
$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File: kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier: c+SYTZdOh0aNxee8QHTfSShyK6IfOLi9Bhenc6ghL7c=
Subject key identifier: 6A:0C:EF:A2:EE:AF:8C:3A:BD:1E:72:D5:2F:B2:67:33:BA:06:AA:F4
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number: 01FC
Signing time: Tue 11 Aug 2026 02:52:09 +0000
Manifest this update: Tue 11 Aug 2026 02:52:09 +0000
Manifest next update: Tue 18 Aug 2026 02:52:09 +0000
Files and hashes: 1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: jig1fKKksA13KvRgISbqFm+BTG60idJohKiBEMp5su4=)
2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: EaakEgdFwicKWl6P4v+HQcFOhGMzWeAMEZbE1mBKQ84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 02:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Validity
Not Before: Aug 11 02:52:09 2026 GMT
Not After : Aug 18 02:52:09 2026 GMT
Subject: CN=6a7a8e59-472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:8b:f2:84:c1:61:ee:75:36:3e:52:60:e9:
e5:f9:51:82:69:a0:3c:fd:71:ba:c3:14:2a:7d:52:
dd:d1:64:8f:e2:c0:0e:c3:75:1f:7d:7b:97:8c:73:
7b:f8:2b:a3:26:b8:a1:d1:a6:e0:85:22:cb:b2:6d:
ce:68:89:53:08:ef:31:e4:4b:06:fc:62:f6:2c:c5:
2d:91:7e:31:dc:e9:02:a1:6c:23:f2:b8:36:23:77:
db:78:b7:f3:ae:e9:56:b1:9f:62:45:82:b2:e6:66:
b8:fa:24:d4:9a:91:aa:f1:75:e8:76:d9:d1:58:b4:
c0:76:bb:17:3d:5e:d5:03:b3:3e:36:73:09:ec:06:
e4:7b:4e:6b:1f:44:37:36:3f:37:e1:f3:12:02:53:
47:09:3a:d6:e7:ed:d7:e3:70:2b:8d:ab:c2:58:ba:
63:2f:01:f6:a6:1a:0b:47:48:79:3d:f3:4b:84:5a:
c4:a3:67:4b:ae:32:08:83:26:18:0e:b1:fa:74:c1:
ac:12:e8:c4:1c:7c:8d:76:8b:24:0a:92:33:60:fa:
5b:b9:6e:26:78:bd:d7:de:f1:6b:b2:35:c3:aa:a6:
f6:7c:b3:ac:65:d9:78:8d:ae:9a:2e:ed:f6:3b:e4:
89:a7:7e:ef:93:dd:3c:76:ad:90:d5:75:99:25:44:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:EF:A2:EE:AF:8C:3A:BD:1E:72:D5:2F:B2:67:33:BA:06:AA:F4
X509v3 Authority Key Identifier:
keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:68:ad:4f:71:09:eb:95:01:ad:05:7e:07:72:22:65:1c:3b:
f4:9e:00:48:a1:2a:bb:09:d7:f2:ec:6e:a5:ae:c6:4e:07:ff:
ac:a5:1b:47:58:6e:5e:71:1f:fa:44:72:be:50:b1:35:fd:11:
d0:98:31:c6:8e:22:8d:29:bc:e8:53:ef:08:8e:c1:45:c4:05:
a3:37:8a:93:0f:1e:0c:eb:f1:74:4a:52:03:bf:58:69:f6:5f:
e8:75:e5:cc:8d:c9:f2:a8:f6:ad:1d:9f:75:a9:98:40:5d:2a:
29:57:08:d9:21:2f:92:5a:f9:6d:50:24:50:6e:3d:44:59:b2:
89:ea:88:f4:bd:49:8c:e3:53:53:48:09:64:4e:8e:58:20:f7:
57:6a:14:db:12:3e:7c:70:98:73:6d:7f:f8:ec:d6:aa:a9:ad:
00:b9:f3:77:6f:e4:d9:cc:72:97:a7:42:8c:8a:a3:41:5b:11:
4c:8c:44:ea:7b:c6:d3:17:8c:2c:3b:cd:73:8b:26:6a:37:d4:
cf:32:f1:4d:f7:83:d7:f8:a1:86:d3:93:6c:82:87:5d:1e:08:
d9:cf:78:d4:22:f8:4a:12:fc:d6:6e:c5:12:d7:1f:e0:d3:44:
c9:f6:47:b9:c9:7c:d2:98:b8:1a:0e:f9:f6:4d:27:6e:91:38:
b0:ab:dd:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU3RDExMTAvBgNVBAUTKDkwMzdDMEIyOUUzNzA5MkE4Mzg1MkNFNEI4ODVCNzc2
QTdDMUUzQjYwHhcNMjYwODExMDI1MjA5WhcNMjYwODE4MDI1MjA5WjAYMRYwFAYD
VQQDEw02YTdhOGU1OS00NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2HKL8oTBYe51Nj5SYOnl+VGCaaA8/XG6wxQqfVLd0WSP4sAOw3UffXuXjHN7
+CujJrih0abghSLLsm3OaIlTCO8x5EsG/GL2LMUtkX4x3OkCoWwj8rg2I3fbeLfz
rulWsZ9iRYKy5ma4+iTUmpGq8XXodtnRWLTAdrsXPV7VA7M+NnMJ7Abke05rH0Q3
Nj834fMSAlNHCTrW5+3X43ArjavCWLpjLwH2phoLR0h5PfNLhFrEo2dLrjIIgyYY
DrH6dMGsEujEHHyNdoskCpIzYPpbuW4meL3X3vFrsjXDqqb2fLOsZdl4ja6aLu32
O+SJp37vk908dq2Q1XWZJUQ/DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoM76Lu
r4w6vR5y1S+yZzO6Bqr0MB8GA1UdIwQYMBaAFJA3wLKeNwkqg4Us5LiFt3anweO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdEMS9GMDUzNzc5NDkz
QkQxMUVFODFGODBBNTJDNEY5QUUwMi9rRGZBc3A0M0NTcURoU3prdUlXM2RxZkI0
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tEZkFzcDQzQ1NxRGhTemt1SVczZHFmQjQ3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTdEMS9GMDUzNzc5NDkzQkQxMUVFODFGODBBNTJDNEY5QUUwMi9rRGZBc3A0M0NT
cURoU3prdUlXM2RxZkI0N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYmitT3EJ65UBrQV+B3IiZRw79J4ASKEquwnX8uxupa7GTgf/rKUbR1huXnEf
+kRyvlCxNf0R0Jgxxo4ijSm86FPvCI7BRcQFozeKkw8eDOvxdEpSA79YafZf6HXl
zI3J8qj2rR2fdamYQF0qKVcI2SEvklr5bVAkUG49RFmyieqI9L1JjONTU0gJZE6O
WCD3V2oU2xI+fHCYc21/+OzWqqmtALnzd2/k2cxyl6dCjIqjQVsRTIxE6nvG0xeM
LDvNc4smajfUzzLxTfeD1/ihhtOTbIKHXR4I2c941CL4ShL81m7FEtcf4NNEyfZH
ucl80pi4Gg759k0nbpE4sKvdAA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 06:11:09 2026 by rpki-client