
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
File: KbnmrAGSmMyglt6Jcancj3144dk.mft (raw, json)
Hash identifier: AqsgMkKkJxUMUZbwJXAVlS3sIG+tUHp1+LsLREfetL0=
Subject key identifier: 22:88:B9:6C:C9:5B:AD:36:55:B1:94:96:CA:25:C8:E7:E0:D5:AC:64
Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9
Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9
Certificate serial: 12CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
Manifest number: 12BE
Signing time: Sun 04 Oct 2026 17:04:49 +0000
Manifest this update: Sun 04 Oct 2026 17:04:48 +0000
Manifest next update: Sun 11 Oct 2026 17:04:48 +0000
Files and hashes: 1: KbnmrAGSmMyglt6Jcancj3144dk.crl (hash: 90vhNhN4G3NgwL7KQHFjhhi5YNDgS1JZ6wwUqcLEZzw=)
2: B6C2A27AF16A11E89550B621C4F9AE02.roa (hash: h+tzRhpe2AsXoHJ8CBPjL2tTeLXiRNNuDMYfrMmyPpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl
rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4812 (0x12cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91371E4, serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9
Validity
Not Before: Oct 4 17:04:48 2026 GMT
Not After : Oct 11 17:04:48 2026 GMT
Subject: CN=6ac28731-f7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:97:83:ea:8b:a6:e9:0e:72:05:0a:49:f5:
02:bf:24:01:64:99:78:d9:69:fa:e4:9f:b9:24:7f:
82:36:f4:f3:63:6f:8d:e7:f0:fd:35:fb:15:ce:3d:
98:60:1c:9a:02:dd:4b:64:47:a7:62:10:9d:80:36:
95:02:81:a0:f9:7b:17:59:2e:66:96:c5:ac:f9:4d:
9f:b0:d5:93:2e:a2:c5:68:83:0e:1b:08:2a:b6:96:
cf:ba:52:d2:37:33:64:56:9e:87:b6:cc:8f:71:f4:
a5:35:30:c8:42:0c:27:dc:32:6a:8f:78:64:78:e7:
19:fd:56:16:0b:7c:27:62:cd:ac:2a:45:a7:4a:8f:
7b:e5:9f:d5:b6:fe:d4:26:27:cd:28:f0:d8:38:cd:
dd:4d:cd:0d:fd:d9:26:a9:fa:3e:7b:41:ae:b8:72:
f0:ae:64:19:a0:ed:02:73:d5:4a:bd:fe:da:f2:67:
ca:91:61:a1:77:6b:90:7c:ba:a6:c1:9d:2f:d4:2d:
4d:b3:47:64:37:7d:6d:07:67:55:23:08:de:da:55:
1e:eb:a0:12:2f:a0:fc:ed:66:f9:c0:fd:bc:08:65:
c0:3e:a7:62:5a:99:21:68:0a:81:6d:9d:b6:05:eb:
39:b9:fd:34:ab:c2:de:d7:70:9b:be:ba:47:1b:8f:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:B9:6C:C9:5B:AD:36:55:B1:94:96:CA:25:C8:E7:E0:D5:AC:64
X509v3 Authority Key Identifier:
keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0e:68:b5:c4:54:73:38:2b:8d:78:0e:4e:a8:7e:1c:c0:0b:
c2:85:32:a3:13:b4:20:9e:ad:89:54:63:89:b3:1e:c8:e2:9d:
79:64:e9:0c:c3:33:d9:7d:fc:d9:0b:f9:9b:e7:1b:7f:5d:a3:
00:bc:b3:8c:ad:6e:c0:ff:cd:8d:65:4c:0a:a0:1a:bf:75:0a:
1b:26:98:13:f6:c7:70:b6:02:1b:3d:a9:1f:c5:97:f2:91:a4:
99:9e:04:7a:54:aa:23:cf:1c:6c:06:4e:a5:1c:22:db:e7:e6:
a1:be:a0:ae:9d:cf:19:69:a5:2f:d6:4f:b4:e4:2e:3e:f2:38:
02:e8:88:35:21:25:eb:1a:51:a9:68:a6:94:0f:2f:a9:8a:a9:
c2:4c:9c:d6:49:40:19:5c:4e:fc:8c:10:55:0f:09:6c:c1:4d:
cb:3a:6f:50:ee:c1:58:ec:36:10:ab:a2:84:0c:81:a0:5a:31:
fb:46:c2:8e:ae:00:f9:34:e9:88:7b:cf:10:77:06:c9:68:09:
bf:d6:bd:d9:d3:29:72:de:af:dd:a2:95:45:70:52:33:11:fa:
0c:2d:58:d0:78:b5:a2:52:6c:c6:26:f3:be:68:cf:aa:bf:ad:
17:d9:08:50:80:64:bf:ad:2a:10:7c:26:f8:b1:0f:2c:20:df:
45:b5:0c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:08:39 2026 by rpki-client