
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
File: Kxn0VfTTBpR34BlB90IUn7kADYE.mft (raw, json)
Hash identifier: 416pQv0NOCoj7jsz9NmxU12wIXSzHTdcvNcmIMaTBQg=
Subject key identifier: 82:ED:F5:E6:46:3D:80:47:E0:F3:90:C7:D7:71:C4:37:40:E3:5E:69
Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81
Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
Manifest number: 53
Signing time: Fri 04 Sep 2026 15:36:52 +0000
Manifest this update: Fri 04 Sep 2026 15:36:51 +0000
Manifest next update: Fri 11 Sep 2026 15:36:51 +0000
Files and hashes: 1: Kxn0VfTTBpR34BlB90IUn7kADYE.crl (hash: HGrdBTC6zkXbwnMhzMtfft8pIGj28pbW8oEC9Nxukd0=)
2: 8556D60A479011F187A637ED9C833773.roa (hash: 01eu5VaZWMdQ7aw7Y4d0DV21vl4g9m72tYmYYG5IqbU=)
3: 41E1B62C439B11F1B25C79F98F833773.roa (hash: 36yi6gPTHzcQX8APfBzmKqBXbIwiIVFpcf4UMN/XwEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl
rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
Validity
Not Before: Sep 4 15:36:51 2026 GMT
Not After : Sep 11 15:36:51 2026 GMT
Subject: CN=6a9ae593-809f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:f0:8e:57:73:cb:ff:f5:78:b4:4e:0e:a6:
17:62:4e:cb:b1:9a:be:3a:c1:53:68:f4:7d:38:91:
c2:44:91:d8:86:31:83:08:71:55:7f:10:5a:1c:8d:
11:eb:89:40:80:32:72:13:3a:89:0b:a7:7d:25:35:
bf:29:22:15:13:3a:bf:fe:4e:56:7d:1f:1b:75:28:
65:80:c7:e5:46:b6:e7:7a:10:12:5f:23:b1:a9:bd:
4e:ea:48:d6:c8:c2:c7:f2:3b:fa:a9:e4:6a:5a:02:
f5:46:2e:78:9a:35:fc:cb:47:2a:aa:24:cc:db:f1:
1e:b0:eb:0b:eb:da:0f:1f:77:60:c7:48:b8:72:30:
2f:91:6c:fe:53:2e:c1:f0:36:b6:44:bc:32:2d:75:
68:11:c4:82:d2:eb:ad:23:3f:de:67:c5:2b:26:48:
56:3c:0f:22:69:e3:d2:bb:74:74:47:fe:85:21:c9:
0a:aa:1c:35:dd:c0:2a:3a:65:a6:60:89:1b:bc:4e:
23:6e:86:9c:78:c0:5b:fe:73:0d:bc:d7:29:bb:2b:
41:30:d7:c5:4d:47:e3:e5:64:bb:41:2a:c6:06:77:
f8:7e:4c:49:8f:91:c8:b5:5d:80:97:8f:70:ff:95:
53:c4:57:7a:a8:7a:c9:da:ef:51:69:ba:58:dd:63:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:F5:E6:46:3D:80:47:E0:F3:90:C7:D7:71:C4:37:40:E3:5E:69
X509v3 Authority Key Identifier:
keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:38:86:ac:10:7f:03:4a:4e:75:f3:46:e6:ad:e9:6f:e0:7d:
59:30:43:c1:72:41:fd:a1:14:f6:6c:48:c8:48:73:16:75:37:
58:c7:da:a1:d8:d6:98:40:bb:72:46:79:f5:1b:c4:76:a6:fa:
d3:6e:7b:6f:ad:25:5a:b5:b4:74:68:19:86:ee:d7:38:d0:ae:
22:e2:5d:5b:87:48:d0:42:33:03:c4:71:50:3a:c3:1a:33:44:
b1:b7:ed:80:b9:60:76:a8:37:b2:7e:af:ea:c8:16:f2:06:93:
86:93:33:17:51:3a:0f:9e:b7:d3:55:c5:43:6d:a5:71:ba:ae:
36:2f:68:9d:2b:42:80:42:10:66:f0:52:97:c8:0a:05:62:61:
ca:b3:ae:0f:f7:ec:b8:52:5a:b8:b0:81:74:12:35:ca:9f:02:
84:40:65:56:14:d7:e1:fc:d3:58:ff:fc:6e:d4:97:56:a0:f3:
16:2a:a6:c4:a8:86:13:68:d7:65:a4:5e:1a:6c:06:fd:ea:6d:
aa:dd:09:fd:d5:fd:4c:85:c1:26:43:0a:7c:b3:94:20:6f:81:
36:a6:1d:54:20:98:28:62:d5:c6:fb:b3:5f:27:16:9d:ff:35:
9c:9b:84:48:ca:e3:e3:6e:97:44:fb:9c:a5:9a:b5:ed:da:3d:
f4:03:f2:35
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NjIyRjExMC8GA1UEBRMoMkIxOUY0NTVGNEQzMDY5NDc3RTAxOTQxRjc0MjE0OUZC
OTAwMEQ4MTAeFw0yNjA5MDQxNTM2NTFaFw0yNjA5MTExNTM2NTFaMBgxFjAUBgNV
BAMTDTZhOWFlNTkzLTgwOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcJ/COV3PL//V4tE4OphdiTsuxmr46wVNo9H04kcJEkdiGMYMIcVV/EFocjRHr
iUCAMnITOokLp30lNb8pIhUTOr/+TlZ9Hxt1KGWAx+VGtud6EBJfI7GpvU7qSNbI
wsfyO/qp5GpaAvVGLniaNfzLRyqqJMzb8R6w6wvr2g8fd2DHSLhyMC+RbP5TLsHw
NrZEvDItdWgRxILS660jP95nxSsmSFY8DyJp49K7dHRH/oUhyQqqHDXdwCo6ZaZg
iRu8TiNuhpx4wFv+cw281ym7K0Ew18VNR+PlZLtBKsYGd/h+TEmPkci1XYCXj3D/
lVPEV3qoesna71FpuljdYzG5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgu315kY9
gEfg85DH13HEN0DjXmkwHwYDVR0jBBgwFoAUKxn0VfTTBpR34BlB90IUn7kADYEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2MjJGLzJDQUU2MjZDM0U2
MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBSMzRCbEI5MElVbjdrQURZ
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvS3huMFZmVFRCcFIzNEJsQjkwSVVuN2tBRFlFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2
MjJGLzJDQUU2MjZDM0U2MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBS
MzRCbEI5MElVbjdrQURZRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDGOIasEH8DSk5180bmrelv4H1ZMEPBckH9oRT2bEjISHMWdTdYx9qh2NaYQLty
Rnn1G8R2pvrTbntvrSVatbR0aBmG7tc40K4i4l1bh0jQQjMDxHFQOsMaM0Sxt+2A
uWB2qDeyfq/qyBbyBpOGkzMXUToPnrfTVcVDbaVxuq42L2idK0KAQhBm8FKXyAoF
YmHKs64P9+y4Ulq4sIF0EjXKnwKEQGVWFNfh/NNY//xu1JdWoPMWKqbEqIYTaNdl
pF4abAb96m2q3Qn91f1MhcEmQwp8s5Qgb4E2ph1UIJgoYtXG+7NfJxad/zWcm4RI
yuPjbpdE+5ylmrXt2j30A/I1
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:37:52 2026 by rpki-client