
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json)
Hash identifier: siB0FK9StLDbKpmb6JY2Z7YllIdZ3VRd0B8SJhBfc0w=
Subject key identifier: 46:4F:21:54:D0:BB:EB:4D:E9:37:B3:1C:FB:D8:55:07:E8:B3:FE:D9
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
Manifest number: 0185
Signing time: Thu 03 Sep 2026 04:51:47 +0000
Manifest this update: Thu 03 Sep 2026 04:51:47 +0000
Manifest next update: Thu 10 Sep 2026 04:51:47 +0000
Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: flU6HdfXXq0yKknuAnpUtmFxnIZTZBV7kVrfHAKdqCw=)
2: 9ECB1908653F11F1B667060D8D47A888.roa (hash: DbvXdABic1KJzkxyhPlZ4fRbKrDPMh8Orj+aI7Km8vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Validity
Not Before: Sep 3 04:51:47 2026 GMT
Not After : Sep 10 04:51:47 2026 GMT
Subject: CN=6a98fce3-e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:1a:35:5e:97:2d:cf:b5:31:b0:e1:78:11:
c9:24:4d:72:b9:f2:e9:1b:58:7a:4b:32:14:f4:a4:
65:16:22:80:9e:66:fa:37:ca:d6:42:1c:51:ee:1d:
d6:11:8b:e5:67:71:28:16:d9:a1:5c:ea:f2:93:1c:
28:45:b5:a3:59:aa:49:f1:ce:8c:8a:86:2b:23:ab:
d0:4f:9f:d6:9d:f8:48:1e:a8:02:5f:c3:ac:74:5b:
83:f3:61:39:12:78:e9:c6:94:8f:0f:bd:cd:f3:c6:
11:52:1a:50:ea:a6:d9:0c:c6:e3:84:f1:4e:e0:95:
d8:c0:69:78:ba:a5:f2:9a:f0:df:ab:1a:47:67:ca:
be:23:c0:dc:d5:97:b6:a6:d7:57:b6:d5:f2:1c:e0:
47:d7:f3:ed:a5:2c:39:e1:98:b1:6a:f9:07:7e:93:
43:d8:0d:cf:16:85:bb:ea:62:15:cd:23:43:67:ad:
29:f6:33:17:35:61:e4:ce:9d:4f:4a:74:e1:ec:a3:
b5:96:7a:52:56:99:d0:b6:27:9e:19:f0:7b:5b:73:
12:3a:9e:1c:9c:7a:92:ac:f5:72:6a:fc:27:1b:c1:
e7:d4:32:88:87:ba:9e:b3:c9:15:46:b6:bc:05:0b:
c0:05:99:e0:96:91:b5:62:6c:75:8f:1a:63:29:e6:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:21:54:D0:BB:EB:4D:E9:37:B3:1C:FB:D8:55:07:E8:B3:FE:D9
X509v3 Authority Key Identifier:
keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b7:85:1f:c0:a6:23:16:23:c2:7b:2a:c8:5a:69:5a:9d:61:
b8:12:ab:96:f3:66:df:11:f8:8a:45:69:10:45:e6:50:5c:45:
36:ef:74:0f:d0:63:b9:6a:72:98:c4:ec:8b:08:bc:e0:27:b1:
1f:3e:df:67:4c:fa:48:c8:df:63:f3:cf:26:83:72:8d:24:fe:
fc:65:01:0c:c9:39:1d:a2:d6:ae:81:00:16:0f:fa:19:c8:26:
c0:dd:31:c2:36:db:59:8c:15:ab:1a:0e:eb:6d:d0:a3:22:8f:
a6:a2:a9:0d:9e:da:71:4b:82:0a:36:b4:10:36:b9:29:68:1b:
5a:29:69:b3:2d:67:17:4c:1d:30:b7:a8:7c:1f:7f:14:f4:f4:
5e:2b:3f:fa:59:27:22:1b:fb:40:93:c1:57:ec:e1:ea:09:40:
55:66:b0:00:11:88:21:57:79:fb:bd:53:d8:3d:08:36:f1:5a:
d5:da:ec:1a:2d:f3:97:66:10:4f:44:1e:87:a2:29:d6:7d:c5:
bb:51:a2:a6:1b:5c:2d:c8:6d:2a:0a:b6:86:49:36:ae:7d:a2:
2c:61:6f:17:6c:aa:65:e7:5d:fe:46:79:f2:1b:ea:ca:fb:41:
a8:10:7c:83:7e:f1:d0:55:ba:00:6c:65:6e:7f:de:5f:c4:46:
a2:e8:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:22:55 2026 by rpki-client