
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier: q/iPXrgPrmJwui+TKlFSiGC81EA/eJYD+zOHEvIVzH0=
Subject key identifier: A6:43:6E:51:1C:5D:55:F6:F8:5A:92:D8:47:09:10:51:A3:05:EF:55
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number: CB
Signing time: Thu 21 May 2026 06:56:04 +0000
Manifest this update: Thu 21 May 2026 06:56:03 +0000
Manifest next update: Thu 28 May 2026 06:56:03 +0000
Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: OZ/SueEZLzESxh1Yrnuao46zfp3iBBMF9hUT+wWr6Tw=)
2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Validity
Not Before: May 21 06:56:03 2026 GMT
Not After : May 28 06:56:03 2026 GMT
Subject: CN=6a0eac83-3df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:8f:04:4a:3d:87:59:b7:88:d5:ec:e9:cf:
81:1b:e9:2d:dd:c7:2e:23:37:62:ba:ff:13:e3:e6:
d5:b7:05:bf:48:c4:81:31:a3:35:ee:57:ae:7e:63:
8d:97:3e:8d:1b:3d:f4:25:b2:d5:32:fd:dc:ad:62:
ab:48:a4:92:c8:b0:a3:76:b8:eb:6c:a6:33:98:48:
9a:a4:1b:11:84:ce:57:03:ce:aa:0c:c6:73:7c:24:
61:81:f7:e2:ac:6e:02:67:da:f7:60:d8:83:c2:8e:
25:9e:7c:83:c6:4d:d8:53:b1:95:ee:d0:5e:68:a3:
41:ef:83:f3:8e:7a:4c:e0:9d:74:03:45:0e:67:a1:
c3:98:4f:06:23:0c:1d:0f:f9:65:de:75:e8:5f:70:
31:82:a8:8b:5d:23:ca:ec:5a:90:c3:e2:47:9e:1c:
c9:0a:11:82:cd:bb:03:4d:42:0f:61:ca:06:c3:3f:
14:e3:a0:ee:a2:1b:fb:e0:d1:f6:bc:29:c7:fc:9e:
6d:5e:1c:44:5f:84:34:a8:bd:fc:52:94:c5:fb:7f:
96:68:64:8e:34:42:9b:ad:4e:56:3d:da:77:81:01:
b0:7f:b4:9d:18:70:1d:b6:74:97:e0:66:04:02:e3:
93:4d:93:5e:f3:6a:54:0b:a2:96:69:09:d2:b4:56:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:43:6E:51:1C:5D:55:F6:F8:5A:92:D8:47:09:10:51:A3:05:EF:55
X509v3 Authority Key Identifier:
keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:19:cb:6a:d8:d2:66:f0:69:a1:da:7b:fb:20:3d:ba:d6:9e:
44:97:54:17:ea:98:a8:ee:03:f6:df:41:80:02:ed:36:d6:ac:
00:74:d3:99:30:58:1b:e6:eb:ba:29:b1:49:70:52:34:40:1f:
1f:b6:29:1f:6b:1e:f3:82:b8:e4:84:11:09:38:f3:d3:ba:67:
18:e5:ee:af:7d:dc:9e:3f:47:40:b6:e7:59:1a:76:a7:40:3d:
af:51:1d:0a:74:08:b8:3d:89:11:f2:34:78:e4:17:ab:7b:8e:
19:42:d5:97:70:15:88:3b:9c:bc:55:c5:43:d9:f7:60:23:46:
fe:f2:20:10:74:e8:79:ac:8f:21:a2:18:a0:ee:94:65:c1:ca:
2a:e6:ac:c4:bf:d6:1c:6b:de:f9:f8:74:c8:77:02:52:4c:61:
74:3e:9a:2b:cd:f2:ef:22:72:f7:48:80:fd:59:bc:b6:75:08:
c8:13:af:b0:29:09:a0:45:08:ac:dc:b0:99:f5:19:66:63:99:
da:f3:6b:4b:31:24:bc:9b:af:e8:b4:67:41:a2:64:ba:5f:68:
d8:76:e3:12:cb:ac:ca:1a:87:a1:d8:54:a4:a8:7d:3d:27:59:
b8:d8:42:b0:cb:3b:ec:c4:1e:63:c5:78:1c:8b:d8:e6:be:05:
94:24:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:41:59 2026 by rpki-client