
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
File: kuYzl488XC0IYKzbDh3VEhAOie8.mft (raw, json)
Hash identifier: +my5O6p7j/Soj3aphOziELKbztMsF1lHvMiFwAZUL9w=
Subject key identifier: 98:07:E7:1C:2F:19:77:FA:F8:6A:94:68:0B:07:87:71:89:55:00:77
Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
Certificate issuer: /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
Manifest number: 01BC
Signing time: Tue 27 Oct 2026 04:08:27 +0000
Manifest this update: Tue 27 Oct 2026 04:08:26 +0000
Manifest next update: Tue 03 Nov 2026 04:08:26 +0000
Files and hashes: 1: kuYzl488XC0IYKzbDh3VEhAOie8.crl (hash: Y8JKPZiiQ7CYI4CFGhDg+YZ2EEw++HyEv5rPw2Poa7g=)
2: F67388B8C8EE11F0B296D571C4F9AE02.roa (hash: OClSWqz82WoSAPm5/jbmXMUXfN5PJ2BTJfPk4mm6oYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 04:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A15FB, serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Validity
Not Before: Oct 27 04:08:26 2026 GMT
Not After : Nov 3 04:08:26 2026 GMT
Subject: CN=6ae023bb-3a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:23:c1:74:6a:4f:cf:58:88:43:47:fa:67:
d7:30:9d:08:54:e6:38:94:0b:14:6a:e6:fa:b0:04:
4c:3b:29:f4:5d:3c:94:6b:d3:e1:82:71:41:98:ba:
ed:40:65:0b:1b:80:c2:cc:af:d5:8a:31:10:a5:67:
b0:14:86:56:ed:92:eb:ac:9d:e5:8b:dc:8e:93:6d:
de:76:ba:97:32:c2:f6:9a:bf:1d:03:77:ea:c6:0d:
f7:30:1f:73:f0:26:cd:6f:c9:81:bb:a8:68:ce:8b:
cc:24:ee:c0:67:da:70:53:2a:3a:c8:58:cd:a4:dc:
6b:c2:0b:92:69:54:e1:51:db:d5:c7:13:9d:90:7d:
ec:c5:db:3d:28:8d:22:57:78:0a:6c:26:d5:15:56:
c7:e6:6e:d1:d3:97:22:6a:28:ca:3b:25:c4:f7:9a:
36:fd:f6:81:34:19:b0:1c:82:26:94:98:ae:22:74:
bd:99:6b:01:77:97:f6:b3:4e:38:fc:28:2e:b2:a3:
30:03:22:45:51:ca:8f:25:9d:d7:09:6b:c6:25:3e:
9d:51:ab:52:f0:fc:46:b1:72:0e:81:8a:ce:73:f6:
7f:55:b7:48:2c:f8:6a:1d:75:88:4d:24:01:9a:ec:
92:14:8d:0d:09:c6:17:55:05:f4:2b:64:a8:a5:b2:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:E7:1C:2F:19:77:FA:F8:6A:94:68:0B:07:87:71:89:55:00:77
X509v3 Authority Key Identifier:
keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:f9:b3:49:be:6a:96:3b:b2:9b:8f:36:ba:8b:dd:fa:17:
11:3c:7f:29:2b:13:ab:4c:d0:9d:00:dd:72:53:48:1a:c5:5b:
9a:73:55:ec:bb:19:44:4a:e6:0c:95:83:c1:7c:46:dc:6e:4d:
e9:1d:76:66:93:28:e6:ba:3f:85:21:85:b6:ca:c4:20:a5:85:
ce:50:48:8a:ef:ce:07:6a:de:f2:40:79:50:85:30:66:3f:e8:
3a:2b:08:da:58:ac:4b:fd:08:ad:0a:82:2d:d9:c0:f4:e9:8f:
d4:94:f5:43:94:53:f3:6e:9a:8a:39:89:f2:c6:c1:25:43:a8:
cd:58:00:28:20:17:06:29:86:d8:1a:48:cb:b4:de:79:64:49:
5b:ec:a3:b2:ca:23:2b:71:9c:59:a2:fc:97:9d:59:20:be:df:
cd:30:d6:9b:da:e1:de:30:08:11:68:d7:44:d1:3f:35:6f:d9:
d6:b7:82:1e:66:5e:1e:01:d2:e0:91:d0:1c:74:82:66:3e:42:
27:82:87:05:f9:43:c0:91:67:5e:c0:1f:03:86:f2:54:02:d2:
d2:0b:2a:95:4c:50:8a:eb:dd:8b:30:db:66:10:59:ac:01:08:
89:29:aa:c6:f9:da:77:e2:aa:da:93:61:27:ab:d1:98:62:46:
cb:9d:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:07:02 2026 by rpki-client