
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
File: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft (raw, json)
Hash identifier: koZM2aFzTAXOMkcVtykix32LIAVmxPFFbTbMGvHZOy0=
Subject key identifier: 9C:2C:17:D2:A9:B1:F6:C4:18:05:19:9C:1D:2E:65:C3:9C:04:A4:69
Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
Certificate issuer: /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Certificate serial: 0865
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
Manifest number: 085A
Signing time: Wed 22 Jul 2026 21:26:48 +0000
Manifest this update: Wed 22 Jul 2026 21:26:48 +0000
Manifest next update: Wed 29 Jul 2026 21:26:48 +0000
Files and hashes: 1: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl (hash: /tAlIW4SZo9FKeYDfLDMx3wwyoQZXX6VsRB8BTtpOZ0=)
2: E7BAB834B5F511F0B410AD78C4F9AE02.roa (hash: uxSAnvR6R6IbVNUOgDxpWGpdmYbvPquJW1vjjs3knts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Validity
Not Before: Jul 22 21:26:48 2026 GMT
Not After : Jul 29 21:26:48 2026 GMT
Subject: CN=6a613598-4e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:ed:d7:7e:30:7a:49:5a:31:b8:c6:d5:1b:
39:3c:12:e1:9b:16:e5:4e:40:bd:72:c9:9f:a7:5e:
b1:d7:d1:34:bf:a3:fa:ac:20:3d:25:db:73:75:47:
c7:75:cb:67:12:e8:ba:c4:c0:b6:4b:54:3b:23:70:
68:2a:d7:24:e7:45:34:7b:32:da:7d:ae:02:35:7f:
df:5b:29:eb:c3:5e:fd:7b:f2:04:5a:22:f2:b5:57:
43:83:a7:56:9f:c0:2d:3c:75:6d:69:ef:02:57:c1:
15:98:44:e4:9d:49:28:53:5f:d9:42:90:4a:d5:1f:
50:00:e6:98:cb:3b:62:1c:c0:0c:19:91:4e:f0:5a:
5c:69:1a:3c:57:e0:e6:77:3c:77:bb:bb:44:02:4b:
34:9d:33:ee:17:f3:ca:66:b9:3f:8c:56:49:3c:b1:
15:70:f5:1b:2f:55:ba:7c:5b:ed:b0:58:8b:61:a7:
01:c5:db:52:be:f7:8a:20:81:18:57:63:6e:50:e4:
dc:b6:bb:96:73:3c:67:16:d8:0d:c1:ae:d1:52:5a:
72:2b:52:32:35:b6:30:fd:6d:b2:4f:5f:48:ab:48:
49:88:38:b8:41:0f:ec:4b:9e:d0:25:30:f0:26:73:
00:3c:f9:35:30:85:22:4c:c6:e8:8e:55:c9:e2:66:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:17:D2:A9:B1:F6:C4:18:05:19:9C:1D:2E:65:C3:9C:04:A4:69
X509v3 Authority Key Identifier:
keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ed:2e:e6:d2:02:23:1f:aa:68:df:b5:a8:f3:b3:5f:9e:e5:
f9:f2:a0:9e:57:0b:90:be:e8:0a:bd:cb:3c:d3:af:ed:13:8d:
e4:98:80:5d:16:b0:ff:6e:90:9c:de:d4:7b:c0:6c:93:9c:a2:
53:ca:29:9b:df:e0:6d:66:3d:4b:b3:cc:a9:a2:a7:8f:a6:e2:
5b:e3:5c:0f:53:39:83:22:6f:22:d3:79:84:25:70:51:51:41:
b5:3b:14:d8:92:4c:0f:53:4b:4c:49:38:be:ba:ef:54:a3:7e:
b7:bb:27:7e:78:b3:61:f3:c1:90:7a:13:0c:2f:eb:77:a0:ea:
c6:a4:15:d5:13:27:64:c0:60:51:db:31:eb:bf:aa:23:f7:65:
1a:da:fe:33:a6:ff:05:aa:7a:68:94:e5:97:2b:c4:ea:fd:59:
6a:7e:1f:d1:b1:d6:5d:be:4c:d1:95:31:67:fe:12:c8:58:96:
ac:06:b1:a8:f5:f1:25:80:95:73:ba:8a:12:c5:f8:f0:48:65:
41:85:c3:97:82:d2:ef:57:9d:20:6a:97:cd:6f:a9:81:b2:16:
bb:5a:4a:6f:bc:39:e5:07:5a:2f:d4:3e:59:ad:b5:2d:cb:c2:
32:c8:2e:63:4e:a0:04:be:bf:fa:68:30:0e:c2:58:f4:13:18:
48:63:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:24:57 2026 by rpki-client