
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json)
Hash identifier: 0pnQohi+S4uTRHTK4W9I3SYPuCjhtuQptWhu88Qwkj0=
Subject key identifier: F6:D5:F3:2B:92:39:CE:7E:1C:14:6D:50:C8:6D:B5:DA:B8:55:ED:6C
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
Manifest number: 0277
Signing time: Thu 17 Sep 2026 02:20:32 +0000
Manifest this update: Thu 17 Sep 2026 02:20:31 +0000
Manifest next update: Thu 24 Sep 2026 02:20:31 +0000
Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: Ni2TSGuS6keZf3MZaXuPLDASS+0ZZfih/OyXNC39wLc=)
2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: vs2Gbdu50+XToE8E4WRhYDNiQq7PIlKd89VDKs3X2wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Validity
Not Before: Sep 17 02:20:31 2026 GMT
Not After : Sep 24 02:20:31 2026 GMT
Subject: CN=6aab4e70-0839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:99:7a:a6:58:e5:81:12:8b:74:50:11:4d:
bf:f7:4b:db:fb:56:fc:97:df:e0:d2:4b:7f:b0:cd:
65:0a:0b:08:93:8c:c5:0a:a1:7e:4f:23:70:72:54:
62:72:bb:5e:e7:e5:25:48:bd:d0:5e:49:7f:6a:ee:
4d:54:15:d7:7b:7a:f8:98:f6:43:d5:9f:ad:21:24:
27:ee:70:53:68:8e:2b:a6:7d:ee:73:46:67:86:27:
86:1f:8e:5b:cf:95:b2:6a:91:ae:99:17:24:80:58:
66:8e:e3:af:76:9b:1b:3d:9a:79:b7:f5:6a:a3:28:
39:f5:5b:bc:59:70:d3:41:df:c1:98:b2:5d:fe:57:
a6:a6:ed:9b:53:af:3a:1f:20:f1:2a:f2:d6:7a:01:
6f:19:15:6c:fa:b3:4e:ff:3f:8f:b4:ee:e3:ad:0a:
ad:95:24:f8:56:6e:2e:43:46:c8:86:ec:98:bf:63:
fa:c0:ce:a9:d5:fc:18:f8:22:43:dc:b1:58:37:9d:
4a:ac:53:1a:5d:8a:da:9c:43:76:52:ba:ff:79:ac:
88:4d:f2:74:6b:b9:7e:97:62:4e:58:cf:45:a3:ff:
b2:8a:c9:da:7b:39:a6:ad:a9:06:39:c3:26:2f:38:
c8:a3:dc:df:96:ef:9b:ca:ef:50:f9:a7:bd:f5:5d:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:F3:2B:92:39:CE:7E:1C:14:6D:50:C8:6D:B5:DA:B8:55:ED:6C
X509v3 Authority Key Identifier:
keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:47:0f:d3:e8:1f:79:1f:53:c9:b8:2e:09:07:c0:ff:3e:df:
14:03:ca:71:f1:96:a8:e9:8e:12:83:ed:c0:77:fb:a0:cf:17:
25:76:b5:9d:86:cc:6a:36:7a:75:2b:bc:79:93:0e:f4:46:7a:
4a:dd:99:74:fd:a7:16:e3:db:ec:ed:2f:fb:3b:fb:c9:35:55:
bd:54:5d:22:85:2a:01:4c:af:1c:d1:ac:54:3e:f3:04:f0:2c:
90:5b:56:19:cd:8c:f0:e2:2d:b6:51:6a:2f:55:78:1e:47:8f:
90:32:42:60:4b:20:73:30:5e:3b:f8:7d:ec:e3:c7:79:96:a8:
93:b4:9c:9c:6a:bc:ae:f9:5d:41:63:be:b8:50:1b:85:67:be:
58:c3:7a:f2:9c:55:18:88:60:34:c3:11:ca:e0:b5:99:bc:cd:
59:7a:49:46:e2:06:21:1f:1c:8d:83:01:c1:e1:4f:f1:69:20:
21:ee:78:64:7d:5b:b0:00:fc:1a:e8:d9:8e:f6:83:d8:d1:de:
4a:97:3f:06:60:8e:d6:3a:f1:2b:96:b5:32:9f:bb:0e:4b:83:
1d:a0:a2:e1:02:fe:1b:27:fb:9d:20:11:69:c3:61:cb:a0:e9:
e6:29:1e:55:38:b2:15:65:df:8e:d2:d0:01:73:64:de:e5:aa:
80:79:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:36:08 2026 by rpki-client