
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json)
Hash identifier: uGwqGcE3NDU+m6C/omvgTEVq/OrKESf0eVeAkrC+bCM=
Subject key identifier: 84:55:79:00:63:FD:73:BB:80:70:D2:28:23:E6:E3:5D:E8:AE:C4:A6
Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Certificate serial: 04F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
Manifest number: 3A2F
Signing time: Wed 20 May 2026 14:37:27 +0000
Manifest this update: Wed 20 May 2026 14:37:27 +0000
Manifest next update: Wed 27 May 2026 14:37:27 +0000
Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: TV/XhA+yWv1rrjYZ7Nre0WIidRy9Rbz0Ihrn9hEg1IA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Validity
Not Before: May 20 14:37:27 2026 GMT
Not After : May 27 14:37:27 2026 GMT
Subject: CN=6a0dc727-1491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:b0:f5:98:de:78:31:f2:96:6b:9c:a8:bd:
9d:5f:2f:0a:41:d4:07:83:64:62:a7:82:f2:07:a0:
c3:d8:cd:09:59:29:cd:e5:ba:1b:54:b2:33:2a:8f:
c1:d2:29:b3:1a:a1:eb:69:85:4f:58:7e:cd:20:c6:
77:58:35:dc:91:98:19:af:32:08:ec:3f:2f:36:4f:
c2:96:43:ae:32:39:62:dd:51:d9:b1:02:ed:2d:6e:
a9:62:8a:33:31:08:98:40:7e:77:e0:58:6a:9c:d6:
4c:12:7b:1e:c0:fb:bf:65:84:51:1a:e5:44:29:9e:
24:4e:03:b5:47:fe:3c:39:bf:c0:f1:b5:6c:1c:4c:
33:3e:3b:d7:1d:22:45:9b:17:86:04:e5:26:0b:06:
af:0c:d9:bf:8c:cb:84:e7:a7:35:4a:ae:90:5a:f6:
ef:15:b6:93:1e:61:ad:04:29:67:b6:25:6e:72:e7:
14:a1:55:0e:57:4f:87:6c:11:04:b7:04:20:85:7b:
4f:70:ff:9a:ae:8a:e9:e6:6a:c2:8f:e2:0f:c7:ea:
98:65:22:51:d1:9e:02:94:ea:ec:95:47:a5:b9:91:
74:6f:4a:a2:92:ea:93:54:aa:2d:d0:4c:d0:58:a1:
01:cb:c1:41:ef:20:d8:ae:f0:5d:be:e9:fd:80:fe:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:79:00:63:FD:73:BB:80:70:D2:28:23:E6:E3:5D:E8:AE:C4:A6
X509v3 Authority Key Identifier:
keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cc:1d:03:db:f9:2e:64:39:f1:dc:45:6f:81:1a:ef:2f:8a:
39:83:84:a6:e6:2b:dc:76:a4:57:71:c2:74:ca:57:e9:10:f9:
3a:15:ff:f2:fc:ca:7d:20:22:50:3d:4f:14:80:ad:01:d1:d7:
13:49:62:89:ee:a0:74:10:b8:95:47:ca:f6:84:af:17:62:46:
64:92:4b:53:ce:bb:4a:03:b0:3d:a5:15:64:c8:0d:9e:21:af:
06:9c:06:54:96:70:66:45:3b:9c:2d:d9:98:c6:b7:a7:f5:28:
d3:b2:a5:2b:ae:25:12:6c:e7:26:ba:c3:e5:1d:11:2f:88:7a:
8d:f6:02:4e:df:94:4a:90:53:65:9d:bf:fe:8e:76:23:36:8b:
d0:1b:d2:c2:29:da:d2:68:32:8f:e8:dd:47:f5:09:b6:b8:a4:
6d:bf:67:7e:76:68:ef:05:85:6b:fb:db:44:a5:26:03:4d:dc:
70:11:9b:1e:ca:3d:2a:57:ab:7a:e6:71:27:8a:9c:09:23:63:
e3:d6:31:85:73:c6:8a:35:5f:d6:2f:ed:8a:43:58:41:91:fe:
ef:fe:91:b0:72:5d:4b:a3:15:b8:b8:36:87:88:ba:af:47:17:
91:15:48:bd:03:e7:4a:19:d1:51:7f:12:54:65:2f:dc:97:de:
9a:bb:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:25 2026 by rpki-client