
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File: Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier: aeda0rI9eb3LbQ6z4Fhx/k+KI9eHiiTckPqTpKpnVBw=
Subject key identifier: B8:55:32:7B:DB:AD:8B:42:0A:6F:24:0A:06:CB:D3:93:9B:66:B3:27
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer: /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number: 0110
Signing time: Mon 11 May 2026 06:05:04 +0000
Manifest this update: Mon 11 May 2026 06:05:03 +0000
Manifest next update: Mon 18 May 2026 06:05:03 +0000
Files and hashes: 1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: IvU1PpbUA6E0zb53mQz/OEplNo07cA0LlVXkFXhbWGU=)
2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Validity
Not Before: May 11 06:05:03 2026 GMT
Not After : May 18 06:05:03 2026 GMT
Subject: CN=6a01718f-dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:2c:19:58:54:a6:73:65:24:32:49:86:67:
c3:ae:89:c8:06:36:ca:e8:ef:be:e2:16:c5:34:c2:
e8:89:8d:b9:c2:73:69:44:a9:d9:ae:0e:be:5c:7f:
47:39:f1:ab:65:5d:1e:c8:eb:e0:f6:83:e1:4e:93:
51:3c:14:ac:9c:7c:cc:93:5c:a6:61:62:79:d4:51:
b7:09:30:9e:41:f4:52:91:3c:66:f5:f8:de:31:1e:
f9:43:43:53:45:90:f4:c0:92:0e:50:5e:f7:72:c4:
ba:3c:b1:e9:86:5c:d2:aa:57:e2:f2:1d:b9:c9:6e:
7e:5a:ea:95:23:7e:77:5f:22:35:54:18:43:54:31:
5c:72:04:86:48:53:fc:59:ed:56:2c:96:6a:e7:4d:
a6:ab:51:af:cf:cb:9e:79:98:a1:f5:fa:47:35:88:
ab:2d:d2:86:d2:24:f5:a9:f1:24:ac:dd:22:bb:af:
9b:72:27:1c:5f:10:41:e1:47:0f:f9:db:28:7a:85:
47:52:d0:e4:bc:f6:5f:d0:4a:1f:c5:d9:42:8f:23:
0c:c4:16:f7:92:5d:d9:34:15:f3:e3:e5:35:53:ee:
73:c8:df:2c:52:16:c3:21:f2:90:53:8d:11:78:dd:
0c:8d:ff:26:2f:46:2f:6e:96:32:b2:69:42:a6:5b:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:32:7B:DB:AD:8B:42:0A:6F:24:0A:06:CB:D3:93:9B:66:B3:27
X509v3 Authority Key Identifier:
keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ff:9c:ed:d7:c1:1b:02:87:c2:54:5f:fd:a1:ef:de:22:83:
56:ba:21:70:f8:c7:b9:90:ad:bc:53:6d:67:04:f5:95:1e:af:
25:08:f0:8f:5d:29:8d:47:13:85:9c:12:96:23:a2:79:98:14:
aa:07:c0:c6:d7:57:28:85:44:9b:8c:39:e0:2f:58:7d:e4:b2:
20:84:76:01:9b:bc:a9:d8:7e:b0:58:78:55:cb:02:82:28:16:
65:44:b4:e5:59:b9:7c:14:1b:f6:57:9c:d2:af:b0:76:b8:3e:
e8:94:3c:58:6f:80:cc:55:f4:cc:03:b8:e9:91:54:d4:94:81:
59:3f:26:bd:bf:be:09:0b:da:96:e1:76:4d:ed:03:39:d9:67:
1d:c8:b0:9c:92:54:21:38:41:4a:f4:d1:ba:9b:ad:ce:27:12:
b6:9f:db:dc:12:3b:bb:52:64:0e:9b:bc:b1:ac:9b:22:03:5b:
5b:c7:12:1c:1e:81:64:05:90:6d:c5:f4:f8:bc:95:5d:a1:42:
60:c6:3c:75:cd:f0:2c:f8:16:bb:46:b3:b5:36:35:6d:52:fa:
fe:2a:86:25:64:a4:31:71:e0:18:d0:d6:52:0d:59:cd:34:c4:
92:3f:a0:1c:d7:dd:88:3b:d5:d1:b3:a5:be:db:05:75:b1:b7:
20:c7:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:14 2026 by rpki-client