
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json)
Hash identifier: AGPhJLavLiDlf+CQ0KH7pTIiwixYWnAfBug36QULCew=
Subject key identifier: 94:DB:CA:72:D1:B8:0C:B7:8D:6F:46:36:CC:69:AE:28:2B:ED:30:36
Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Certificate serial: 0537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
Manifest number: 3ABB
Signing time: Sun 04 Oct 2026 14:36:58 +0000
Manifest this update: Sun 04 Oct 2026 14:36:57 +0000
Manifest next update: Sun 11 Oct 2026 14:36:57 +0000
Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: t9CN1NO8NgfHDhy7gp03/U1Sf+3Oog6y+uWY9urG1gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Validity
Not Before: Oct 4 14:36:57 2026 GMT
Not After : Oct 11 14:36:57 2026 GMT
Subject: CN=6ac26489-469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:6f:af:ff:2c:29:5e:7c:60:86:57:cc:6a:
83:35:2e:aa:60:45:2c:70:04:74:26:8e:14:60:66:
6b:81:b4:c4:2b:4e:9f:9a:b7:8c:4d:0e:fe:fd:5d:
b7:2b:19:42:94:b6:9f:f9:b2:16:6f:5b:4d:05:ee:
ae:16:8a:f0:fa:35:14:d3:19:31:f3:c5:35:55:99:
ed:a2:be:fd:cb:cd:9f:86:bc:0f:1f:7c:44:e2:20:
4d:a3:57:67:15:35:36:bb:c2:3e:14:9b:c7:15:72:
d7:14:c1:82:eb:da:e5:55:e9:07:df:54:8c:0b:6c:
36:7a:f4:a2:86:5f:21:70:29:6b:e0:a6:3f:02:1b:
69:de:f8:c6:25:ba:2a:0b:fc:9a:57:19:42:7b:57:
b1:c4:59:f2:5d:5f:be:37:a9:4e:70:4d:f2:4c:84:
c0:39:b9:dd:53:6b:de:aa:7f:a5:1d:6e:41:16:d9:
2c:9f:4a:04:6f:1a:c5:72:ca:71:aa:dd:c3:a6:4e:
da:14:0d:d7:f3:c1:fe:c0:bc:9e:0f:11:03:81:73:
3e:d9:10:3a:62:08:79:96:ee:95:07:b7:dc:62:c0:
e1:c9:c2:0f:e1:80:d3:84:9f:90:7d:91:6d:1e:52:
f7:27:67:aa:29:ac:3a:61:5d:f5:8e:c7:43:80:5c:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DB:CA:72:D1:B8:0C:B7:8D:6F:46:36:CC:69:AE:28:2B:ED:30:36
X509v3 Authority Key Identifier:
keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6d:ff:d5:34:8d:08:8f:52:37:d9:91:ea:27:6c:0f:65:42:
d9:f0:4c:a4:82:da:8c:96:e1:c3:e1:18:7b:31:07:a0:b3:65:
01:6c:46:cc:43:67:19:bd:b9:02:a5:fa:31:5d:e8:01:4e:ce:
7c:5d:b0:5c:ba:35:2a:e5:01:74:d4:46:82:72:ae:40:ba:a5:
cd:0b:d2:57:56:b8:49:4b:f5:6d:c6:3b:5f:df:c0:6a:7a:ef:
12:8f:0a:18:a3:0f:a0:f8:df:f2:13:49:09:8c:46:4b:7b:8b:
61:b5:41:c8:e0:d6:91:21:a5:94:81:7e:53:4f:cc:19:34:09:
c1:5d:25:a6:52:c3:69:e6:65:3e:c4:2d:68:ba:67:02:2e:ed:
87:8e:5a:e0:e8:da:ee:43:1d:47:e2:05:b1:dd:7f:3d:92:21:
e5:1b:a3:66:f0:07:f8:74:ae:73:6c:18:41:c3:a3:9d:4a:9a:
ee:0a:fe:21:3a:e5:16:34:20:eb:28:ec:36:de:34:12:b0:bd:
d8:bf:9e:bb:d7:04:72:59:7d:ed:00:5c:d2:18:74:8f:17:5a:
01:0b:a4:33:88:85:09:c2:0d:a2:14:35:b8:89:f7:41:4c:bc:
7f:df:4d:d9:de:6b:47:f7:a8:47:03:57:49:90:14:9f:c0:c5:
17:38:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:25 2026 by rpki-client