
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json)
Hash identifier: Cn131/LDapCwLtRi+NTHHJHV8eK6HXmJ1O9Cjh8uhUw=
Subject key identifier: D4:1D:C0:CA:B8:49:6E:C6:DF:38:A6:DD:74:12:FA:26:54:43:70:DC
Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Certificate serial: 0725
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
Manifest number: 071D
Signing time: Fri 04 Sep 2026 21:37:55 +0000
Manifest this update: Fri 04 Sep 2026 21:37:54 +0000
Manifest next update: Fri 11 Sep 2026 21:37:54 +0000
Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: TNaFqh3pUC760fPH2SzIYmBbZIuOK9yzHYKys1j4I0U=)
2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: u0l6ewd10l3CnKNZWLyz/pX9vsxOgLw5k8pS9qZkY3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Validity
Not Before: Sep 4 21:37:54 2026 GMT
Not After : Sep 11 21:37:54 2026 GMT
Subject: CN=6a9b3a33-d8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:07:32:b9:d7:15:a7:3e:2b:7a:95:48:cd:
3e:b6:54:08:23:9d:56:e1:16:b5:5d:5f:c4:da:79:
f6:74:b8:7f:89:d0:fc:74:92:d9:6c:ed:27:50:23:
f5:3b:bc:1b:cb:78:77:2a:ec:35:f2:3c:4c:be:4c:
45:97:04:4f:93:8a:ea:49:34:a9:ca:b9:6d:44:cf:
e3:50:58:bf:25:66:04:e7:27:6c:9d:e0:87:0b:89:
f2:7e:ff:f1:21:bc:b6:d6:f6:70:a9:26:b1:8c:5a:
34:60:e1:f0:66:f7:e0:05:06:03:a8:ac:66:cb:bd:
aa:14:93:23:d2:ea:ae:5e:54:35:ad:f6:87:4b:7c:
27:d9:c4:ac:36:8d:e3:f6:02:1c:60:07:1b:82:c5:
57:c6:01:cf:40:8e:ad:9a:5a:d9:f8:c4:1f:f5:df:
d9:90:bc:39:5b:e5:31:db:2e:78:dd:15:0e:fb:04:
b4:8e:f6:66:d6:c1:c8:95:dc:01:dc:46:a6:71:f6:
3b:78:3c:72:fd:0c:79:d9:4b:6c:1e:65:f0:ab:c5:
21:fc:2a:1c:6e:ce:44:31:62:3f:c9:6c:2d:3d:6b:
93:d5:07:b0:d4:32:6d:bb:f9:65:f6:0b:d5:40:8d:
c7:86:a1:a0:55:87:c2:66:bc:65:f2:09:54:be:ad:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1D:C0:CA:B8:49:6E:C6:DF:38:A6:DD:74:12:FA:26:54:43:70:DC
X509v3 Authority Key Identifier:
keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:fc:19:30:1b:55:05:70:07:5e:5e:dc:b6:20:26:d3:41:8c:
53:cf:b1:d9:73:ce:27:81:a0:8f:31:b8:39:29:41:5d:0d:f4:
a2:f0:9b:d7:43:ec:8b:f0:71:36:98:c3:7e:7a:4a:96:fd:5e:
f7:82:d1:7a:42:c7:29:3f:31:b6:bf:fd:f6:b5:74:e6:7b:67:
ba:87:8b:e4:d8:67:00:e2:0c:68:8e:ab:c1:6a:43:f2:ef:4a:
a7:42:75:84:b5:c7:74:28:0e:ea:7a:c0:c7:d3:94:af:16:1a:
01:b4:97:70:77:b0:7a:14:ef:84:cb:45:95:88:b3:2d:4a:dd:
db:ec:35:c6:c9:81:c6:c2:be:0f:fc:18:92:06:b5:11:22:8f:
b5:98:db:47:c8:50:e4:3f:03:dd:57:d8:f1:9d:d3:43:6b:88:
c2:13:89:a3:99:93:ec:05:a1:06:63:ca:04:db:4c:1f:10:4b:
7b:9b:43:ed:2a:e9:88:53:56:15:30:61:6c:08:94:88:93:68:
bf:92:a0:c2:18:fc:54:91:1f:72:75:37:eb:16:3e:cf:4e:98:
d9:b1:42:28:db:84:62:55:92:3d:8e:db:c3:69:a9:fc:3d:fc:
b8:44:75:23:3b:31:40:fe:40:ad:2a:0d:d6:9f:37:0c:11:8d:
65:27:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:55:15 2026 by rpki-client