
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json)
Hash identifier: KuOYlrbjyjiE2SVgstIs52pxavQb2tNhvJtAx41FDO0=
Subject key identifier: 95:F5:93:E3:96:FF:E2:3D:56:11:9E:24:BB:49:60:1D:03:16:B5:F4
Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Certificate serial: 07D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
Manifest number: 07CF
Signing time: Thu 24 Sep 2026 21:17:29 +0000
Manifest this update: Thu 24 Sep 2026 21:17:29 +0000
Manifest next update: Thu 01 Oct 2026 21:17:29 +0000
Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: ByFWbGjXdbQUfAhPxz3JdCXP/tR0ZcmJuNzBJiHSFUw=)
2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008 (0x7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Validity
Not Before: Sep 24 21:17:29 2026 GMT
Not After : Oct 1 21:17:29 2026 GMT
Subject: CN=6ab59369-cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:cc:06:e4:69:75:c3:37:7a:23:16:59:0c:
5b:5e:6b:08:de:2b:18:62:4a:a7:41:23:77:89:29:
4d:0f:c0:7c:b6:48:96:10:47:6c:82:81:0f:ee:2b:
1f:60:73:a0:95:14:1f:fc:58:e0:74:2a:ba:59:08:
60:67:a6:38:97:de:84:24:d4:4b:6c:d5:3f:67:3a:
eb:1e:02:a5:06:81:1e:65:d2:ff:cb:5b:c1:9f:9f:
7a:01:83:20:41:a7:b4:75:3e:33:7e:bb:bb:c4:59:
cd:52:54:76:ce:eb:36:b6:93:ff:7a:b8:f0:03:e3:
33:ad:da:b0:c7:a1:bf:49:5e:91:12:89:57:d0:c2:
63:d3:9e:19:af:5a:42:29:51:0f:b3:84:63:a6:98:
ba:b5:47:79:8e:25:7f:2b:6b:89:4b:a2:e4:8e:36:
e4:61:ee:6e:f9:e2:bd:5e:c6:a0:9c:0f:53:45:63:
1c:e7:51:e8:ac:95:71:8d:4e:ea:9c:6b:31:d3:0d:
bb:25:b2:f4:1d:36:9d:d6:80:7b:0b:5e:b7:ab:a2:
e1:aa:78:fd:6c:ee:4c:7a:b9:40:49:dd:a9:18:62:
42:19:6c:f7:8f:28:cf:36:e7:fc:03:95:0f:25:fa:
6d:6e:62:e0:2e:2c:41:7f:6d:e4:87:33:ff:45:0d:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:93:E3:96:FF:E2:3D:56:11:9E:24:BB:49:60:1D:03:16:B5:F4
X509v3 Authority Key Identifier:
keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:72:d9:3e:7a:bb:d9:78:6f:01:d7:44:43:21:3e:e1:71:b8:
4a:10:85:12:c5:ef:c7:d7:c2:e7:30:18:c7:70:e5:8c:f5:7f:
86:b6:8a:67:51:4d:d3:db:c5:48:74:12:8e:54:e4:d6:18:c0:
b8:08:4d:ef:d9:4a:ef:fd:d0:98:a7:7f:69:c8:a0:85:81:4d:
3d:d0:ca:1e:bd:4a:95:35:f7:c5:b2:bf:34:c4:c0:a2:a7:9d:
70:9b:c5:30:07:18:2a:07:f5:b9:c3:cc:b2:a9:77:8c:73:b0:
dd:fd:28:25:ec:be:9f:16:f7:29:28:8e:b1:c5:2e:c0:c4:18:
99:6a:0c:c6:89:11:c0:22:20:ad:50:65:f5:22:95:53:ef:ec:
7b:eb:fa:9e:42:6e:63:79:a5:ce:27:52:56:6c:11:2f:fe:1d:
b4:5e:4b:77:2e:a9:a2:ed:29:a2:4e:5b:19:2f:7b:22:60:74:
be:1e:91:cf:e6:e7:96:20:3c:bd:f6:13:64:8e:99:06:e9:90:
21:e3:57:e1:58:14:71:6e:f1:25:63:90:35:85:bf:8d:38:67:
ac:85:71:a1:be:45:95:3e:41:c6:48:2c:c7:be:2c:c0:bc:f4:
2e:55:ec:f3:df:85:1b:16:40:38:d1:fe:93:fb:38:ab:bd:e6:
3c:98:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:30:13 2026 by rpki-client