
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json)
Hash identifier: MKEUyEwzh2ar4SlND1IWsFtmFsrAocbTyV64tx4S3AY=
Subject key identifier: 87:72:01:C8:5E:34:BB:4C:57:CA:16:C9:8C:45:07:36:EC:5E:AF:AC
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial: 178B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
Manifest number: 1773
Signing time: Fri 24 Jul 2026 16:44:09 +0000
Manifest this update: Fri 24 Jul 2026 16:44:08 +0000
Manifest next update: Fri 31 Jul 2026 16:44:08 +0000
Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: TX+BqoQ4rDTIzJI77+FS0ZIhT8hSDq7koPdEeLC0urg=)
2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: RmJVIv3K1Et0GVIGjp0LwXAHfwN0fchApUgm3Ee6HOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 16:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6027 (0x178b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Validity
Not Before: Jul 24 16:44:08 2026 GMT
Not After : Jul 31 16:44:08 2026 GMT
Subject: CN=6a639659-74a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:2b:4c:ee:43:1e:4a:3c:98:2c:b3:b8:fc:
ae:dc:fb:ba:3f:1f:c7:04:f3:38:fb:1c:4b:74:fb:
a2:6e:ad:78:f4:e7:c2:d7:f3:4f:a3:d8:d3:6c:83:
32:43:d0:a9:32:e1:82:f9:0f:59:06:0c:9b:bc:54:
f7:fe:02:90:c8:10:5a:25:b2:6c:8b:80:94:c7:58:
a6:2c:51:7a:2b:04:e3:d1:d4:d6:9c:f5:aa:a7:68:
88:06:73:97:b8:08:00:0e:66:bd:71:72:c4:bd:67:
b6:2d:8f:27:a1:f3:eb:45:bf:ca:8d:3d:29:8b:0a:
08:c3:5a:11:d6:98:b3:be:13:b9:63:d8:17:cd:ad:
af:c9:a5:73:db:11:e1:63:12:71:d5:6c:c9:05:28:
1c:7b:f6:e2:c4:c0:c3:0a:9e:07:2e:aa:b0:e0:4d:
c3:3b:7d:36:e2:92:c9:56:77:e6:4e:03:96:48:b5:
31:13:d5:58:6e:13:45:b2:8c:34:0c:e6:0f:a3:3e:
bf:23:bc:1d:d0:1d:dd:06:ac:1e:ca:8b:43:d4:ed:
72:f3:86:be:e5:3b:97:67:8a:11:76:e9:37:fe:a8:
79:12:a0:9a:19:66:8d:17:8c:e0:6d:09:1b:bb:19:
d7:85:d5:85:98:6e:f9:ec:ec:df:60:da:f7:d7:7a:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:01:C8:5E:34:BB:4C:57:CA:16:C9:8C:45:07:36:EC:5E:AF:AC
X509v3 Authority Key Identifier:
keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:76:00:19:ec:fb:db:05:ea:0c:f4:d3:1d:12:93:1d:ca:9d:
3a:59:d7:47:15:b5:cc:92:86:52:b0:5c:76:d6:ea:01:1f:a8:
61:42:68:ac:99:f1:5f:ad:81:5f:45:11:f3:70:89:be:f9:17:
83:7a:f4:4e:2c:7e:f6:c7:70:c8:12:d4:a1:f1:de:af:3b:19:
ef:74:f6:eb:a6:0d:38:65:28:ec:40:fe:71:5e:6b:6c:6d:78:
8a:b4:2a:cc:33:d8:c7:9a:1e:71:27:01:7a:03:17:71:6c:3d:
59:52:a2:b5:43:7d:8b:6a:26:ce:e4:42:fa:07:93:f6:94:80:
4f:29:97:73:1d:b5:05:90:e3:8a:56:2a:6a:61:b2:6c:ae:06:
c3:3f:86:b2:83:81:c9:c0:e6:00:fc:0f:e7:d7:ff:54:ef:91:
c0:87:7a:a9:d1:0b:2e:0d:d5:d3:70:db:38:d6:58:9f:cf:40:
fa:12:0a:3a:ed:b4:7c:73:65:15:19:9d:c3:3f:61:33:bc:98:
5d:66:37:0c:3b:44:31:3d:d7:ec:ca:3d:c6:6b:c3:62:51:9e:
dd:85:ac:0a:e5:32:c7:0b:82:dd:c5:5b:82:94:1f:5f:f6:0b:
94:97:8c:fd:01:8a:c8:68:6b:86:c9:dd:9b:6c:82:f2:f4:7d:
b0:66:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:55:55 2026 by rpki-client