
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json)
Hash identifier: hxQksUtfil1pFO6giK5VB2OQSAX3gGo4MGJ2LycEwY4=
Subject key identifier: 10:5A:75:84:26:73:F9:0A:25:A9:28:71:98:1B:F3:7D:74:9A:A5:87
Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
Manifest number: 016A
Signing time: Fri 11 Sep 2026 04:56:56 +0000
Manifest this update: Fri 11 Sep 2026 04:56:56 +0000
Manifest next update: Fri 18 Sep 2026 04:56:56 +0000
Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: rBWPXkL985CeCDsWDJRgS7PTqiZnJ/neq39qPo29rrE=)
2: C731AFD03B9A11F0B7924C1FC4F9AE02.roa (hash: Sej2V4OlsP7Ps6e9ZpabG+sOD+K5ClIDNHh6GA9v3Kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Validity
Not Before: Sep 11 04:56:56 2026 GMT
Not After : Sep 18 04:56:56 2026 GMT
Subject: CN=6aa38a18-c484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:8d:f4:44:81:10:74:11:ca:b0:f3:14:b8:
1b:b7:36:63:65:73:31:00:87:36:77:b8:ea:5e:69:
27:01:5a:b3:d4:12:a7:39:02:b3:d2:21:30:2c:f9:
05:72:f4:b1:57:5d:62:74:4a:45:e7:81:c7:3c:4f:
25:63:32:8c:d1:85:da:f2:ec:03:7e:d0:54:a8:6e:
ff:85:e2:90:1f:66:79:ee:5d:6a:e4:6a:6c:20:b5:
97:27:76:f4:81:87:95:0b:8c:d9:4f:be:d2:1c:f3:
0b:64:c3:73:b2:6a:2a:e5:8f:1d:fe:66:a6:28:e6:
dd:f5:d6:cd:83:c6:00:35:79:74:e1:7b:10:85:b7:
04:28:71:92:de:7d:b2:95:73:8e:de:73:2e:f4:c0:
df:3f:9f:78:62:fa:df:8b:c4:cc:65:f2:72:7d:bc:
b5:87:61:2c:09:05:92:9b:14:22:7b:47:9f:41:60:
e5:f4:2f:61:3c:ce:67:bd:f7:d6:b2:cd:27:25:b3:
ee:d9:27:a5:4b:6c:77:95:5f:e6:fa:a5:e6:11:b1:
4c:84:99:37:b1:ce:44:bb:14:f0:0f:b7:f8:83:63:
91:a4:24:87:c8:6e:9f:a5:42:b8:8c:43:ab:06:42:
df:bf:93:50:18:36:0f:f9:3c:0f:64:d5:26:27:6f:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5A:75:84:26:73:F9:0A:25:A9:28:71:98:1B:F3:7D:74:9A:A5:87
X509v3 Authority Key Identifier:
keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:fd:b4:c8:68:10:63:76:45:e8:fd:91:ad:31:86:0f:74:5e:
a6:f3:62:4b:58:88:5c:68:a2:d6:52:0a:c9:83:6c:3c:09:27:
e5:17:81:52:d3:ef:d3:f3:fe:88:2d:bd:2e:bb:56:ab:ef:f8:
14:94:23:b4:ae:3d:c4:b4:da:7a:29:7c:8f:57:17:75:25:a1:
79:1f:4d:d5:54:19:a4:d5:d0:16:7c:09:30:9e:bc:5b:01:a4:
b9:70:f6:0a:3b:57:b5:12:6b:52:63:d1:3b:5f:34:36:67:74:
1e:88:a8:a5:1b:43:e6:26:a4:27:eb:c5:1d:dd:a7:09:ba:84:
f1:4a:ec:ba:1c:7c:55:85:7c:3d:f6:22:d4:f9:98:a4:ad:af:
62:de:2c:93:51:4c:eb:12:33:6c:72:e4:9f:14:27:44:ba:0e:
9a:1b:e7:8b:de:93:11:99:10:7d:88:34:8d:97:a4:b4:a7:74:
a0:52:89:51:83:32:c9:fd:1c:59:f4:f4:24:35:4d:16:9a:40:
eb:8e:8a:26:80:00:09:4c:50:80:b1:6f:ec:ac:33:ea:df:53:
86:8e:b2:02:76:8a:ee:f9:74:2e:91:db:1c:09:90:dd:d1:c2:
54:ac:dc:cc:f8:e7:4f:6a:20:75:31:65:59:aa:ed:41:64:47:
06:58:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 21:15:12 2026 by rpki-client