
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
File: rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json)
Hash identifier: 2DR1uS7IK0IgzJ0pNGNLx7R04PwJcSH7qK2W8xEi4HM=
Subject key identifier: 4F:E8:7C:03:AD:34:4A:40:E9:3C:8D:30:52:0B:DA:5B:F7:1A:A1:BF
Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78
Certificate issuer: /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
Manifest number: 80
Signing time: Tue 03 Mar 2026 07:17:22 +0000
Manifest this update: Tue 03 Mar 2026 07:17:22 +0000
Manifest next update: Tue 10 Mar 2026 07:17:22 +0000
Files and hashes: 1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: J9m/0AP+MullQlmVKl6NWA4mueXXKvtQD5keTCHMeQQ=)
2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: /u1670IvK6H8KEgihUXET5kmQXxA4scZrjWQTU2eOVQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl
rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
Validity
Not Before: Mar 3 07:17:22 2026 GMT
Not After : Mar 10 07:17:22 2026 GMT
Subject: CN=69a68b02-c779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:15:36:c9:12:ca:43:b1:52:07:82:14:63:
f9:a3:00:d7:d8:14:d8:7f:b8:9e:bf:5a:74:b4:55:
cc:c7:65:a7:18:6d:47:cc:4c:01:77:ee:fb:56:e3:
c7:07:94:52:d4:c8:e0:3f:47:1a:2f:ec:c5:da:53:
97:b3:e9:2b:90:e6:0c:ee:7b:a9:b3:5f:57:42:b9:
9e:04:47:20:1a:ef:43:17:34:d3:45:54:c7:06:94:
4f:79:c0:8f:10:4b:0d:64:de:b1:bc:00:7f:0d:03:
b9:41:67:ed:2f:9c:ed:b7:01:6e:72:8a:75:34:09:
23:37:7a:28:63:e8:f9:0b:bf:90:ae:3b:ee:f9:23:
86:ec:5c:86:5f:22:44:bf:f2:1c:81:bc:c4:1c:05:
a7:18:a2:ce:df:cc:aa:13:63:48:6c:30:4d:7c:f4:
17:72:1a:6f:09:38:1d:4c:36:30:eb:3d:a7:e0:77:
aa:8e:dc:88:2f:0c:ee:ef:e7:4f:f0:0b:ba:65:fe:
3e:e4:51:9e:c9:c1:cd:f9:98:4b:e9:38:7f:f5:42:
1b:55:0f:48:07:5d:00:14:0f:96:1f:78:82:8a:65:
e7:a0:c9:d0:ec:55:5c:ca:ab:fb:bf:53:ce:58:16:
cd:63:00:61:0e:79:03:2f:a1:ac:93:c3:56:22:c0:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:7C:03:AD:34:4A:40:E9:3C:8D:30:52:0B:DA:5B:F7:1A:A1:BF
X509v3 Authority Key Identifier:
keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:3f:5f:f2:31:8b:bf:70:6d:51:81:e4:9c:4e:6a:b7:d6:2b:
1a:57:59:7a:a3:2c:44:21:e8:f8:73:d6:b5:55:8f:71:24:17:
cd:52:00:a3:57:c8:ac:24:57:ae:39:6b:96:dd:84:88:40:23:
eb:31:57:c2:94:c6:a7:dc:ae:c8:0a:58:fb:cb:20:e4:4a:3e:
7f:ad:79:f8:b4:48:91:07:07:63:60:fe:2c:70:6e:78:1c:6d:
27:74:64:15:bf:f2:43:11:9c:83:89:17:53:ca:47:28:1c:ea:
75:40:11:0c:0c:77:ef:92:57:c0:c6:12:e3:2d:a0:0e:a2:f5:
60:ae:5d:0e:7a:57:47:80:d2:a1:fb:04:6a:d1:b8:f0:21:65:
d3:88:d2:60:72:76:79:05:b8:db:aa:bc:f8:d2:16:2b:33:3d:
66:3d:71:f2:78:48:1e:9e:b8:39:b5:7c:fc:bc:15:00:8a:2e:
9c:aa:41:4e:df:10:db:4d:d9:e2:00:c2:12:18:66:87:7f:19:
28:f1:89:1a:e0:90:d3:54:ff:f7:d2:a2:a6:ca:68:88:57:98:
ed:5c:b6:fb:bc:cd:da:fc:6e:b3:e1:08:f6:9a:bd:65:e7:a1:
b1:4c:aa:af:79:42:76:d0:87:43:79:a2:88:73:98:d3:cf:05:
83:23:71:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 15:09:22 2026 by rpki-client