
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier: UUwYumkZUkM4g5VphHhVy8pc/DhjfDpLxjhEBYis3Ok=
Subject key identifier: BA:62:8E:69:B1:0D:3C:BA:B5:EF:32:15:A0:36:2A:5D:25:C5:62:8E
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number: E7
Signing time: Fri 17 Jul 2026 07:42:04 +0000
Manifest this update: Fri 17 Jul 2026 07:42:04 +0000
Manifest next update: Fri 24 Jul 2026 07:42:04 +0000
Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: PItdQJx7LRwMkO9Ga4E8r2w9ULxop+OqLL0shupXiBY=)
2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Validity
Not Before: Jul 17 07:42:04 2026 GMT
Not After : Jul 24 07:42:04 2026 GMT
Subject: CN=6a59dccc-cf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:6d:6a:f5:12:45:d7:2e:81:ed:dc:05:c5:
3f:94:84:22:4a:25:ea:5a:5e:ec:6e:e6:c5:10:09:
0d:03:5d:8d:a6:34:f8:20:35:c6:6b:06:44:ed:56:
68:80:00:0a:e7:f1:96:8c:69:aa:17:26:b8:b1:4a:
e5:7e:cd:fb:1d:8c:bd:58:9e:09:a7:ae:af:76:82:
61:6e:ed:d6:54:c5:6c:6f:5d:93:72:7d:1a:d0:62:
d6:9d:21:5e:d9:59:26:75:07:7e:6b:23:c0:42:65:
25:7b:37:6c:07:3e:6c:7c:a0:fb:4f:94:e8:70:04:
65:fd:52:5f:1b:07:8d:ee:53:c5:ec:d9:24:10:6e:
bc:c9:33:9d:5e:7c:09:fc:d8:97:c1:76:f0:13:1d:
77:44:13:ba:c1:d4:84:d8:19:9c:d9:06:7f:c8:1b:
3a:d1:49:f3:7c:3d:e4:3e:1e:9d:e4:ee:0b:3e:44:
f3:ac:b9:48:01:b3:8b:e1:e2:cc:ca:f1:26:be:12:
14:44:0c:c5:85:1d:2b:fb:03:d1:d5:df:18:47:d4:
c2:68:92:ab:5e:47:18:7d:20:aa:88:3f:70:a0:96:
dc:2a:ee:da:b1:ef:f7:e3:81:60:9c:61:b1:6d:64:
5d:ca:4d:10:f3:bd:82:0a:1d:e5:c5:ab:3a:38:4c:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:62:8E:69:B1:0D:3C:BA:B5:EF:32:15:A0:36:2A:5D:25:C5:62:8E
X509v3 Authority Key Identifier:
keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:5b:12:ac:ae:ad:07:11:31:81:08:37:7a:a9:8d:2d:aa:45:
03:20:58:4b:14:f9:b7:14:94:a5:bc:a6:d4:8a:0e:ae:01:d8:
87:43:ea:b5:cd:52:94:10:90:1e:c7:4c:9a:47:74:9f:39:da:
1f:c4:5b:1d:c5:69:98:64:4e:41:d7:6d:28:fb:57:da:90:61:
f0:a0:55:67:62:af:ce:e6:9f:66:57:d5:85:5e:eb:f1:aa:67:
2a:c8:b2:c3:fa:45:5c:44:50:d1:a8:81:c8:2a:cb:10:b7:50:
70:62:ce:fc:98:9b:2a:41:17:87:ef:4b:bf:60:60:cf:78:6d:
16:36:61:e2:0b:93:12:f9:26:fd:ba:17:0e:65:fb:19:d0:78:
2c:79:da:03:4f:c2:87:3e:23:bc:62:4d:7a:5c:b9:2f:2d:5f:
4e:84:98:f4:bb:34:e0:ed:25:a2:af:11:96:77:06:fb:df:87:
c0:b7:d3:a7:0c:30:91:db:98:46:e7:a4:1e:85:d5:61:e3:9d:
21:e5:1a:45:5e:02:f3:33:5e:1c:c2:c8:89:93:3a:2c:97:e3:
98:31:a7:bd:cf:21:43:97:b8:e0:87:e5:6e:1e:89:6c:18:25:
e2:51:41:99:1a:5f:11:40:9d:e4:05:6c:2a:06:87:7c:e3:23:
b4:c1:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:17 2026 by rpki-client