
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
File: Kxn0VfTTBpR34BlB90IUn7kADYE.mft (raw, json)
Hash identifier: y5xrl+liHlgyigowkELs2PGcoV91ZlRr3ME/q6OwaTQ=
Subject key identifier: 25:8B:EF:B3:84:5B:68:31:4D:5B:BA:85:CA:10:B0:34:8B:07:71:1B
Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81
Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
Manifest number: 6E
Signing time: Sat 24 Oct 2026 15:36:56 +0000
Manifest this update: Sat 24 Oct 2026 15:36:56 +0000
Manifest next update: Sat 31 Oct 2026 15:36:56 +0000
Files and hashes: 1: Kxn0VfTTBpR34BlB90IUn7kADYE.crl (hash: EXgrvaIs6ZosQFeXePs0A/wM08I000vdK4wj76tqenc=)
2: 41E1B62C439B11F1B25C79F98F833773.roa (hash: 36yi6gPTHzcQX8APfBzmKqBXbIwiIVFpcf4UMN/XwEA=)
3: 8556D60A479011F187A637ED9C833773.roa (hash: grslGX/L7YYdiHw2ISG2NCkAz+QfsF2GNEwK6BVY9z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl
rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 15:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
Validity
Not Before: Oct 24 15:36:56 2026 GMT
Not After : Oct 31 15:36:56 2026 GMT
Subject: CN=6adcd098-2d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:43:ca:4a:f5:8f:5f:c8:dd:10:2a:ba:fa:
8e:4d:f4:65:ca:78:63:ac:9f:5f:89:dd:e8:1e:3b:
6d:83:72:5d:b3:3d:c4:a8:3f:86:a8:48:9a:e8:e9:
e5:81:35:bd:86:29:25:91:1d:1b:f8:97:3e:fd:82:
1d:23:1b:7e:3f:94:3c:0b:42:ed:a6:24:c4:e7:73:
aa:53:fa:5d:6e:87:bc:7e:cb:3e:2a:75:e5:05:cc:
3c:da:f0:4c:c8:25:e8:23:de:69:d5:bd:a8:55:e8:
8d:d4:12:a2:7a:f6:1b:35:b0:78:98:e3:24:58:38:
4b:fb:b7:5d:0f:1c:8e:41:e8:e4:85:47:90:5f:50:
3e:06:e9:29:35:db:3a:e5:68:ae:13:f8:29:83:28:
0c:4c:a0:84:0d:71:71:9c:17:10:59:65:5d:bc:fa:
fe:32:3a:8e:d1:d1:14:3d:57:db:1d:76:d3:64:69:
fb:e0:13:01:aa:60:72:35:30:df:be:43:2e:35:50:
e0:aa:01:b6:20:b2:91:60:9b:e2:1b:76:c2:13:0f:
29:b0:16:23:86:86:0e:60:0e:12:df:ab:be:c3:61:
6d:76:bc:3a:4d:ed:3b:33:e3:35:ee:00:c9:77:49:
c9:35:aa:37:1e:99:b6:ef:e7:c4:65:07:eb:51:2b:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:EF:B3:84:5B:68:31:4D:5B:BA:85:CA:10:B0:34:8B:07:71:1B
X509v3 Authority Key Identifier:
keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9f:c4:3a:3d:c9:1a:8a:7c:37:c5:d1:a8:06:2f:e1:f8:59:
aa:b6:10:07:69:19:5b:37:03:34:95:85:da:48:ad:dd:bf:a1:
b8:3b:7c:cd:24:69:25:0e:5e:39:88:53:5f:3a:de:1f:ce:68:
08:cc:2e:9c:4f:20:d2:7c:88:ae:b5:7f:96:1d:51:35:d2:d4:
8a:c3:5d:a3:9f:05:f9:74:1a:9a:2a:04:7d:f6:10:bb:cb:84:
b3:60:7c:6a:19:6c:e7:76:46:b4:78:c6:fb:e8:39:ad:ca:57:
5c:c6:ac:56:28:34:d2:fe:96:28:51:7a:f9:ac:7b:de:df:d2:
5a:f3:a3:1a:2e:1e:2a:7f:0b:11:9c:f4:35:ef:48:af:a7:95:
60:50:20:ad:bf:6c:d8:16:c1:6d:1f:07:43:31:b1:33:63:d7:
ad:17:9e:ae:94:67:52:7a:6e:ea:07:0d:45:f2:a9:7d:f8:ce:
6f:c7:a6:f7:06:00:67:01:45:99:0c:a3:b3:ad:bb:72:b1:97:
24:4b:c7:e1:91:b9:98:ec:fc:cd:7a:bc:81:d5:81:55:4c:67:
23:f9:1a:16:b8:82:8a:9c:a2:a4:ec:99:ca:32:ec:41:39:3d:
27:7e:54:73:86:69:63:3e:4c:df:e7:34:32:e0:95:a9:d9:b3:
73:db:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:56:56 2026 by rpki-client