
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json)
Hash identifier: ZJ6P3JOWvMpajMXL/ebezFNNtZoN0ur3wxA8vnVRA10=
Subject key identifier: C5:8B:BD:17:18:26:62:C6:B1:B2:35:24:D6:49:78:8D:DD:B4:B8:B6
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
Manifest number: 01AB
Signing time: Mon 11 May 2026 04:11:08 +0000
Manifest this update: Mon 11 May 2026 04:11:08 +0000
Manifest next update: Mon 18 May 2026 04:11:08 +0000
Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: 3F50YHbM9FfFt8ECPH8WziPYfTibjVB1Wuc5pmwpoTc=)
2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: wp5Bbdm9q2bQP+NH3qhWvc9NbTFLA+VfDHmL/JL9bns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Validity
Not Before: May 11 04:11:08 2026 GMT
Not After : May 18 04:11:08 2026 GMT
Subject: CN=6a0156dc-9f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:c1:3a:f1:aa:35:67:ff:0b:d4:70:42:74:
7a:21:9c:82:c7:77:f7:36:f6:a2:0e:6c:7c:0d:7b:
e5:a5:14:b9:ec:cb:51:d8:66:0a:2d:d7:db:06:81:
63:e4:60:6c:cd:96:75:63:1c:71:f7:4c:ae:4f:e9:
24:cb:ca:3a:2d:80:68:69:43:2f:34:21:ec:3f:de:
69:aa:69:b0:0c:fe:18:56:7f:36:6f:c5:5a:39:df:
c6:8d:bd:28:5a:8c:73:f6:a3:5b:98:36:4d:3d:91:
c4:f3:83:f0:78:51:84:ae:04:e5:06:5d:2c:27:fa:
66:36:7a:b9:ee:c1:33:87:22:a8:b2:12:c4:83:9f:
57:8c:ef:95:59:f5:16:18:35:76:10:1b:81:42:8f:
4b:27:09:65:95:c0:aa:49:e8:33:c6:51:fb:2b:27:
9f:9e:5d:2e:83:02:ab:41:be:ce:5e:21:ec:28:de:
1e:ca:d2:dc:c8:34:0a:b5:b8:50:94:90:e7:38:e9:
92:f0:4f:4f:4e:a1:ab:f1:24:57:e9:f5:98:ca:92:
4a:14:35:6d:0a:3a:b4:c7:13:8a:5f:b4:f3:dc:d0:
6a:e4:d4:5d:94:d0:b8:10:8c:d5:82:43:54:d1:6c:
30:39:ae:aa:c0:0b:ae:ae:b9:ed:eb:66:84:4f:2d:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:BD:17:18:26:62:C6:B1:B2:35:24:D6:49:78:8D:DD:B4:B8:B6
X509v3 Authority Key Identifier:
keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:74:3b:99:f2:cc:18:49:48:85:da:59:72:61:4d:8c:a9:
76:3a:a9:2b:c9:80:92:56:6b:26:8e:4a:f8:dd:78:53:59:6f:
e4:e8:86:e3:02:7d:c2:97:5e:a4:55:43:bb:3d:8e:5f:69:d2:
f3:55:5f:29:d1:a0:8a:d7:c0:0b:3e:52:32:a9:3f:6b:20:c9:
fb:06:5b:6a:db:aa:cd:ee:d4:11:8d:c5:05:9b:eb:1f:a2:d2:
96:18:f4:6c:e5:1d:53:94:4a:2e:ca:c4:2c:59:21:3c:24:2a:
d5:b2:c4:ac:3b:b7:c3:76:cd:65:a7:ea:0f:c7:49:ed:1b:fa:
ea:07:b7:89:ca:5a:d7:99:27:41:ad:af:d4:6c:fc:10:b7:0e:
9f:4b:f2:1f:62:cd:a5:90:85:b0:7d:05:ec:64:ea:70:b2:d8:
77:2d:02:30:99:a8:6e:0e:7f:6e:82:77:d7:14:95:ad:51:5d:
fd:0f:dd:22:04:ce:92:bf:ad:22:e7:34:5a:6a:7b:9b:3c:be:
9d:3f:ac:75:1e:ec:d0:0f:cc:1d:75:e1:4c:5b:9b:08:5b:1d:
0c:f6:53:98:03:bf:f0:99:97:01:25:f4:6b:f9:c9:d4:34:2b:
fe:77:7d:17:5b:ad:88:47:05:0f:8f:f6:53:94:fd:86:ec:15:
b3:f9:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:50 2026 by rpki-client