
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json)
Hash identifier: e5Unc3z40vLMPFeD4AxMKrTz71lf3ysLOtg+uikbLRw=
Subject key identifier: 64:C1:F6:08:DF:48:56:97:7B:A0:E2:8E:16:A0:DF:0F:05:DD:E2:27
Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Certificate serial: 0929
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
Manifest number: 15FC
Signing time: Tue 22 Sep 2026 18:49:28 +0000
Manifest this update: Tue 22 Sep 2026 18:49:27 +0000
Manifest next update: Tue 29 Sep 2026 18:49:27 +0000
Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: qckOqTuMiOegB5gyyLdA4CdMl2G+vQ6FBG4s4q2samw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Validity
Not Before: Sep 22 18:49:27 2026 GMT
Not After : Sep 29 18:49:27 2026 GMT
Subject: CN=6ab2cdb8-726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:15:a5:53:b6:0e:9c:4e:6d:c0:11:47:ce:
83:ad:e6:e2:8b:18:59:99:c8:6e:d9:af:37:ff:b6:
7c:74:7b:47:c2:32:7a:65:bd:6d:a2:77:9d:9e:45:
cd:39:78:c6:da:27:c0:c1:0d:65:e3:4a:ec:27:f8:
0a:9e:ce:a6:84:43:38:57:34:24:e0:7f:9a:f5:30:
1e:6c:8b:dc:1b:cc:ce:2e:30:97:88:49:37:13:29:
0c:69:f6:49:6d:25:52:d8:08:d0:d0:50:7a:66:93:
b7:e8:04:82:9e:41:4b:b1:09:89:ab:85:66:16:c2:
c1:e4:f4:42:68:39:44:84:f7:0c:89:60:94:81:74:
42:be:bb:43:96:fc:1a:c3:d6:fe:e4:48:e8:27:4a:
cc:c2:5d:89:1e:c1:62:e6:ca:5e:2e:7b:24:c2:ee:
93:8d:6a:a9:4d:12:98:03:29:c5:af:66:75:a6:9b:
22:70:8c:95:5a:c5:92:74:28:28:e4:64:c6:e9:bd:
c8:ca:24:6a:75:5b:2b:74:2b:58:32:19:7f:9e:ea:
78:92:30:88:5e:d9:6b:3e:f3:eb:f3:c2:68:c4:24:
4c:d1:e1:a6:fc:54:5d:51:2a:90:b5:da:b4:4a:78:
97:2f:5a:78:7d:76:80:fd:a9:e1:ee:e5:b3:db:59:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:F6:08:DF:48:56:97:7B:A0:E2:8E:16:A0:DF:0F:05:DD:E2:27
X509v3 Authority Key Identifier:
keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ca:50:ec:be:aa:85:8e:03:60:ba:84:21:07:ea:7d:5a:b6:
b6:56:84:51:14:f8:d0:ef:d5:25:8c:a5:35:ed:3c:90:00:92:
f5:ee:b3:3d:22:cd:7c:76:05:51:b7:e2:b9:67:c0:84:f0:d0:
12:cb:77:92:fa:2f:1c:8c:51:4e:ee:04:61:45:ca:1e:1b:4b:
10:29:2c:3d:98:fd:67:e2:0b:89:79:3b:8c:d3:d6:2a:01:29:
35:74:83:0b:a1:0c:b1:38:6f:de:19:13:75:2e:ec:2f:17:06:
1d:f7:1d:e3:9d:cf:00:45:65:21:07:6e:fd:93:93:ab:8b:2f:
51:ab:a4:df:89:17:19:bb:88:77:ca:08:f2:a9:55:df:c6:a4:
f1:be:0e:9f:41:62:fd:39:2e:ff:ea:b2:4a:5f:6a:a3:5e:4a:
63:5b:cf:74:cc:f4:57:a1:fa:26:3a:f9:4f:7d:41:c2:43:19:
6a:eb:4a:9f:0b:98:2c:bd:0a:40:8c:fe:40:b2:a7:73:ae:9a:
03:30:f2:56:cb:66:f9:a8:c2:14:1a:32:39:f9:d7:7b:47:ce:
2c:dc:a5:45:fc:1e:34:83:bd:3a:17:a7:22:13:91:92:0c:e0:
2b:33:7f:92:d0:22:11:25:bd:d7:a8:8f:10:52:05:09:39:6c:
5e:f8:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:10:27 2026 by rpki-client