
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File: KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier: V1pdUkjdsUuLWMlUvtgpnJvwT7jPUPOU/0z5WOwnI+I=
Subject key identifier: 40:49:EE:4F:A0:33:1A:8F:3C:60:A8:74:B6:7C:35:82:EE:12:01:46
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number: 022F
Signing time: Sat 03 Oct 2026 03:19:42 +0000
Manifest this update: Sat 03 Oct 2026 03:19:41 +0000
Manifest next update: Sat 10 Oct 2026 03:19:41 +0000
Files and hashes: 1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: w2z+X2yHgCrPLg4nKKR+c7ygyNoTCrJFgubcmE/+pZA=)
2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: JE3YkqQWW9mSMDDOp1/CYkJud9Wxp8btHEMRgajpDV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Validity
Not Before: Oct 3 03:19:41 2026 GMT
Not After : Oct 10 03:19:41 2026 GMT
Subject: CN=6ac0744d-4c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:6e:a2:33:39:43:ed:fb:ad:b1:52:aa:d9:
dc:24:18:4f:ac:24:d8:b5:6c:16:53:ee:91:d2:de:
76:69:25:f3:2a:eb:bf:48:f0:7e:7c:3e:55:c4:fe:
9c:26:89:f2:f2:a2:0a:c1:18:af:4a:95:29:3d:7e:
db:fe:d9:a9:10:47:02:28:f0:0c:06:c9:ec:9e:46:
9a:fb:92:4b:11:0f:ba:81:39:f5:e5:82:be:f8:3c:
cb:85:85:52:97:fb:ae:ae:fb:79:e2:f2:03:be:e6:
ea:00:6a:9a:97:7f:a1:c5:3b:34:30:36:25:aa:1a:
6b:73:af:ac:37:77:3e:d2:6b:7d:99:c8:01:c9:be:
da:12:fa:83:e9:3d:35:33:9f:55:2c:99:65:32:b1:
a6:0c:62:14:25:92:71:35:a8:26:53:f5:92:4a:e1:
7e:3f:6e:b4:d1:a8:85:7a:1c:17:53:4b:ba:a9:f9:
1e:24:76:3c:a6:f4:c3:a7:86:45:9d:69:29:7f:5c:
37:09:3f:d7:2c:af:50:ff:cb:dc:04:db:bf:54:bb:
7a:a7:15:0d:75:89:6f:e9:11:f7:fa:12:89:11:fd:
7d:dc:44:9d:ca:68:6b:21:f6:42:81:d8:2e:ae:5e:
c1:4c:28:2b:2f:33:f0:00:76:d1:df:6c:8a:f5:fa:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:49:EE:4F:A0:33:1A:8F:3C:60:A8:74:B6:7C:35:82:EE:12:01:46
X509v3 Authority Key Identifier:
keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:11:79:45:9e:84:39:99:1f:db:d5:09:c4:91:d0:d7:4e:64:
5e:d5:d5:ea:f4:5a:8a:ef:2c:2d:f5:25:d3:9a:99:50:6b:e7:
a6:c9:04:10:17:8a:c7:8a:e1:77:e9:a9:6d:b9:2e:65:70:d2:
6a:76:13:ff:a2:1d:5d:21:de:b5:e3:dd:2a:50:74:de:2b:68:
76:ca:55:b6:95:5b:c3:c1:f7:cb:9a:aa:80:31:ee:06:d4:a0:
d3:ad:df:3a:8c:84:78:a1:d6:bb:b1:ab:10:a9:a8:f8:7a:6e:
50:11:9a:75:8f:f5:79:d0:fe:8c:9d:9c:9b:3c:6b:99:ac:a2:
76:6e:12:dd:38:1f:7f:3f:f3:91:51:7c:7e:d8:83:ab:a6:4d:
32:ed:94:16:60:5f:bc:55:46:62:4a:a2:51:2f:e5:ba:23:d5:
67:a5:4e:4e:94:5a:26:5a:0d:0d:fe:86:08:5a:84:b2:70:cb:
42:49:a4:62:48:ec:a8:fe:02:da:73:15:31:0e:86:8c:1f:ce:
76:ce:a9:2a:f9:83:1d:a4:eb:a0:e9:b1:27:1e:b9:6f:f7:7c:
dd:34:9a:e5:ee:9e:93:47:a3:0a:73:80:6c:29:0d:ca:8e:10:
70:2d:d1:13:da:2b:87:86:92:05:d3:01:39:2b:11:4d:7e:cc:
8d:86:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:56 2026 by rpki-client