
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier: ma385vAndGbWwCFIexDRQuxx+D34Tvb9EZpGvRgoyVc=
Subject key identifier: 4D:10:90:FF:8C:B2:44:0D:F8:FD:4A:C5:0D:29:A3:42:1F:BB:E3:BE
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 02D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number: 02C1
Signing time: Tue 27 Oct 2026 01:35:06 +0000
Manifest this update: Tue 27 Oct 2026 01:35:05 +0000
Manifest next update: Tue 03 Nov 2026 01:35:05 +0000
Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: 1GDnEQcD+6TBinjFvg5RTBCYg/1d8vImmBvFFN3+JiE=)
2: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: tHSDJxi9sVsTRoz1reKONBiKsyiwl7G8bqwueLtrVHQ=)
3: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Oct 27 01:35:05 2026 GMT
Not After : Nov 3 01:35:05 2026 GMT
Subject: CN=6adfffc9-f1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:51:74:7d:e9:f2:33:8b:6a:34:22:31:0d:
61:8f:66:98:f2:25:a5:8b:fc:b6:78:42:38:ae:c5:
67:64:b5:29:39:d7:2c:f3:46:37:f2:fd:14:25:40:
fa:4c:d6:5d:0d:47:20:a9:66:39:42:40:34:c7:13:
68:b4:83:9e:49:b9:c0:40:dd:69:02:b3:90:6f:a9:
51:69:d6:8e:f8:c3:6c:c8:94:82:a3:3c:ad:c6:a9:
dd:5d:91:f0:e5:8a:06:12:a5:a7:6c:87:3c:e9:e1:
56:b5:07:1c:87:4c:62:0b:d8:68:d2:e0:dc:0e:d4:
8b:ca:a2:0a:38:27:6c:03:ee:a3:55:62:ab:59:f2:
4e:b6:8b:c0:ab:5b:57:58:25:51:e4:ea:09:ae:a4:
bd:07:c9:4b:32:37:22:88:79:2d:37:cf:d1:8b:6a:
4f:23:d3:e4:df:06:aa:f1:4f:da:05:23:a0:cd:a0:
e7:b4:35:bd:fa:87:98:d6:36:df:e2:08:3c:35:bb:
77:cf:2a:8d:46:f8:e4:70:59:df:81:6c:cc:fb:91:
e7:e4:72:40:34:36:ea:27:e0:4a:af:50:2d:f4:e9:
78:09:9f:a9:8d:64:42:10:9c:34:76:6a:95:7e:b5:
47:9e:61:93:db:2a:0f:5c:8c:e8:86:1c:cf:03:0f:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:90:FF:8C:B2:44:0D:F8:FD:4A:C5:0D:29:A3:42:1F:BB:E3:BE
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:b5:ba:89:be:1b:ba:cd:13:84:4b:8e:05:81:6b:dc:97:
14:53:d1:25:e7:0f:63:03:11:a9:70:aa:c5:ce:cc:80:50:a3:
63:79:70:7b:4c:1f:41:11:bb:aa:64:1f:4b:9e:93:70:04:a1:
25:13:06:f9:56:f3:a6:25:74:95:04:9b:ee:4b:72:10:70:d4:
87:d5:d3:96:09:67:4a:ef:9a:75:f7:1b:ea:34:87:cc:2c:2b:
d0:91:97:96:77:75:57:75:dc:8c:05:23:34:2e:12:33:f4:a9:
ab:9d:00:cc:02:f2:70:fb:86:88:3b:11:39:d8:a3:0d:ad:20:
03:7c:e2:ab:14:a6:7c:c2:e6:f8:00:cb:38:fd:54:ac:68:7a:
ec:ee:84:7b:25:c0:1d:59:66:0b:fe:b3:7b:75:70:63:16:99:
f2:6c:98:9b:21:62:36:fa:9d:2b:55:53:31:e8:c4:2d:a7:95:
53:6d:1c:ef:24:6c:5d:c3:a4:d3:42:60:02:be:9b:58:cd:c4:
60:59:24:bc:94:ad:58:2e:c2:f3:f4:84:3a:28:85:66:ea:be:
90:e7:15:6f:49:57:ef:5c:7f:4a:5b:9e:f5:35:24:a9:39:da:
d6:57:13:cf:ea:59:58:74:09:c9:e4:45:ae:c5:c2:b3:57:ba:
8c:52:7d:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1
QzExQTFEOTcwHhcNMjYxMDI3MDEzNTA1WhcNMjYxMTAzMDEzNTA1WjAYMRYwFAYD
VQQDEw02YWRmZmZjOS1mMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzShRdH3p8jOLajQiMQ1hj2aY8iWli/y2eEI4rsVnZLUpOdcs80Y38v0UJUD6
TNZdDUcgqWY5QkA0xxNotIOeSbnAQN1pArOQb6lRadaO+MNsyJSCozytxqndXZHw
5YoGEqWnbIc86eFWtQcch0xiC9ho0uDcDtSLyqIKOCdsA+6jVWKrWfJOtovAq1tX
WCVR5OoJrqS9B8lLMjciiHktN8/Ri2pPI9Pk3waq8U/aBSOgzaDntDW9+oeY1jbf
4gg8Nbt3zyqNRvjkcFnfgWzM+5Hn5HJANDbqJ+BKr1At9Ol4CZ+pjWRCEJw0dmqV
frVHnmGT2yoPXIzohhzPAw9hewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0QkP+M
skQN+P1KxQ0po0Ifu+O+MB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD
M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL
V2xBYlYxQnZyazVjRWFIWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASS21uom+G7rNE4RLjgWBa9yXFFPRJecPYwMRqXCqxc7MgFCjY3lwe0wfQRG7
qmQfS56TcAShJRMG+VbzpiV0lQSb7ktyEHDUh9XTlglnSu+adfcb6jSHzCwr0JGX
lnd1V3XcjAUjNC4SM/Spq50AzALycPuGiDsROdijDa0gA3ziqxSmfMLm+ADLOP1U
rGh67O6EeyXAHVlmC/6ze3VwYxaZ8myYmyFiNvqdK1VTMejELaeVU20c7yRsXcOk
00JgAr6bWM3EYFkkvJStWC7C8/SEOiiFZuq+kOcVb0lX71x/Slue9TUkqTna1lcT
z+pZWHQJyeRFrsXCs1e6jFJ9ZQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:43 2026 by rpki-client