
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json)
Hash identifier: FyaHnbALsGhjLAu62E1ObvTxCKzCTufXq79708htVGo=
Subject key identifier: 08:7D:B4:D2:9C:F9:EF:A6:70:D7:3E:38:8E:1E:62:87:F5:57:72:F9
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial: 17BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
Manifest number: 17A6
Signing time: Mon 28 Sep 2026 16:36:36 +0000
Manifest this update: Mon 28 Sep 2026 16:36:36 +0000
Manifest next update: Mon 05 Oct 2026 16:36:36 +0000
Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: ipcJ1cKJ9pokq6XSe6FbTHaXTkr/TgH7pL+094G8g48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6079 (0x17bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Validity
Not Before: Sep 28 16:36:36 2026 GMT
Not After : Oct 5 16:36:36 2026 GMT
Subject: CN=6aba9794-223f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:57:ec:01:c8:5a:17:ce:6a:e2:f8:27:f8:
6e:8c:a4:20:69:c2:d9:00:95:79:c4:48:5c:b9:cd:
b6:a3:ab:b7:08:31:c2:be:82:7b:f0:2f:1a:17:6e:
19:d4:61:5b:50:17:8a:56:dc:db:a9:ce:32:3f:31:
30:56:d7:bf:89:7b:bc:22:36:3d:eb:c0:78:13:f7:
84:53:f3:70:a6:d6:b6:2e:53:1c:7c:5c:03:5b:7c:
0c:b1:55:4a:09:ca:e0:85:35:ad:91:72:fb:72:87:
ac:e5:bf:bd:76:af:65:94:26:f2:68:e4:92:50:21:
d2:09:18:ec:d2:0c:26:95:9e:16:fe:77:c2:74:f5:
17:bc:c5:e2:ac:3b:e4:03:6f:51:2b:a8:04:c1:96:
5d:97:8d:ea:34:3e:83:f5:dc:ed:6f:52:76:93:61:
eb:d8:e1:cd:6b:ae:bd:f6:1d:36:c7:7d:8c:37:d2:
a4:3b:ca:b8:46:59:27:d2:95:de:46:3e:fb:eb:a8:
9c:01:26:77:71:01:07:0d:a5:7e:7f:56:a3:6c:c0:
f8:86:6b:08:0f:5d:cc:bc:0d:97:c7:89:34:3f:27:
ff:7a:17:b0:f0:ba:a2:06:ba:e6:b3:f7:0d:2d:ab:
74:79:3d:8c:68:c3:91:6f:7c:eb:9d:0f:43:cc:0b:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:B4:D2:9C:F9:EF:A6:70:D7:3E:38:8E:1E:62:87:F5:57:72:F9
X509v3 Authority Key Identifier:
keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:22:05:18:0e:dc:c5:44:b7:36:e0:4f:7f:22:3b:29:28:f8:
33:d2:d1:c1:c7:55:a5:3c:ae:21:0b:f6:5c:55:6a:47:4c:61:
8d:11:3c:46:f2:26:a8:79:6b:52:49:f5:3f:4c:34:60:b3:8b:
bb:57:f1:30:2d:26:aa:3f:66:c6:16:10:c3:b3:ef:48:4a:41:
c1:a2:5b:a6:c3:54:d8:77:0a:fe:dc:11:d5:60:cc:8b:86:ff:
fd:6a:9a:d3:35:c2:3d:c1:be:5f:be:ab:da:8f:a6:1e:f1:74:
4c:bd:16:3c:eb:6f:ae:70:af:cc:0c:be:72:f1:16:72:a5:11:
ac:47:57:43:c7:b7:8d:33:df:f5:d5:58:da:66:cc:74:1e:12:
fb:68:cc:f8:f4:f6:8b:1f:9e:bf:33:82:fe:eb:90:40:31:94:
b3:47:bc:d8:ae:2b:4f:52:5d:32:7d:c5:d9:c3:8e:70:1c:d3:
c1:0e:c8:f4:cc:05:1c:ed:21:89:bb:83:e0:38:6d:c9:4e:b0:
c0:5f:ba:46:52:96:32:30:ea:72:19:ba:59:06:a6:67:5e:3a:
ae:d6:94:9f:cc:af:43:9f:91:db:2f:44:14:df:fe:29:44:1f:
e6:67:2e:cd:66:f1:ac:89:98:89:5a:a1:81:1f:8f:83:e4:c2:
b2:34:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:31:17 2026 by rpki-client