
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json)
Hash identifier: Zl3TUZdRmq2TXDKNnoNj+evDTfODWFfYNXgusAr8hrs=
Subject key identifier: 25:F6:48:1C:77:50:9B:E9:3F:A9:7D:CE:9F:93:46:5D:54:F5:86:59
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial: 0480
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
Manifest number: 0478
Signing time: Wed 19 Aug 2026 00:26:59 +0000
Manifest this update: Wed 19 Aug 2026 00:26:59 +0000
Manifest next update: Wed 26 Aug 2026 00:26:59 +0000
Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: bCok5Wpkg5lFjubemPys4myEsCAMg4x6QR/BFUklVl4=)
2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: Gae8JUGPwA98nYPjIjUYmUnLgpGjlRVDRt5x96k+Igo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Validity
Not Before: Aug 19 00:26:59 2026 GMT
Not After : Aug 26 00:26:59 2026 GMT
Subject: CN=6a84f853-b5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:81:52:e4:f0:a0:d6:b0:b6:20:c1:d3:b4:
d1:a1:09:7f:9c:fe:2e:3c:1f:58:fb:25:a6:6a:48:
3b:4d:8e:0a:68:ec:ed:dd:8b:0e:ab:f7:7b:f8:50:
59:11:f0:70:d6:a8:0d:fc:32:24:2a:f2:12:3c:ba:
e3:4d:0c:31:65:ea:be:33:8b:98:4b:64:a3:7d:19:
a6:9a:76:27:9d:01:38:9d:e4:ec:a3:ba:8d:8d:82:
63:95:d6:c8:a1:7d:fe:68:04:7b:93:4a:37:81:43:
a2:57:c3:68:c5:bb:16:d8:01:b8:a3:6c:2c:77:47:
88:dd:a5:cb:99:94:90:02:64:7b:84:b6:0b:9d:34:
1d:4e:c3:52:d9:69:1c:c7:03:6d:fe:85:ae:65:c1:
ee:bb:af:3c:69:64:e1:67:c1:4a:6c:84:e8:8c:a1:
6c:12:7f:02:a0:eb:7a:38:e8:38:97:3e:f7:2c:92:
18:31:69:9d:a5:14:52:73:db:b7:08:52:6c:92:9d:
11:0d:7b:20:b5:83:c6:d3:f7:4d:4a:bb:9e:17:46:
df:ed:75:0d:65:25:06:be:65:51:a1:da:36:aa:64:
0a:7d:f0:c1:62:5d:90:d6:7a:b6:ec:97:8f:95:44:
f5:d0:67:c4:51:30:84:67:73:b6:76:04:4d:46:f0:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:48:1C:77:50:9B:E9:3F:A9:7D:CE:9F:93:46:5D:54:F5:86:59
X509v3 Authority Key Identifier:
keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e2:ca:84:5e:d6:b9:58:c1:75:3d:4f:48:99:62:8e:2b:7a:
d3:74:15:28:79:8d:1d:e1:cf:de:62:82:b6:4b:66:50:11:a8:
99:93:93:ba:12:0a:ad:da:f8:ab:1f:29:ae:65:bb:b3:16:31:
97:0c:b4:e4:f2:c2:7f:37:25:81:6a:e7:0b:fb:cf:c9:cc:48:
42:22:50:1d:91:a3:ca:bd:9a:35:fe:4c:03:07:4b:1a:1b:6c:
e2:5c:87:4f:10:f7:42:04:d0:3b:41:c3:89:c1:9f:04:f0:3f:
0c:04:1c:c2:4c:4f:a3:87:89:44:e1:d8:b3:52:ea:49:0c:d6:
cc:4e:ff:41:49:8c:04:39:f7:1c:18:b0:33:28:0d:09:44:ad:
76:0d:77:f6:09:81:79:11:be:b5:3c:8a:70:bf:0b:bd:35:2e:
21:c1:cf:75:fb:e8:b8:bd:d9:74:b8:b2:47:cb:ae:b5:80:8d:
d3:26:73:8e:dd:79:87:31:26:86:85:fd:a1:aa:4b:47:40:4d:
bf:28:6e:e0:e5:da:50:36:b4:38:8c:93:4d:a7:99:75:2a:ca:
9a:4d:b7:78:6d:4c:35:1d:7b:7f:c9:10:b0:02:d0:ea:dd:ae:
5d:ac:07:96:55:29:bd:2f:ec:cd:ef:f6:ac:3f:63:9f:64:4a:
df:b5:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:52 2026 by rpki-client