
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier: A7PVRmesSkzQXYv2Wu9KNTJIFqQhyytToF3ZOEzVzwo=
Subject key identifier: EF:B7:2F:3D:1C:E7:B1:97:E4:AE:A0:B3:8F:80:67:DE:25:8E:C5:11
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial: 0B39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number: 0B2E
Signing time: Thu 22 Oct 2026 19:21:38 +0000
Manifest this update: Thu 22 Oct 2026 19:21:37 +0000
Manifest next update: Thu 29 Oct 2026 19:21:37 +0000
Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: 5tzE6YRQB2DdhUYKzgViVfXOaZy/iZut3G0WbpNh12E=)
2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: +6MnWixCvzMt3rLSJSp2YvtRQcWH4ISzu9SV3GhK8Pw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 19:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Validity
Not Before: Oct 22 19:21:37 2026 GMT
Not After : Oct 29 19:21:37 2026 GMT
Subject: CN=6ada6241-6d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:cd:f0:ce:63:ab:e5:96:80:3a:ec:d7:65:
32:b8:9e:b0:e5:35:28:80:1e:c1:01:dc:35:05:16:
77:d5:54:f4:fc:ca:95:b9:ba:53:f5:7d:9b:96:98:
24:1a:8c:9f:98:73:ba:65:b9:ff:f0:5a:41:a2:36:
65:31:5a:92:c9:03:5e:de:eb:ad:f6:a5:3b:19:14:
48:07:e1:9c:61:fc:57:c9:a2:98:ab:5e:8a:28:bd:
33:c0:05:60:f2:a2:85:f0:b1:d3:85:e5:09:8b:e0:
dd:40:a4:dc:3b:c1:3e:d6:af:a0:9d:dd:96:7f:56:
49:22:e9:06:70:9d:53:8d:55:8b:7c:56:ec:17:f2:
e3:8b:e7:bb:c5:c6:2d:ad:75:69:67:21:08:50:72:
7b:94:98:35:05:e8:7a:88:57:3f:56:7a:db:4e:49:
c7:17:7f:70:fb:22:e6:83:f1:6c:1b:1c:4d:83:ca:
2d:5a:b2:06:8f:69:10:2f:7f:bc:9e:ab:a0:c7:18:
4a:ed:cf:72:99:f8:41:89:50:5b:80:49:99:c3:bc:
28:34:f0:e8:2f:cf:da:af:68:1e:00:18:d6:a0:c9:
ed:ca:4e:19:33:ba:40:19:0b:dc:ae:7c:9a:ec:f2:
35:c2:73:18:c9:bd:d9:00:2d:e2:ed:48:7b:10:01:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:2F:3D:1C:E7:B1:97:E4:AE:A0:B3:8F:80:67:DE:25:8E:C5:11
X509v3 Authority Key Identifier:
keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:64:f4:a3:fb:19:ab:30:d7:a3:28:6d:11:26:46:aa:cb:6f:
e1:d3:8c:87:38:e5:e1:a2:2c:98:6a:13:26:b5:05:e3:ed:73:
32:c7:04:bd:82:84:36:65:68:82:b3:1b:5d:25:ab:ce:8e:9c:
2d:64:60:ac:14:b8:ef:16:d2:cb:4d:95:33:60:95:d9:b0:35:
4d:de:a1:49:e8:82:f7:4a:10:ce:3d:b2:5e:b6:2d:c5:7b:8f:
dd:c8:07:f1:32:2d:de:66:8d:37:6b:07:9e:53:ce:b8:df:0d:
08:b1:ef:92:3f:b0:02:04:68:1f:23:66:91:3e:55:cb:24:be:
b1:13:19:cb:1f:0f:03:03:c2:e7:45:a2:0f:34:82:57:b7:80:
81:1a:96:0f:a9:7b:5e:2b:58:68:d1:e9:98:53:39:51:03:c9:
41:8b:89:00:ea:f3:61:47:a9:0b:a1:c7:8d:b5:e5:e4:46:9b:
98:67:9e:ba:96:ae:62:d9:f0:24:4b:18:2d:86:03:53:87:91:
62:77:48:b8:2a:62:bc:b8:99:6b:c6:91:c5:96:9c:58:ea:23:
7e:f9:0a:d7:df:2e:f0:3d:0b:08:2a:56:4b:04:fd:0f:a0:05:
6d:ff:1d:22:5d:95:cc:43:9a:32:b0:27:dd:bf:67:a1:6d:f0:
96:d0:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:49:07 2026 by rpki-client