
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier: XWSPbPOKDGQPfeuhZEfkWiKD/XaIrxpj/Oktp9OQuOM=
Subject key identifier: 6E:43:2A:27:25:EE:58:0C:DD:AF:33:41:47:95:AC:45:14:2F:EF:6B
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial: 0B21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number: 0B16
Signing time: Fri 04 Sep 2026 19:13:33 +0000
Manifest this update: Fri 04 Sep 2026 19:13:32 +0000
Manifest next update: Fri 11 Sep 2026 19:13:32 +0000
Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: 76M/7XvUmUHt+iCt9Oc7blW1unXmYu+B+gat/R0/uoE=)
2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: +6MnWixCvzMt3rLSJSp2YvtRQcWH4ISzu9SV3GhK8Pw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Validity
Not Before: Sep 4 19:13:32 2026 GMT
Not After : Sep 11 19:13:32 2026 GMT
Subject: CN=6a9b185d-b0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:bf:21:d5:e6:b9:f9:cd:98:b3:c4:02:aa:
6d:83:08:57:0d:d5:de:03:1e:df:9b:a8:45:e9:65:
c1:12:4e:f6:d0:76:65:e8:1d:6a:14:52:a5:f8:35:
27:d7:47:af:12:8c:26:99:a7:0f:52:11:c2:bd:d7:
92:eb:0e:33:d3:b5:e6:b7:d3:5f:58:48:1c:e2:c7:
a1:10:b4:50:cd:c8:68:f1:23:ae:58:db:e9:1e:66:
83:02:91:b5:c7:22:86:c4:e5:a7:38:eb:a5:28:53:
11:ac:6b:24:e5:8b:19:94:92:74:fe:0f:c2:1d:5d:
84:78:d8:0b:86:0c:46:27:30:0d:3e:52:97:98:82:
6b:82:59:42:55:25:ce:07:0f:7c:34:58:f0:03:e3:
b4:b1:bb:a0:3e:6e:20:d3:e3:3a:f0:ad:e9:8b:93:
fb:71:2f:82:17:f7:42:fe:e0:71:50:50:12:37:de:
e5:97:20:d2:75:00:ba:71:d8:9b:84:e1:de:30:b2:
79:61:64:2e:d6:3b:3f:f6:4f:94:65:08:b3:c4:6a:
8f:bc:4e:55:49:be:68:a3:66:6b:3e:cc:43:f1:51:
2f:8c:a7:d9:a5:c8:a4:fe:48:59:ea:a7:b3:df:e2:
22:c5:0c:de:8d:38:a2:bb:08:c9:96:d7:f0:28:39:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:2A:27:25:EE:58:0C:DD:AF:33:41:47:95:AC:45:14:2F:EF:6B
X509v3 Authority Key Identifier:
keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:59:87:c2:16:f3:70:f3:2d:0e:d2:c3:c5:cc:4a:09:7e:19:
8e:e6:e1:3c:a8:c7:6c:e0:26:dd:26:69:23:4d:0a:11:be:82:
1e:c6:85:f2:c5:cd:eb:1c:f5:f6:ed:25:5c:80:8f:b6:d5:69:
6b:f7:55:05:46:b4:fe:02:c4:7a:62:98:a2:0c:1f:e0:8a:fb:
62:86:e2:dc:d2:cd:07:17:90:2f:60:91:a6:da:31:72:19:f1:
62:ce:80:67:52:aa:d3:bf:26:45:6c:8a:29:46:14:c5:9e:20:
95:82:02:25:79:d6:f2:17:7e:41:ed:e2:13:6b:80:50:e7:09:
0d:1f:a1:ab:26:26:c7:ab:03:c8:58:b9:1b:5a:2a:66:7d:9e:
e0:f3:e3:a0:63:d0:de:d6:00:c2:f5:c3:d0:9c:73:09:d1:7f:
6a:12:da:8a:ce:c7:b4:37:15:37:c7:db:92:b2:f2:62:b8:53:
b4:e4:62:65:f7:03:31:e7:91:04:47:54:46:33:cb:05:f1:0a:
8a:69:67:9f:c9:ae:6a:3f:07:be:c8:4f:37:3d:01:fd:db:e7:
41:2b:7e:ad:b6:59:70:93:57:68:69:06:29:9c:1c:0f:a2:1b:
2b:f1:c6:e2:13:d9:72:45:4e:b6:96:f5:31:7e:01:44:76:f7:
9a:cd:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:19:52 2026 by rpki-client