
$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json)
Hash identifier: XmlNXkGjDaxUij/0OhFl4tKYFQEQmUXvm/EmH9qnwk0=
Subject key identifier: 3D:92:3F:06:01:0F:6D:D8:7E:2C:01:2E:0A:8C:10:9E:EB:B3:E0:10
Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
Manifest number: C7
Signing time: Wed 19 Aug 2026 07:33:50 +0000
Manifest this update: Wed 19 Aug 2026 07:33:50 +0000
Manifest next update: Wed 26 Aug 2026 07:33:50 +0000
Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: U/z4W++2pt88u7eTwVK5IFCZakgKqhQi94V0BIjMVl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Validity
Not Before: Aug 19 07:33:50 2026 GMT
Not After : Aug 26 07:33:50 2026 GMT
Subject: CN=6a855c5e-5218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2f:c8:a7:3f:60:00:51:ca:a9:82:aa:d8:53:
fc:d0:e7:db:d8:f7:bd:e1:27:46:7f:96:dc:63:1f:
09:0b:2b:44:37:76:5a:b1:7a:ae:a2:82:69:29:24:
ec:f2:81:60:2e:c2:9c:60:01:88:8b:e1:61:c9:f8:
13:fa:a3:59:33:6f:58:cb:7c:91:e3:5b:28:46:ed:
4d:5d:b0:26:5d:82:c0:e5:43:b7:95:9f:30:4b:e9:
f7:0d:06:93:fb:9d:91:24:a8:37:09:04:e9:37:7d:
5a:09:c6:98:a2:21:f8:6d:fc:63:1a:35:65:fe:8b:
5f:e9:3f:6c:76:73:2b:9a:2a:64:05:40:bf:25:a1:
52:5a:95:db:6e:c9:b9:68:90:6e:0e:3d:c5:1f:db:
b7:56:7c:74:ab:34:10:e0:2e:91:db:8f:79:6a:02:
58:43:1c:94:2c:92:75:a7:dd:56:83:98:ab:67:c7:
03:83:1b:4d:3f:23:3e:bc:02:2a:85:4c:09:fb:6b:
db:2b:e9:cc:08:1c:a7:ec:01:28:b9:c8:d8:21:7d:
18:6c:58:33:e7:59:f3:4b:c6:c2:75:84:9a:5d:ff:
d2:8e:2a:c2:86:28:86:73:fc:de:0b:6f:41:6c:cc:
11:36:ce:a3:cf:7a:3b:17:76:86:48:e6:02:85:a8:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:3F:06:01:0F:6D:D8:7E:2C:01:2E:0A:8C:10:9E:EB:B3:E0:10
X509v3 Authority Key Identifier:
keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:23:6a:df:5e:8e:c7:05:9b:e4:9c:e5:d4:a4:09:ba:9f:1a:
c1:35:41:f3:01:48:8e:d3:d5:93:26:4d:3a:87:42:2d:e8:93:
2d:6f:58:f9:25:77:ad:7f:f4:a2:e2:34:d7:f4:18:58:7d:36:
0c:be:0c:b2:cf:97:09:2a:49:31:7f:87:74:1c:97:ce:9d:f6:
c2:7c:46:1f:eb:0f:d1:d0:53:fd:b7:f0:67:c0:8e:00:a8:d4:
8c:d0:dc:bd:cb:d6:ea:1f:27:3e:f7:80:14:b9:d5:ee:4c:5f:
33:22:a8:34:4c:9a:22:81:ef:73:46:58:b9:3f:b6:a8:f3:6c:
ec:d7:3a:4c:6d:9e:17:37:39:cb:d4:80:8a:95:cb:5d:07:56:
4d:d8:87:9c:8b:2c:21:50:8d:93:68:e1:2a:e9:31:6b:a8:ee:
a8:72:73:bb:26:1b:ea:3e:9d:f1:c1:a5:25:2a:bb:d2:82:40:
15:13:a1:1d:fb:65:28:95:f1:64:0b:dd:0b:26:67:0c:a6:b0:
ad:9c:64:55:67:f4:78:d8:d9:5c:05:f9:c3:7c:dd:ec:fa:6f:
e1:53:15:56:9c:25:c4:04:98:60:fa:90:8b:ee:e9:de:5c:dd:
ce:e5:d7:f7:ae:81:0c:d4:0d:a3:04:c3:9c:bd:1a:05:f9:36:
70:46:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:46 2026 by rpki-client