
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json)
Hash identifier: v1Ajbw/FtRLmw2F6v9KkkxH49aBEElnHuvFwGFxP3Ro=
Subject key identifier: 00:EB:1E:67:60:A1:78:23:4C:44:65:5B:5F:50:A5:E6:4F:D3:7F:E9
Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Certificate serial: 0F5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
Manifest number: 0F53
Signing time: Tue 06 Oct 2026 17:37:15 +0000
Manifest this update: Tue 06 Oct 2026 17:37:14 +0000
Manifest next update: Tue 13 Oct 2026 17:37:14 +0000
Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: tTKl2RYKqLFgoJc0gTHV2nA4DMFso1GQJyH7vcpdkt8=)
2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3934 (0xf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Validity
Not Before: Oct 6 17:37:14 2026 GMT
Not After : Oct 13 17:37:14 2026 GMT
Subject: CN=6ac531cb-a3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:dc:fe:2f:d6:2f:1d:94:0b:0c:db:7d:2c:
0b:cf:12:8b:c3:49:99:84:37:dc:da:c7:b7:ee:39:
a0:94:fd:a6:6e:89:71:5d:a0:e1:01:7b:db:0a:fb:
b0:fa:e2:aa:54:60:6c:ca:e1:a6:78:f8:d9:40:eb:
53:cf:75:13:e6:7e:7b:5b:13:55:3e:3e:f7:4a:91:
be:19:a3:56:8e:5e:9a:59:52:c2:a7:ac:a8:f3:64:
d8:31:47:59:c6:a3:00:d3:1e:c2:e3:e8:cf:bb:a6:
c9:43:5e:c7:71:79:71:0c:74:57:f3:a8:66:54:e8:
59:86:ee:64:42:34:e8:d6:dc:cb:32:fd:4d:66:1e:
3d:77:21:2a:34:b7:08:dc:3c:73:33:62:fc:37:c4:
7d:c0:b8:19:5e:ba:67:c8:c3:ca:c8:6c:be:13:0a:
19:6d:b3:2c:3b:d1:c3:28:c4:2a:22:8c:9e:53:6d:
af:b0:ed:3f:2b:43:76:1f:e8:73:2e:a9:2b:9a:fb:
96:85:bc:e0:24:58:c7:90:de:ec:57:8f:8b:24:e3:
90:d1:6c:ec:05:e1:eb:30:5f:9f:b0:33:eb:b6:87:
62:36:7e:15:a8:dc:63:6d:73:6f:3c:d8:aa:50:4e:
09:97:e9:fb:af:8a:ab:72:16:c9:8f:a9:10:63:82:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EB:1E:67:60:A1:78:23:4C:44:65:5B:5F:50:A5:E6:4F:D3:7F:E9
X509v3 Authority Key Identifier:
keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:8a:13:5f:41:f1:a2:46:9e:20:ab:27:e0:b8:c1:4a:60:
ce:a9:ed:65:78:63:da:be:65:a7:3d:6f:3f:a6:50:d5:52:99:
7e:b9:92:17:c3:47:2a:80:2b:65:7f:b4:10:ae:c6:e4:c7:b0:
2c:c4:08:d0:32:8c:b1:30:60:3a:51:66:06:bf:f5:29:4c:4e:
bd:eb:e7:b7:f9:77:c8:de:f5:e8:6b:bc:69:2c:ad:ed:94:64:
1f:4c:5f:42:3d:85:02:bb:44:b4:68:53:77:4f:d0:90:6b:a2:
c0:6c:2d:62:dc:fb:79:f8:79:54:7e:6c:13:f1:13:48:e2:f0:
45:ce:db:24:14:e9:e6:90:ce:df:4e:e5:03:43:48:7b:84:4c:
18:2e:f9:9b:aa:7c:d5:69:58:2d:31:6a:a4:98:c1:3c:b9:f7:
a1:62:9c:4f:2f:2b:12:56:e4:39:60:dd:7c:1a:3d:5a:0d:11:
46:46:a7:47:9e:9d:27:ae:f3:6b:a7:e7:39:2a:c7:44:f0:af:
eb:8e:2f:98:d1:8b:d5:c4:68:a3:4e:18:d6:e0:cf:ae:86:02:
2c:aa:63:93:92:58:39:ae:0e:47:56:15:24:77:2b:5b:96:f6:
56:73:c0:b1:1b:2c:bc:8e:30:23:7b:5e:76:71:7d:96:40:ed:
f1:85:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:56:14 2026 by rpki-client