
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier: kza5aZFlPAdwnM7hg+6Pzv5n0JuLvN8Acwg4HmkKNps=
Subject key identifier: BC:36:69:75:07:FD:FC:32:3A:61:4F:B9:55:7D:D1:C5:4F:1D:53:E0
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial: 043C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number: 0435
Signing time: Tue 24 Mar 2026 23:57:20 +0000
Manifest this update: Tue 24 Mar 2026 23:57:20 +0000
Manifest next update: Tue 31 Mar 2026 23:57:20 +0000
Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: xp9eZVpWAAD0P47VfTCHtqWVK5fW6QsNyR4v21elqa4=)
2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: dHCif+Ldj0bWw7XW3VRYigHVgHSS9PTU4XO4u0HGdK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Validity
Not Before: Mar 24 23:57:20 2026 GMT
Not After : Mar 31 23:57:20 2026 GMT
Subject: CN=69c324e0-9d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:bb:50:ad:4b:b4:df:66:3d:72:fe:95:53:
21:7b:61:6d:ff:c4:03:69:ed:2c:a4:7b:9e:ce:f1:
95:5d:fc:43:7a:5e:85:3d:c8:57:9f:b2:99:56:c4:
5a:11:79:2f:8b:b8:52:c1:9b:a9:f0:0a:39:5e:99:
ae:63:d7:b6:a3:61:e2:06:88:e5:3c:4b:57:d4:21:
e4:43:fc:74:fe:6c:21:c3:28:29:4b:e6:0d:56:0d:
3b:4b:c6:2b:32:bf:01:d1:b8:c1:d8:d1:b5:7e:19:
d3:38:77:de:e5:fe:4f:e7:32:b3:d0:65:09:5f:c0:
7d:f2:68:44:82:b3:ce:67:dd:74:f0:cc:f3:2d:76:
18:9b:f3:87:46:af:fe:98:f5:f6:62:4a:a4:07:60:
e0:0c:7a:c8:1e:22:63:91:e8:dc:df:46:93:71:53:
81:2e:ee:f2:36:38:28:02:2c:65:83:14:bc:62:55:
bc:ae:f6:5f:7f:1d:fd:06:0f:2b:7d:85:ee:e3:fc:
f4:05:f9:61:19:ee:fd:64:59:89:20:1d:04:9a:b6:
2e:08:93:12:c5:45:a0:27:d1:c4:8d:c7:85:d9:3e:
5e:1c:7e:47:fa:6a:48:a1:ad:59:79:20:a3:c1:da:
26:a1:14:f3:47:85:42:94:65:38:28:08:03:73:1c:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:69:75:07:FD:FC:32:3A:61:4F:B9:55:7D:D1:C5:4F:1D:53:E0
X509v3 Authority Key Identifier:
keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6e:8d:9c:57:c5:ea:9c:70:cd:07:b2:dc:4d:e6:3a:e1:5e:
0c:78:79:0d:1b:bb:96:c8:db:cb:78:4e:97:2a:de:d1:ed:60:
5c:40:a5:7c:39:ed:bf:4b:db:ec:91:dc:cd:99:bb:bd:c1:c3:
fc:ed:44:a6:c7:8e:4e:31:3e:0f:aa:3c:5d:bf:0d:11:1e:1a:
96:30:0d:d2:2d:b8:d8:28:8b:8b:94:aa:a4:75:77:f7:43:a7:
c0:11:29:29:da:1c:12:0d:53:97:d7:19:b5:6b:be:f4:27:d6:
48:29:64:4e:a3:14:59:84:fd:28:51:05:0a:ae:9e:cb:3e:6e:
6a:c5:a3:05:39:c3:b2:45:88:16:4e:48:c2:cc:4f:a8:ee:e4:
b2:d2:fb:92:92:14:0f:49:67:b3:f3:49:95:82:66:39:dc:71:
2a:8c:6a:76:8f:74:8e:33:90:12:a3:c6:f5:e9:c5:6a:84:e2:
61:27:a0:5b:64:0a:c1:3d:dd:b3:38:c9:54:db:71:8d:88:a1:
e9:f1:d2:f9:00:66:15:32:9f:c5:6c:da:84:9d:dc:4c:a6:d6:
9c:bb:f6:14:ff:ce:af:bc:53:81:c6:c3:ab:df:cd:39:3c:67:
ec:22:77:75:94:41:0c:9a:b9:0a:cf:2a:42:e4:9e:c1:78:97:
e9:f0:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:31 2026 by rpki-client