
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json)
Hash identifier: keoTGi/yZrfjdRQWGBFyl29E9gRbScSE3hkCEmKv57M=
Subject key identifier: 3E:A7:92:E6:99:A5:E1:1D:D2:06:2B:33:9E:F6:73:FD:EB:F3:0E:E3
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
Manifest number: 01F0
Signing time: Fri 25 Sep 2026 03:27:31 +0000
Manifest this update: Fri 25 Sep 2026 03:27:30 +0000
Manifest next update: Fri 02 Oct 2026 03:27:30 +0000
Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: v+W6M/ZqcrTNarkq6wQU57B7PIlw9/Ng0JeyP7/DUB0=)
2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: wp5Bbdm9q2bQP+NH3qhWvc9NbTFLA+VfDHmL/JL9bns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Validity
Not Before: Sep 25 03:27:30 2026 GMT
Not After : Oct 2 03:27:30 2026 GMT
Subject: CN=6ab5ea23-01e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:76:ca:3a:b0:f2:ef:3e:e1:00:1e:2e:a9:
ee:81:3d:b6:5e:cf:0f:f0:0c:32:aa:15:70:b9:24:
56:df:e8:7c:98:15:65:b0:14:02:ee:ff:5c:f6:06:
a2:aa:23:df:f0:5d:39:ed:3e:db:f8:a0:bb:6f:04:
18:ad:fd:ef:17:8a:97:16:a3:57:71:1a:67:38:12:
3d:ef:3d:16:69:fc:4d:fe:a3:ab:d6:50:d8:e3:cb:
76:10:ae:43:9b:85:57:2b:f1:15:b6:aa:06:4b:3c:
67:c1:a0:83:e3:0a:81:e0:ab:0b:b5:b9:7d:6d:b0:
e3:31:f1:2b:0d:d9:11:9c:c1:a7:cb:18:df:a1:a4:
77:78:74:89:fa:7f:5e:e4:68:15:8d:10:8b:83:0e:
92:07:d2:9b:1c:09:7e:bd:92:a6:3c:bd:1e:e1:aa:
06:27:da:86:8e:76:06:c3:e4:fc:57:84:02:ab:49:
f7:b5:df:9a:db:9c:ca:3b:7a:34:3f:6c:40:d4:15:
34:da:d1:3b:2b:e4:4d:c6:ca:0f:ef:10:6c:b9:1a:
90:d9:54:4e:09:fe:14:e3:ce:5d:5c:ba:47:92:83:
f1:4c:d5:9d:40:b7:ab:54:a1:b7:50:c5:c4:7c:f5:
ed:07:c0:0f:f3:85:3d:62:80:ad:d0:0c:a6:51:38:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:92:E6:99:A5:E1:1D:D2:06:2B:33:9E:F6:73:FD:EB:F3:0E:E3
X509v3 Authority Key Identifier:
keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:4c:0d:c8:33:63:27:c1:6b:84:22:a5:bc:04:ec:f4:34:80:
42:b3:cb:07:df:9d:d3:55:00:f3:7d:77:d0:c7:df:db:93:06:
c8:c6:57:a9:f0:79:d6:9a:7a:69:0a:0c:47:c7:01:cf:79:c4:
d9:b9:8d:c8:76:6d:83:e4:a9:47:9b:28:b2:4b:1d:c2:1a:ae:
42:07:85:e1:83:31:1c:55:7f:39:e7:4b:39:fd:22:43:c1:1d:
a6:56:45:b5:3c:98:ea:be:28:e5:9f:7e:01:9c:65:8d:c9:c1:
91:1d:37:0d:33:c7:27:02:fa:60:1e:7c:58:c2:f2:35:ed:aa:
4c:cd:00:66:39:a5:50:c9:84:1f:15:54:3e:d3:4b:64:98:29:
3a:ef:a2:d3:a3:f8:e4:b7:2e:c7:ac:b7:d4:64:69:49:aa:43:
0f:cd:df:5d:ef:14:46:11:25:90:7d:ab:60:33:40:9d:fe:54:
03:c1:6c:fd:dc:95:67:89:5d:41:77:fa:e5:6b:63:a7:ac:53:
8f:f2:f0:7b:58:a9:90:ff:06:39:54:f1:05:c9:a3:fa:48:6f:
b6:59:1d:7c:ed:5d:eb:7f:9b:41:17:b5:d3:55:7e:09:48:a6:
84:a5:e9:2f:f7:7f:53:15:96:84:05:06:95:e8:2b:66:72:13:
17:74:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:49:00 2026 by rpki-client