
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json)
Hash identifier: P1XKHxeJ43aZK7hpKLDP4SRbsQhmXKDhh8uAUxQDV/A=
Subject key identifier: E8:2F:03:7C:59:3A:BB:9D:87:26:54:CE:68:6B:9D:E2:69:D2:22:16
Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Certificate serial: 065B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
Manifest number: 065B
Signing time: Sun 18 Oct 2026 14:18:23 +0000
Manifest this update: Sun 18 Oct 2026 14:18:22 +0000
Manifest next update: Sun 25 Oct 2026 14:18:22 +0000
Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: zTQL5uS7wzFjWxbFP9fHHg56b5B6VZjuAmaLFWoCwMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 14:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Validity
Not Before: Oct 18 14:18:22 2026 GMT
Not After : Oct 25 14:18:22 2026 GMT
Subject: CN=6ad4d52e-85b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:d9:ea:04:fa:0a:e9:14:c8:0f:a1:3e:57:
1e:b1:e3:12:8d:ac:75:b0:61:5a:ac:71:20:14:ec:
7c:0d:50:f6:5e:26:65:c0:a4:22:63:69:06:99:82:
dd:1b:de:98:1b:b2:38:58:a2:9b:de:9b:6f:80:7f:
80:5c:8f:8b:cc:82:55:1b:5b:76:b4:d5:53:cc:f6:
9c:b0:16:5f:3b:b1:d5:2d:40:5f:ed:8c:17:0a:a4:
23:e6:cc:09:45:6b:5c:fc:72:98:30:77:03:cb:82:
ca:52:23:66:12:29:26:61:fd:97:a5:be:0a:7c:68:
5c:43:11:fb:79:37:4d:b8:a4:61:1f:9a:7c:26:6a:
05:c6:a6:85:8a:3e:8e:3a:5c:5a:8e:13:2d:47:b7:
2a:62:52:5b:a5:c4:71:17:6b:a3:9b:2d:24:0c:4e:
6a:e5:8e:7d:bf:36:25:4a:1b:f9:11:a4:21:be:27:
c9:54:0f:32:e2:46:f2:a0:b5:f2:b8:24:b4:3d:d5:
c5:32:2f:cc:73:79:8c:8a:61:53:f4:2b:ed:4f:e0:
d2:5c:61:5c:aa:03:44:e3:53:8c:e0:51:d3:02:37:
98:ec:f6:ab:7f:81:a2:05:a6:c1:2a:d1:c9:8c:f5:
93:b4:d1:f3:48:26:87:e0:08:4c:82:23:da:ba:16:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2F:03:7C:59:3A:BB:9D:87:26:54:CE:68:6B:9D:E2:69:D2:22:16
X509v3 Authority Key Identifier:
keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:9b:0b:2c:6c:63:ea:ea:b8:d6:3f:d8:76:05:ab:a0:28:
62:11:f0:37:54:98:22:66:34:a1:fd:99:61:9e:f8:f0:12:53:
80:ca:f7:9d:37:09:bb:d0:b2:97:79:37:2b:9d:0d:01:ad:f5:
7c:83:52:d1:f3:1d:62:8a:b8:a8:22:a5:90:1f:f0:e9:e6:6f:
4b:a2:07:88:bc:1c:2f:ea:e1:39:d2:10:c7:96:d6:3b:66:b0:
cc:0d:af:4f:e0:7d:ac:88:78:4d:31:d8:d1:b9:5c:89:88:a0:
91:c5:2f:b4:ae:56:77:e8:6d:fb:44:51:eb:8d:c5:6a:f4:d2:
7d:89:ce:3a:58:56:5f:37:b0:72:d2:d8:ff:67:ef:aa:bb:f6:
93:6d:50:b1:08:ef:6a:97:1c:77:5e:b6:33:68:1c:78:78:80:
cb:a6:14:54:81:40:98:a6:25:0d:85:b1:3e:15:4d:ac:b5:9a:
42:25:25:0a:0a:7c:06:8b:b9:0b:a6:1c:55:24:72:f4:7d:16:
99:0b:40:a3:ef:52:b2:ac:2a:1b:35:f4:3c:83:46:31:71:9c:
d3:40:3a:02:cd:8d:ac:f1:cf:68:16:74:ef:76:84:f6:aa:3d:
f2:96:c8:69:0f:e3:c3:bc:1c:3f:d1:2b:bf:8a:b6:d2:77:c7:
e7:f9:ca:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy
OTFENDNCQzEwHhcNMjYxMDE4MTQxODIyWhcNMjYxMDI1MTQxODIyWjAYMRYwFAYD
VQQDEw02YWQ0ZDUyZS04NWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztDZ6gT6CukUyA+hPlceseMSjax1sGFarHEgFOx8DVD2XiZlwKQiY2kGmYLd
G96YG7I4WKKb3ptvgH+AXI+LzIJVG1t2tNVTzPacsBZfO7HVLUBf7YwXCqQj5swJ
RWtc/HKYMHcDy4LKUiNmEikmYf2Xpb4KfGhcQxH7eTdNuKRhH5p8JmoFxqaFij6O
OlxajhMtR7cqYlJbpcRxF2ujmy0kDE5q5Y59vzYlShv5EaQhvifJVA8y4kbyoLXy
uCS0PdXFMi/Mc3mMimFT9CvtT+DSXGFcqgNE41OM4FHTAjeY7Parf4GiBabBKtHJ
jPWTtNHzSCaH4AhMgiPauhZDfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOgvA3xZ
OrudhyZUzmhrneJp0iIWMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz
RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy
eEFTZVp6d29JZjBwSFVPOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEZibCyxsY+rquNY/2HYFq6AoYhHwN1SYImY0of2ZYZ748BJTgMr3nTcJu9Cy
l3k3K50NAa31fINS0fMdYoq4qCKlkB/w6eZvS6IHiLwcL+rhOdIQx5bWO2awzA2v
T+B9rIh4TTHY0blciYigkcUvtK5Wd+ht+0RR643FavTSfYnOOlhWXzewctLY/2fv
qrv2k21QsQjvapccd162M2gceHiAy6YUVIFAmKYlDYWxPhVNrLWaQiUlCgp8Bou5
C6YcVSRy9H0WmQtAo+9SsqwqGzX0PINGMXGc00A6As2NrPHPaBZ073aE9qo98pbI
aQ/jw7wcP9Erv4q20nfH5/nKDg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:54:44 2026 by rpki-client