
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier: 5P/iwb8b7bw/Wi0PIxBwh8yF/CbExH6fx9/060hLtkA=
Subject key identifier: B8:FD:C2:FE:37:CA:85:45:B5:58:12:E2:9C:31:1C:4D:20:A8:75:ED
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial: 35BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number: 35A9
Signing time: Thu 24 Sep 2026 14:23:50 +0000
Manifest this update: Thu 24 Sep 2026 14:23:49 +0000
Manifest next update: Thu 01 Oct 2026 14:23:49 +0000
Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: MZcd32YCfIgvc/Mm1EethDo5cui9pgI5sFZ4bl17GmM=)
2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: FneWbJ04EWBnNB9hcGYxNXW+7dDU9U/j/uBXyZbLddM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13757 (0x35bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Validity
Not Before: Sep 24 14:23:49 2026 GMT
Not After : Oct 1 14:23:49 2026 GMT
Subject: CN=6ab53276-0fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:47:42:a8:96:38:69:31:69:5e:7d:55:47:
49:98:6b:d5:cb:4c:ea:82:56:91:a8:13:80:f0:3b:
86:ee:97:10:b6:ed:1a:88:50:e3:29:de:1c:eb:ca:
b9:5c:fb:23:70:56:cf:98:15:ab:f6:64:6e:01:77:
49:fe:ff:c8:a5:57:d6:8d:ee:e1:8d:31:0e:1a:c3:
78:03:fb:a9:e0:ca:e5:ba:57:8d:ff:eb:98:49:a7:
7a:ce:78:31:79:61:6b:b9:5a:cc:32:3e:87:1a:2e:
5c:ad:fa:81:f1:99:f9:ff:fd:f2:ee:b2:77:fc:0b:
88:1f:3d:d2:6a:42:ba:2b:dc:91:bb:5e:ab:0d:ab:
5f:fb:9c:76:ea:6d:a7:35:d3:f3:9d:1b:5c:34:a6:
d4:59:9f:be:c6:16:b1:ea:5c:21:3f:8c:ef:81:36:
06:3e:af:70:1f:61:eb:ae:41:b5:a4:fa:a4:1f:d6:
7a:3e:72:ca:46:66:3e:50:56:5e:f4:f6:55:04:32:
7f:d9:a0:00:18:0e:dd:9f:28:8a:24:b0:82:10:d9:
05:03:f5:c8:7d:8b:92:aa:5c:f7:fe:d5:55:01:02:
d0:b1:b5:11:58:fe:6a:43:98:ad:a1:db:cd:0b:6e:
91:3d:4a:32:e9:63:fe:57:80:83:aa:c6:63:78:c3:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:C2:FE:37:CA:85:45:B5:58:12:E2:9C:31:1C:4D:20:A8:75:ED
X509v3 Authority Key Identifier:
keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ea:46:97:91:b2:40:26:1b:30:f7:6d:f2:51:24:a5:fe:28:
12:ac:18:0e:e3:49:38:ca:54:dc:6e:81:6a:e7:19:21:85:4e:
05:53:f1:42:62:f1:71:a4:3e:93:0b:7f:87:72:a6:af:1e:8c:
c4:9c:03:87:f1:8b:e2:99:05:0a:9d:dd:83:4b:01:20:c0:ce:
84:77:ef:50:1c:8b:5f:8c:5a:fe:8d:b3:63:cb:d8:2e:16:9f:
71:b0:1e:43:66:73:71:a0:a2:ab:0d:27:40:0a:6d:0d:49:e1:
d0:65:77:eb:45:78:3b:51:e4:0c:9f:97:71:4b:c7:d3:a4:35:
00:2f:87:b6:e8:2c:4b:0b:83:8d:29:e4:90:d1:2d:51:f8:a9:
00:ff:c4:14:f9:70:af:eb:b7:5f:f2:f8:66:a0:1a:91:90:63:
23:89:4e:de:f6:73:4e:eb:a9:6d:7e:cf:3a:4a:09:69:f5:86:
bc:2d:8b:d3:c3:b9:ea:af:3c:b8:0a:b6:f6:37:f8:1b:ed:05:
16:1b:78:62:69:46:90:0f:ac:c3:f9:18:85:c1:9b:e6:03:18:
0a:df:0b:70:50:e6:f1:a2:35:20:75:5d:7a:b8:b1:b5:cf:ea:
33:2e:9a:b3:ca:b0:9c:32:12:53:6f:e3:d7:2d:21:cd:05:c8:
4e:85:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:04:56 2026 by rpki-client