
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
File: kuYzl488XC0IYKzbDh3VEhAOie8.mft (raw, json)
Hash identifier: znjUGYREjOsChG/FDVplC9ejgxD2L1ZfaKeTfFafWds=
Subject key identifier: D3:1B:62:D1:F4:68:47:94:CF:D7:E1:4B:82:30:17:6F:8C:0A:A3:4F
Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
Certificate issuer: /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
Manifest number: 015D
Signing time: Sat 25 Apr 2026 04:38:01 +0000
Manifest this update: Sat 25 Apr 2026 04:38:00 +0000
Manifest next update: Sat 02 May 2026 04:38:00 +0000
Files and hashes: 1: kuYzl488XC0IYKzbDh3VEhAOie8.crl (hash: F5BVNGlRYAT8rmBY6An4S4RmfvLMkeWBBSCfPS1nwGg=)
2: F67388B8C8EE11F0B296D571C4F9AE02.roa (hash: Ln4i6mHL5UZIq22mGQVLVNPqUJhOiI44Lt1j7dBvqNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 02 May 2026 04:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A15FB, serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Validity
Not Before: Apr 25 04:38:00 2026 GMT
Not After : May 2 04:38:00 2026 GMT
Subject: CN=69ec4529-2bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:1d:72:35:77:0f:e8:1a:a0:b9:8e:25:59:
65:22:85:6d:0f:b3:48:61:29:c2:45:fb:10:b9:ae:
d2:d5:9b:30:75:cd:9e:0b:e0:fd:55:6a:93:3c:79:
bd:15:a8:b2:81:9d:d3:b3:4e:ce:fb:82:32:34:7c:
b2:5d:26:89:48:91:80:ce:85:dc:d2:0b:18:3f:67:
bb:74:31:23:a9:4c:5c:7c:32:ee:89:13:6c:e8:91:
6f:31:e8:19:f7:af:66:09:0a:b0:8a:39:66:cd:d1:
a5:58:54:de:9d:7b:49:6e:6f:cb:4b:a6:b0:0f:e8:
f0:67:2e:4e:51:3f:f3:f9:85:a8:f5:90:43:46:2f:
e0:69:43:28:ed:bb:dd:9c:23:28:4b:1e:0f:f9:2b:
fd:31:13:25:c3:20:54:5f:3d:e1:ed:2d:55:5d:b3:
e2:3f:b1:35:9e:e7:3a:2f:94:81:01:cc:55:2b:ad:
29:63:74:83:a8:3a:bc:6b:ee:31:5f:a5:aa:4b:9f:
e2:3e:88:43:9e:1c:6c:4c:49:22:d1:57:0c:13:e3:
90:c1:bb:bd:28:80:a9:7a:b4:93:26:07:4c:77:4c:
dd:13:8c:45:02:bc:97:92:fb:01:03:04:db:15:b2:
32:95:19:f1:c3:54:7d:c4:6d:61:de:f5:d6:89:54:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:62:D1:F4:68:47:94:CF:D7:E1:4B:82:30:17:6F:8C:0A:A3:4F
X509v3 Authority Key Identifier:
keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:45:70:ba:99:27:b0:9c:b0:fa:d1:9c:0c:32:ad:2c:bf:ca:
43:61:ff:80:a2:d4:de:25:99:58:f4:bf:6b:85:46:ac:66:92:
4f:9a:31:3a:ec:34:ca:a0:4c:20:17:ae:17:4b:0d:12:7f:b9:
fb:a2:9a:f2:29:c3:9c:6f:c0:e2:23:cf:a5:d3:6e:bf:27:83:
ba:76:45:23:98:0f:16:85:45:1b:40:f1:8d:f4:7c:5f:0a:68:
f7:49:c4:ad:5a:a6:34:d4:ab:6b:15:1d:66:05:21:00:8b:74:
b5:15:f6:ec:66:c2:22:97:13:8f:9b:68:9d:ff:12:fc:f1:25:
d2:ce:a5:cf:4c:b7:cf:20:3c:f1:16:06:05:bd:d5:c2:79:01:
41:c6:77:e1:e9:df:96:bb:be:01:70:f9:94:62:fb:3d:44:8a:
4f:29:37:9a:bb:1e:b7:96:87:52:90:ed:05:fe:04:1a:41:d8:
ec:01:34:20:8b:8b:20:58:f8:40:3c:27:81:8e:47:87:6d:de:
02:24:90:8f:1a:af:e2:2b:49:ff:55:6e:60:ad:f9:a9:22:53:
cd:bd:d7:7c:e8:3b:5f:49:f4:c0:37:29:87:27:79:02:40:4f:
5f:e9:ce:61:c0:0d:86:27:e6:65:7f:f1:e3:90:fe:35:bc:02:
3a:7c:f2:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE1RkIxMTAvBgNVBAUTKDkyRTYzMzk3OEYzQzVDMkQwODYwQUNEQjBFMURENTEy
MTAwRTg5RUYwHhcNMjYwNDI1MDQzODAwWhcNMjYwNTAyMDQzODAwWjAYMRYwFAYD
VQQDEw02OWVjNDUyOS0yYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm0wdcjV3D+gaoLmOJVllIoVtD7NIYSnCRfsQua7S1Zswdc2eC+D9VWqTPHm9
FaiygZ3Ts07O+4IyNHyyXSaJSJGAzoXc0gsYP2e7dDEjqUxcfDLuiRNs6JFvMegZ
969mCQqwijlmzdGlWFTenXtJbm/LS6awD+jwZy5OUT/z+YWo9ZBDRi/gaUMo7bvd
nCMoSx4P+Sv9MRMlwyBUXz3h7S1VXbPiP7E1nuc6L5SBAcxVK60pY3SDqDq8a+4x
X6WqS5/iPohDnhxsTEki0VcME+OQwbu9KICperSTJgdMd0zdE4xFAryXkvsBAwTb
FbIylRnxw1R9xG1h3vXWiVTQ/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMbYtH0
aEeUz9fhS4IwF2+MCqNPMB8GA1UdIwQYMBaAFJLmM5ePPFwtCGCs2w4d1RIQDonv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTVGQi9CRTg4QTcwQzJF
QzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdVl6bDQ4OFhDMElZS3piRGgzVkVoQU9p
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2t1WXpsNDg4WEMwSVlLemJEaDNWRWhBT2llOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTVGQi9CRTg4QTcwQzJFQzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdVl6bDQ4OFhD
MElZS3piRGgzVkVoQU9pZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh0VwupknsJyw+tGcDDKtLL/KQ2H/gKLU3iWZWPS/a4VGrGaST5oxOuw0yqBM
IBeuF0sNEn+5+6Ka8inDnG/A4iPPpdNuvyeDunZFI5gPFoVFG0DxjfR8Xwpo90nE
rVqmNNSraxUdZgUhAIt0tRX27GbCIpcTj5tonf8S/PEl0s6lz0y3zyA88RYGBb3V
wnkBQcZ34enflru+AXD5lGL7PUSKTyk3mrset5aHUpDtBf4EGkHY7AE0IIuLIFj4
QDwngY5Hh23eAiSQjxqv4itJ/1VuYK35qSJTzb3XfOg7X0n0wDcphyd5AkBPX+nO
YcANhifmZX/x45D+NbwCOnzyxg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 02:08:46 2026 by rpki-client