
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier: kD9vRXYugAmnQCudZKyrI8nUJNNowSA4xQk6/fQgMzY=
Subject key identifier: 90:26:04:70:00:F1:2C:8E:A5:01:F2:A4:B6:F5:8F:F2:E5:1B:F2:EF
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 0407
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number: 03FC
Signing time: Tue 13 Oct 2026 00:34:27 +0000
Manifest this update: Tue 13 Oct 2026 00:34:27 +0000
Manifest next update: Tue 20 Oct 2026 00:34:27 +0000
Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: wOH1Hn5jmtQqrP2xPfnIYNNLYw7CMOTbjPu6RuTV3dM=)
2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: vmFsKgonT1sP7XlgpbWPmdbrw2z/dTAl1pk0bSYlcE0=)
3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 00:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031 (0x407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Validity
Not Before: Oct 13 00:34:27 2026 GMT
Not After : Oct 20 00:34:27 2026 GMT
Subject: CN=6acd7c93-72c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:68:19:17:7a:8c:c6:19:5f:9e:4a:ad:46:
62:6c:4f:1d:71:c2:42:31:c2:db:d1:39:55:7d:dc:
71:20:45:e6:b8:97:b6:6b:9d:9b:81:3e:2c:ff:8a:
f8:b7:5d:b7:fe:2a:51:33:80:a5:66:c0:2a:a1:3b:
88:09:9f:30:93:87:a2:90:43:81:92:a1:c4:b5:5f:
d6:ee:45:fa:54:12:7c:4b:53:13:7f:49:a3:cf:f3:
89:87:37:e0:e4:27:ee:99:7a:98:8b:cd:2f:4e:81:
1f:d4:65:2b:78:ce:17:ff:3d:90:19:47:d6:65:f1:
54:46:66:70:fd:60:4d:29:30:08:f3:07:f4:0f:af:
67:7b:e8:b1:60:da:e5:ec:86:71:29:bd:ba:4e:68:
26:7f:38:98:d6:e7:02:b7:97:b3:56:ee:f1:89:38:
8b:1e:25:32:24:e1:f5:96:83:07:9b:26:59:86:27:
24:25:84:ba:1d:e9:3d:b7:04:1b:b1:13:96:16:a9:
c8:ef:cd:a3:a5:43:a4:b5:72:e7:0c:ec:1d:50:d7:
67:73:02:5c:f8:b5:94:c6:fe:04:b4:21:8d:3f:bc:
06:9b:62:bc:f8:21:49:7d:c7:a5:58:96:0f:96:36:
18:08:8c:20:4a:e9:2d:20:cf:b1:73:f4:5d:78:2c:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:26:04:70:00:F1:2C:8E:A5:01:F2:A4:B6:F5:8F:F2:E5:1B:F2:EF
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:89:b4:c6:61:3b:4a:5b:ca:20:7e:45:85:a9:1c:e3:ec:08:
0d:cc:f7:e6:e4:ad:cf:f1:7b:17:c7:de:2d:f6:b0:dc:b5:dd:
12:34:a8:40:b3:84:d5:ec:e0:df:f1:21:da:f3:f0:98:01:40:
ac:f5:c6:3e:cb:db:b7:b5:54:2f:0d:7e:d2:21:02:a2:21:d4:
f0:bc:43:0f:4e:8f:33:53:f2:1a:f3:72:41:77:e2:5f:5d:b3:
c1:c8:36:67:e0:9a:fb:1d:78:04:c2:32:f5:6e:42:94:73:60:
ba:fc:0b:e3:cd:3d:f5:71:3e:1e:9c:5f:ee:97:8f:51:88:cf:
77:d0:41:4f:91:38:a6:72:00:38:52:8d:e1:9d:af:c6:1a:58:
0c:a9:9f:b2:e7:f4:bc:c2:2a:8c:2a:8f:8b:fe:d8:7c:40:18:
66:c8:d1:55:d2:ef:b3:2c:b5:92:fa:93:03:d3:42:ef:e5:41:
7d:db:d0:fc:51:e1:be:3f:09:f2:2c:35:08:8d:5b:7e:42:d8:
0d:a5:52:b5:0f:4c:c9:b6:23:aa:e6:11:ea:f8:6e:d1:75:47:
ef:33:b1:cd:b5:de:90:31:3b:25:ae:fe:f2:d2:bb:b8:66:01:
01:e3:cc:82:64:2f:81:5f:d7:c5:b8:c5:eb:e5:d3:e6:65:69:
8c:fe:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:12:31 2026 by rpki-client