
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json)
Hash identifier: gHJUTS0f61ilMEnJenerxL2y2jS0AfCAOGaUAbVnOMc=
Subject key identifier: C1:5A:B1:CA:50:76:DE:D8:B1:6A:44:84:B9:52:5D:79:5A:2B:C9:CF
Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Certificate serial: 02D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
Manifest number: 02CF
Signing time: Sat 03 Oct 2026 01:48:00 +0000
Manifest this update: Sat 03 Oct 2026 01:48:00 +0000
Manifest next update: Sat 10 Oct 2026 01:48:00 +0000
Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: EGwmmVopMXoNY60AcvxoBV/wXxCedl8AxyRCcxbYyW4=)
2: 203FA37E750611ED95126872C4F9AE02.roa (hash: 1UhMMEwrSvxSK5SenyWo1EuSLvOXjxy88H+VRidBB7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Validity
Not Before: Oct 3 01:48:00 2026 GMT
Not After : Oct 10 01:48:00 2026 GMT
Subject: CN=6ac05ed0-5e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:fd:a4:43:a3:1d:2b:4d:b1:51:70:99:23:
3e:42:5b:e1:ed:81:98:92:09:63:81:00:65:fe:87:
53:3a:2f:4f:8c:d0:ac:fa:f2:17:03:5b:e7:a1:5a:
6a:5d:dd:71:7c:69:4a:ff:03:76:b3:ab:5a:60:be:
43:a3:7d:0b:3e:aa:9a:e7:f5:ba:82:57:8c:f1:bd:
41:55:9b:8a:dd:0a:0a:41:00:b4:c3:c8:6b:51:b8:
68:b1:46:ca:9e:d8:b0:51:2a:e8:a7:96:e8:80:43:
fe:45:44:14:ee:5e:fb:70:f7:97:c8:51:13:21:65:
e4:bb:7c:a9:2c:d9:ce:b9:c6:6b:87:94:0b:e4:e6:
b5:42:b4:ed:8a:bb:e4:5e:f2:5f:79:91:ad:da:cc:
ee:61:91:4e:d0:b4:63:e8:43:c7:56:1b:73:d4:7e:
9c:81:74:69:96:be:3d:b7:86:a6:4c:37:25:71:94:
e9:80:4a:46:bb:cb:bf:e5:5b:00:4a:f9:29:43:1c:
b7:79:ce:45:e5:5b:90:0a:76:ab:1c:0b:13:e9:8c:
d6:93:04:30:79:48:ec:13:e2:ee:27:85:85:53:73:
e9:d9:4e:bf:49:f2:72:2b:f0:87:6b:a8:3c:2b:1a:
3d:df:4f:c0:b7:34:fe:53:9e:e8:b3:4d:54:1a:59:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:B1:CA:50:76:DE:D8:B1:6A:44:84:B9:52:5D:79:5A:2B:C9:CF
X509v3 Authority Key Identifier:
keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:09:d4:92:4e:19:17:f3:3c:49:7b:e5:b7:26:84:a5:28:6c:
2b:03:2a:c0:8e:04:e4:e9:68:38:5f:7a:53:3f:e0:0d:b0:ee:
b4:f2:f7:e4:0a:69:7f:c6:95:c6:81:8b:5f:56:c1:61:3e:13:
e4:cd:f5:cc:fd:c2:40:ac:06:7f:72:6b:40:01:1a:3f:1b:0f:
fd:76:dc:28:9a:78:21:a4:4f:d5:e7:c2:f0:8d:a0:fb:26:9d:
de:91:78:cb:21:ef:50:4a:ba:ca:35:70:bc:38:16:21:e4:26:
0f:e2:dd:05:82:26:53:6e:26:c3:78:93:6f:47:64:2e:c9:5d:
49:86:94:56:2e:f8:2c:34:ff:32:30:10:42:57:b6:c6:07:f7:
be:a7:99:91:f9:38:08:4d:ce:15:67:b7:9d:02:dd:e5:14:4c:
f9:c8:a0:10:7d:ac:b5:1c:b3:af:8d:72:c6:5b:df:dd:34:c6:
71:bb:ab:ea:f1:31:16:a4:41:40:01:78:10:82:4c:48:db:ee:
bf:23:9b:10:19:cc:0d:0f:7a:75:f1:46:0b:b3:87:6d:9e:5c:
5c:0c:3f:4b:df:80:7c:51:b8:3e:ff:bb:cf:10:35:e8:cd:f0:
e5:ca:d2:e1:b5:3e:35:50:2a:8f:0a:b2:32:66:b0:7a:95:4d:
d1:25:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:15 2026 by rpki-client