
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier: zsMjgBTb504zhctRuW5ocG4ViQ3pshKeZwA+GSnQITo=
Subject key identifier: 3C:54:57:D1:5D:C7:38:18:A6:CF:C1:DD:EC:A1:7B:27:FB:2E:C9:19
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 03BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number: 03B1
Signing time: Thu 21 May 2026 00:46:25 +0000
Manifest this update: Thu 21 May 2026 00:46:24 +0000
Manifest next update: Thu 28 May 2026 00:46:24 +0000
Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: RDnDmal/o6pnG89e1XpG8hWdPMTzZ5s3HGC0cJsJ7z0=)
2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: noY77zuBNX8xTUWwrf35ANzxZz07dvvKvq+tI08iw0s=)
3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Validity
Not Before: May 21 00:46:24 2026 GMT
Not After : May 28 00:46:24 2026 GMT
Subject: CN=6a0e55e1-27fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:6f:a0:ff:73:d1:51:c1:15:a4:ee:f3:1b:
ea:0f:35:db:b0:59:8b:ee:8f:88:39:c3:f5:c9:26:
09:22:d2:07:5a:65:df:0b:35:93:c4:b8:de:69:65:
6a:fd:d9:3f:74:eb:13:d3:db:17:6a:b3:17:87:82:
93:15:e0:e3:24:c0:f5:40:19:dc:02:14:bd:d3:eb:
37:95:d3:2a:3a:e5:77:18:02:23:89:a4:96:b8:25:
87:5b:85:f7:5b:e3:a9:37:98:69:f3:d9:32:6e:d7:
94:15:b2:af:88:a6:22:1d:75:90:e2:2b:a6:62:07:
ff:f6:70:2b:c0:27:ab:6b:c4:ab:f1:33:05:31:e5:
d2:23:67:07:ea:0d:ef:fd:88:9a:06:b1:63:8c:ad:
d4:ef:ad:f0:8a:52:8a:04:b2:fd:16:dc:b8:4a:2f:
70:76:10:bb:66:c0:0c:82:a4:c7:0a:2b:eb:66:c9:
f4:65:df:fd:d8:37:86:22:6f:b5:f9:ef:3f:a5:24:
92:40:19:01:2c:c5:03:cc:88:4d:6d:10:a1:04:80:
6b:74:1d:93:da:80:43:71:0b:31:6a:1e:25:d4:1b:
d5:07:57:32:c5:11:88:af:16:14:6c:24:70:0e:26:
ae:a9:d5:6c:01:07:63:15:1a:21:c5:e4:31:84:d2:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:57:D1:5D:C7:38:18:A6:CF:C1:DD:EC:A1:7B:27:FB:2E:C9:19
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:cc:66:54:cd:b1:32:80:ff:73:3d:76:2c:96:4a:ae:2a:32:
00:fd:11:11:8a:2d:e8:d4:f3:da:73:10:bb:e6:cb:e7:8e:b0:
0c:8a:f9:08:d1:f7:da:64:bd:be:96:71:b7:1d:6e:4f:b2:35:
fa:73:b6:88:2b:1f:c1:ed:e3:e3:b8:44:c2:37:f1:a4:dc:20:
f5:4d:56:88:d5:7b:1c:41:cc:10:0c:44:7e:bf:33:7b:67:b2:
65:bb:6e:0e:30:91:7e:96:84:be:aa:bb:22:68:8b:34:a4:3c:
91:4d:df:32:89:4d:cc:b3:63:79:e7:62:ad:00:2d:be:1f:49:
41:d1:57:b1:a6:2e:55:21:96:c0:52:9d:64:48:14:a6:ac:f8:
26:a4:92:96:11:ab:84:eb:ef:d5:eb:37:9c:21:02:56:71:7a:
6e:df:30:e0:df:0c:6f:d4:2d:ba:ef:72:72:d4:f5:66:22:0a:
b5:fe:67:69:ff:9e:b3:2c:26:91:7e:e4:f1:64:91:9e:8c:12:
75:4d:7e:63:83:77:2b:d8:7d:f0:61:38:a6:36:27:0e:e0:c7:
9c:f4:2e:53:ab:21:fe:ae:36:31:af:af:0c:cd:2f:e9:99:7d:
1a:a9:2b:0b:20:ac:10:1c:d4:b5:62:65:79:8c:d0:18:e4:f9:
2e:5a:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:44 2026 by rpki-client