:c2:
f1:3b:a1:3f:41:67:4c:6f:ae:d7:7d:58:9e:f3:bc:37:57:18:
0e:37:b7:bb:99:ad:d0:79:a4:e9:c4:00:f8:75:42:d6:3f:a6:
2b:8b:91:5a:3c:f8:da:49:a3:70:95:20:dc:e6:1e:f1:02:cf:
14:60:9b:59:66:d6:b8:34:1a:09:97:c2:1f:71:0c:47:70:88:
f1:49:0b:98:39:7f:da:c0:b4:f7:9e:e2:a2:a0:70:13:c4:b9:
a1:30:55:39:73:ce:4a:9f:02:2d:ff:ba:f0:d3:5f:9f:8f:98:
da:cf:a3:b6:cd:3f:ef:76:11:1f:6b:15:17:22:09:30:64:b3:
7a:9d:e3:f7:29:2f:ad:ea:00:af:27:c9:61:0f:3b:9a:74:5b:
19:c5:0c:13:77:49:a5:a8:3b:c4:03:d4:75:50:da:8a:be:fd:
8a:fd:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:10 2026 by rpki-client