
$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
File: KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json)
Hash identifier: vKU5vhiaEoB3NwK2PAT6fzqeeaKaqy15tjv2GfXbhQU=
Subject key identifier: 95:55:0E:AD:D4:8D:EE:82:FE:EB:56:73:C4:17:71:E4:14:15:DB:C1
Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
Manifest number: E0
Signing time: Wed 19 Aug 2026 07:15:15 +0000
Manifest this update: Wed 19 Aug 2026 07:15:14 +0000
Manifest next update: Wed 26 Aug 2026 07:15:14 +0000
Files and hashes: 1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: Ct4pvFnjSNAZJn/IM4leT5KV+hQaVFrLxP7i742VZ8Y=)
2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: 9D74+8aEhg9Q1k4z+DDR3yMEpwq+MFOz5dIvRGDeuRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Validity
Not Before: Aug 19 07:15:14 2026 GMT
Not After : Aug 26 07:15:14 2026 GMT
Subject: CN=6a855803-1f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:a4:c5:8d:bb:87:60:fe:f7:6a:ff:85:8d:
a6:c1:07:10:af:ca:34:38:15:bd:f0:f1:1c:ae:51:
98:14:6a:f1:e3:34:c2:a3:f9:97:62:7f:da:21:a8:
0b:fd:77:58:fb:ec:c8:ff:38:af:39:d6:2c:bb:64:
30:35:e6:81:81:77:43:32:c0:2f:a0:2a:e5:c6:d9:
74:0b:23:89:46:e8:f4:bd:2a:f4:a4:b2:b7:01:d1:
92:9c:08:c5:83:ac:a6:8d:e6:d2:ae:d2:0b:1c:20:
81:96:02:48:b6:ea:84:5d:03:d8:e5:f9:d9:b4:85:
3c:d7:d1:d8:cc:30:36:9d:59:05:bb:9c:15:98:3c:
44:dd:c5:71:4a:bd:5c:fa:b8:3f:4e:80:f3:c0:59:
48:4b:83:e5:2a:55:1b:e9:97:0d:41:01:92:87:ac:
7b:02:d3:e1:32:c6:d6:32:3b:78:f4:11:d3:93:d3:
25:2a:b8:e2:da:5e:ba:4f:27:bb:5d:0e:3d:6d:f2:
b7:36:df:5a:89:24:a8:03:f1:e8:00:f9:34:e4:7e:
80:0f:03:82:eb:da:ad:cb:17:47:1c:3c:34:6c:a6:
ac:2c:d1:cf:ed:59:b8:5b:ec:df:46:8b:c1:4d:fd:
2b:1d:3a:c2:8e:2c:9c:28:e3:12:8d:fe:86:67:5a:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:0E:AD:D4:8D:EE:82:FE:EB:56:73:C4:17:71:E4:14:15:DB:C1
X509v3 Authority Key Identifier:
keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:13:79:4b:af:ad:e7:e1:3b:3d:28:87:0c:65:27:36:7c:21:
97:b6:0b:56:f7:34:d9:84:34:9a:67:b8:67:30:16:9c:cb:0f:
43:4e:ad:cc:52:0a:86:23:9a:e3:52:82:31:9a:28:f4:3e:d9:
d2:df:54:f5:4e:0e:c6:6b:25:27:84:60:65:66:ea:54:92:e6:
22:3a:5d:9f:e7:60:c5:b9:f1:53:52:02:06:d2:1f:49:3c:25:
d4:e7:e3:f0:e8:6d:99:1b:c6:36:1f:aa:0a:eb:9f:78:5f:84:
ed:9e:ba:d3:d4:f8:cd:7a:62:64:92:5f:bc:5b:b7:4d:3c:14:
f3:d8:d1:3e:25:61:01:20:a8:1c:d1:97:7e:4b:5d:0a:22:95:
d0:f4:ce:7d:68:e8:a9:90:b8:a8:98:e5:14:8f:30:13:15:1d:
a9:60:b9:ca:4b:d2:86:bb:4a:eb:d7:a4:84:9c:98:0c:65:8a:
0b:46:af:76:0d:87:37:78:4c:5d:95:67:8c:89:9e:ad:7a:2e:
e1:a8:46:7e:23:83:ac:63:14:1e:87:84:91:dd:dd:58:07:eb:
22:cc:4a:6e:8a:87:9f:0f:3d:fc:36:cf:e6:84:1b:2f:3f:66:
0c:d5:85:15:02:a9:d0:1d:91:2f:95:70:a7:2e:ac:3d:95:32:
12:af:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:43 2026 by rpki-client