
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier: SHh2EFXAtTvGqshtV+53Dksfgrshr1Ba7l97jQIAQaM=
Subject key identifier: 94:11:47:38:DE:37:61:66:A1:EC:B1:32:AD:8C:11:1F:A4:A3:BE:E2
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial: 0B84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number: 0B7A
Signing time: Mon 20 Jul 2026 19:33:12 +0000
Manifest this update: Mon 20 Jul 2026 19:33:11 +0000
Manifest next update: Mon 27 Jul 2026 19:33:11 +0000
Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: xZgS1oFw9BZxwC7V303Xrb6IX2CAqVUC2cAEkZz4e5o=)
2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2948 (0xb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Validity
Not Before: Jul 20 19:33:11 2026 GMT
Not After : Jul 27 19:33:11 2026 GMT
Subject: CN=6a5e77f8-a1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:ff:ba:ad:74:de:8c:78:05:26:2d:61:4d:
a0:59:8e:85:60:77:a8:03:ad:98:64:7d:bf:c4:39:
c1:75:4e:b1:dd:e1:3a:01:e2:31:d6:b7:f4:0e:b1:
2c:5a:bf:79:b7:f9:70:19:00:04:1a:60:4c:94:19:
59:c2:8b:4c:64:92:f4:b9:9e:b9:7a:66:34:45:0d:
79:a6:c5:73:f3:0b:de:16:9c:24:0a:4e:de:62:4e:
1b:9c:e7:b6:81:39:44:7f:3f:96:fe:1f:57:c5:ac:
0e:84:54:34:55:29:05:68:e3:ce:7f:62:17:e1:de:
91:eb:c2:7d:b5:b8:b7:42:60:ee:60:25:6d:0f:26:
40:8d:07:4d:c8:94:cd:b0:d6:e6:28:e2:bd:1b:a1:
1a:81:af:90:87:05:c1:fa:61:c8:da:c7:8f:3f:f3:
be:29:d6:f3:38:18:90:05:ee:12:ba:d0:d4:d1:0d:
78:56:16:4f:fd:f2:35:44:06:73:d5:91:af:8e:65:
a4:9f:d9:8c:29:eb:90:82:48:f9:39:2a:37:43:5b:
8f:a5:a0:a0:9c:a5:61:61:20:f1:08:80:52:df:84:
61:3e:3a:4c:e1:4c:f0:a4:73:62:ed:22:25:51:7a:
a5:54:b6:86:a6:f5:c2:bb:d0:91:b2:32:de:48:72:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:11:47:38:DE:37:61:66:A1:EC:B1:32:AD:8C:11:1F:A4:A3:BE:E2
X509v3 Authority Key Identifier:
keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:67:ac:a7:2e:1e:ef:2d:91:1d:16:d1:31:0d:91:e0:26:84:
37:08:65:48:66:e8:00:c8:17:73:d1:82:84:ac:73:54:3c:c7:
2b:13:71:15:c1:d2:76:40:de:f9:64:d7:dd:64:c4:cf:d8:6e:
74:db:e1:33:7f:88:1e:0c:9b:34:66:93:29:c3:ea:b0:a8:d2:
68:26:f6:7d:32:02:a9:1a:b3:f3:b0:ac:55:90:a2:e9:c6:28:
6d:cd:6d:e2:f3:87:d4:d4:2e:1a:08:d9:ca:ec:e7:de:00:dc:
48:9b:45:51:62:d8:e6:74:39:ba:32:ce:20:53:15:a4:a9:b3:
3c:1d:ee:3f:fe:ed:81:fd:f8:50:98:5b:67:e5:10:b7:be:24:
d9:a8:22:1c:23:97:42:6d:a2:66:8b:ab:8d:fb:0d:1a:5f:e5:
16:b5:f6:bc:a6:ca:66:c9:85:76:72:e2:b3:6c:6d:b1:4f:98:
74:04:03:98:94:ac:a1:be:4b:44:5e:b8:06:8f:3c:9c:a7:ee:
bb:f1:ea:66:9b:c5:96:b2:cf:1f:71:18:d7:87:26:ee:fc:f1:
15:96:5c:5f:35:84:11:f3:bd:ab:86:59:10:a6:78:a0:2f:c5:
06:fe:12:f8:6f:e2:c1:4a:a1:cb:29:c2:bc:fb:a7:b1:85:d0:
2b:a6:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:35:18 2026 by rpki-client