
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json)
Hash identifier: SW+w1GNfjQwEcxGA7eMFtNz72mCS5lJDkVKkyLetuFI=
Subject key identifier: 2A:C8:EC:52:A8:24:0B:59:96:14:F6:E3:02:1F:3F:39:4C:37:AD:7E
Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
Manifest number: 01E9
Signing time: Wed 19 Aug 2026 03:56:30 +0000
Manifest this update: Wed 19 Aug 2026 03:56:30 +0000
Manifest next update: Wed 26 Aug 2026 03:56:30 +0000
Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: 7YMGxt8f91751ayvOBuGQxY4gpBn+TbeQTB/lwf3LRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Validity
Not Before: Aug 19 03:56:30 2026 GMT
Not After : Aug 26 03:56:30 2026 GMT
Subject: CN=6a85296e-f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:4a:6c:d2:2b:1f:f2:53:a3:67:9f:a5:33:
74:df:8b:f4:af:c3:b2:c9:a0:e6:99:a8:98:f6:ff:
24:ea:65:96:67:e7:a5:c5:c5:61:e2:21:87:d0:33:
6e:01:07:26:81:38:9b:5c:fd:63:c1:40:69:c7:1f:
4b:69:1e:9e:41:ae:15:81:e5:4b:7e:2f:4b:aa:c2:
7c:08:44:9b:f2:9c:39:51:aa:6e:76:53:37:08:57:
26:c9:95:9e:8b:35:af:08:cd:ae:02:ac:8f:2f:44:
3b:57:41:71:cb:64:2d:2a:52:ad:32:6e:2c:96:d7:
51:bd:29:97:c3:5b:55:1f:e0:74:66:d8:39:ec:fa:
4e:e5:c7:f6:90:67:7f:72:de:04:ae:c6:6e:43:36:
b4:d7:d9:3b:d0:ea:d5:a7:31:d4:00:4b:75:d4:ad:
f5:53:55:22:92:43:b9:87:4b:74:dc:61:1d:c2:fa:
64:1d:a0:02:30:65:ac:cf:95:9a:62:08:85:c8:35:
6f:1a:ec:de:80:c3:62:09:d8:d0:24:fc:65:fe:a2:
b6:3a:97:41:bf:01:d8:7d:35:eb:ff:24:ad:c8:f1:
3b:64:e4:43:6c:bc:e8:08:57:8d:92:4e:39:09:f8:
a0:b3:dc:d6:1a:10:0d:2d:70:73:d8:1c:9b:c9:8a:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:EC:52:A8:24:0B:59:96:14:F6:E3:02:1F:3F:39:4C:37:AD:7E
X509v3 Authority Key Identifier:
keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e4:e0:3a:95:2b:5f:e1:f7:e9:3e:f9:30:af:8a:63:b7:7c:
53:6c:23:95:e9:07:ef:54:e8:04:79:15:ac:fc:d3:d0:e0:f3:
68:ec:8b:4b:90:ad:18:a6:23:29:0b:49:10:49:9c:46:fa:40:
43:3e:80:7f:6f:f1:25:8a:dc:5d:5f:aa:07:99:94:5b:85:fb:
82:9c:5d:a5:5e:58:33:ae:77:a6:96:2e:cd:60:06:f0:73:db:
f4:de:48:e1:c5:d0:a6:51:5f:d6:17:23:b3:0c:04:24:86:07:
79:17:ea:c3:0b:b3:f3:dc:da:29:18:12:c5:26:15:84:e5:fe:
ad:83:9e:62:48:af:dd:ec:85:13:4d:68:7f:64:81:21:b2:fe:
6e:1d:28:aa:36:bd:21:fd:72:7f:19:73:c3:76:28:65:dd:ec:
01:98:46:50:23:6f:9c:62:67:60:4f:a4:f3:31:a7:cf:fc:08:
98:ea:8c:51:57:52:42:95:7d:1c:be:e4:8b:f9:a3:4f:07:41:
92:71:0a:b7:7e:7c:1e:ee:03:8f:79:42:68:e8:50:08:f2:c8:
cd:c2:8b:73:9b:45:95:d7:f4:4b:52:46:de:b2:db:92:8a:f2:
dd:85:a4:5d:19:99:0b:ad:ac:dc:e1:8b:a3:79:53:e2:8f:d0:
21:d7:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:21 2026 by rpki-client