
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
File: 2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json)
Hash identifier: A5JQF/i4J8tTutAZKnVSZjJw8u7bIu51KMy5u9/MYz0=
Subject key identifier: 65:E8:55:1E:89:A7:43:26:C1:57:FC:C2:51:AE:2A:06:66:7E:EB:24
Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
Certificate issuer: /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
Manifest number: 67
Signing time: Sat 03 Oct 2026 08:43:04 +0000
Manifest this update: Sat 03 Oct 2026 08:43:03 +0000
Manifest next update: Sat 10 Oct 2026 08:43:03 +0000
Files and hashes: 1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: QxpxgjUIDPs+dlu/deK4vjefDSJI1jqILcjMWt6az9s=)
2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Validity
Not Before: Oct 3 08:43:03 2026 GMT
Not After : Oct 10 08:43:03 2026 GMT
Subject: CN=6ac0c018-282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:27:9d:b0:f1:5c:41:b3:86:2b:4a:ad:d2:
89:ca:a7:b6:f4:28:3c:2d:16:be:dd:aa:27:78:2e:
4c:d5:bb:59:47:2e:db:a9:c8:f1:a7:ae:7b:9f:ee:
e9:30:ed:48:ac:5b:88:3e:43:34:5e:6c:0f:34:a7:
53:d4:97:ea:87:77:05:de:67:42:d4:d4:3f:d4:b1:
2a:27:5c:cf:61:06:d0:eb:9e:12:17:d5:3c:21:b4:
d0:ce:64:61:19:5f:c7:2e:78:ce:ea:19:c4:ec:2a:
9b:61:6e:39:54:63:c0:9e:28:1e:0c:5b:70:54:6e:
4d:c5:67:18:83:e4:86:93:95:3c:ab:4e:71:1e:e8:
18:a7:d2:79:30:30:0b:7d:14:3a:8c:ad:5f:0e:bd:
41:cb:2e:72:56:c3:b1:04:97:65:03:64:2f:b9:b2:
15:86:93:81:79:18:0d:d0:40:d4:d4:7a:ed:ba:bf:
66:7d:59:0d:34:10:f9:6e:50:72:0b:61:44:ee:69:
5d:dd:f0:7e:34:40:1a:f8:a0:97:cc:7d:7f:ac:d0:
aa:89:d1:63:e2:c4:50:0b:5e:60:97:71:ce:80:a9:
24:e3:4b:c3:f3:d4:90:dd:24:08:06:a6:21:91:da:
d9:9e:70:c6:be:8d:85:13:1b:32:80:b0:a0:5e:e4:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E8:55:1E:89:A7:43:26:C1:57:FC:C2:51:AE:2A:06:66:7E:EB:24
X509v3 Authority Key Identifier:
keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:4d:2c:f3:30:b5:fb:e1:52:30:8b:e2:9c:56:79:6b:59:9e:
f2:82:1a:36:57:ab:f9:e2:fb:fb:86:6a:37:a3:f0:78:8f:8c:
39:da:6c:97:1b:c4:1b:71:ca:1c:54:d2:17:eb:f7:7d:eb:a5:
89:86:c6:18:a4:8f:03:09:80:34:fa:9c:db:65:5d:18:d4:0f:
67:65:a7:85:a8:01:67:b8:5e:9f:34:40:bd:1e:03:1c:65:06:
be:e6:7a:1f:ca:bb:2e:9c:9c:7b:3f:8b:f4:ed:e3:09:ee:38:
cc:28:53:31:4a:ea:55:d6:a4:dc:25:29:d2:ba:29:15:dd:2f:
14:fb:d7:3f:3c:89:bb:1b:8f:84:de:77:43:ae:12:6e:13:35:
4b:d7:77:e1:0a:5d:8f:9e:b0:a3:0a:e5:25:5e:1f:fb:6a:ed:
c3:f2:70:dd:35:c8:42:2a:c0:3b:8a:0a:9d:7d:1b:f4:f8:c5:
31:70:20:73:86:ff:40:26:15:01:c9:6b:b2:2c:20:d2:e2:94:
6d:c4:e9:0a:bf:26:d8:bb:96:35:fe:ca:77:b2:06:7b:dd:8b:
20:14:db:b3:77:8b:e9:83:24:a2:9c:e5:6e:b3:fc:03:ef:25:
58:19:9f:f3:09:39:f8:b4:d7:1c:4c:24:a8:9c:5d:af:0a:0f:
d6:a7:20:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:06 2026 by rpki-client