
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json)
Hash identifier: KDC10FxYGvmZCOVunofx+9twQEpYjK1GmLu7Qq+tlg8=
Subject key identifier: C0:28:35:15:B5:C2:1A:70:F0:9C:CD:14:52:35:69:60:18:43:BE:2E
Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
Manifest number: 0212
Signing time: Fri 09 Oct 2026 03:34:55 +0000
Manifest this update: Fri 09 Oct 2026 03:34:55 +0000
Manifest next update: Fri 16 Oct 2026 03:34:55 +0000
Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: j+ZQgVYwQEsSaQlJV705eWeggTEZjsnUc5tOagxVorc=)
2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: 1aZS6GVDT8XLp2PVm8+KUbofZBNmULZCxlUKWTFCqkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Validity
Not Before: Oct 9 03:34:55 2026 GMT
Not After : Oct 16 03:34:55 2026 GMT
Subject: CN=6ac860df-c224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:8d:07:17:bc:b7:09:43:1d:42:93:54:83:
d6:b2:44:48:4f:72:9a:72:fc:cb:65:0e:6b:ee:86:
89:9a:ca:72:84:d6:77:2b:12:f4:cd:3f:f5:11:91:
66:18:d3:d2:2a:3f:df:4f:63:12:4b:e9:9a:50:02:
03:70:7c:89:b6:a0:5e:f3:11:d7:b8:ed:c7:4a:ed:
c4:25:fb:8b:33:83:b4:83:87:d3:fb:99:8e:48:ea:
c1:71:8f:32:a2:23:0e:4c:77:08:52:fc:ad:0c:b7:
73:b8:51:b0:cb:c6:e0:64:f0:07:ab:ea:51:ac:bc:
f4:1d:8a:14:da:e8:98:4c:10:cc:63:7c:b3:6b:b2:
55:6c:e9:68:bb:d7:fc:1c:bc:3d:2e:fe:f1:be:5d:
e0:98:f8:d3:88:6a:24:9f:25:3a:ac:73:23:4a:6b:
22:1d:29:d4:07:51:3c:50:50:26:04:0c:04:52:64:
a7:a4:97:3f:29:7a:13:22:ff:e1:3f:d4:9d:01:2c:
7a:c7:79:5e:af:0d:85:93:53:d4:96:1f:1c:e1:7c:
2b:7c:6c:a8:40:66:72:02:9c:25:85:1a:6f:13:17:
3e:4f:86:5f:c1:b1:61:c4:24:fb:94:51:03:0e:cb:
41:1f:1e:d3:4c:08:10:ba:b9:66:6e:9f:4e:85:c7:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:28:35:15:B5:C2:1A:70:F0:9C:CD:14:52:35:69:60:18:43:BE:2E
X509v3 Authority Key Identifier:
keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:82:bb:fc:d4:b2:57:40:18:ad:b9:dc:e3:e2:a6:b9:91:
43:6c:74:c0:da:9e:0e:a8:d0:d9:d1:07:7d:50:fe:aa:77:37:
ef:d1:5e:b1:e7:ab:03:2f:3b:1d:a3:ba:f6:a3:9f:f8:92:af:
30:05:60:04:1b:33:7a:05:4d:41:31:98:35:28:2b:94:47:8b:
79:d7:88:3e:47:55:fa:8e:49:00:1f:83:41:9c:71:eb:31:cd:
c0:4a:03:76:c2:0d:8b:a0:43:eb:de:dd:fc:9e:a9:23:05:ec:
a8:0c:8c:7c:57:54:85:b4:22:75:29:36:7c:1b:04:27:80:08:
e3:e4:fa:22:12:1b:b4:23:cb:84:a6:5f:ac:98:77:12:4d:0f:
f3:bf:33:17:a7:28:cb:80:b6:d2:2e:70:73:71:a8:f4:e9:4e:
30:26:a0:4e:3c:16:a4:ac:dd:a7:30:52:19:1f:13:89:04:35:
8e:dd:5a:58:70:30:57:c0:3c:56:58:be:21:f8:1f:13:05:27:
2d:41:3e:36:5f:32:b8:d5:32:0a:bc:ff:87:8f:d3:7a:4f:c6:
4f:71:75:70:0d:84:9c:3a:ba:80:c1:95:9c:d5:fe:3d:77:9e:
81:48:be:80:47:54:c7:ef:b3:6d:cf:58:e6:bd:2d:a1:26:6a:
29:a7:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:21:38 2026 by rpki-client