
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json)
Hash identifier: RE7EorGRXQVroVq3yddOKe0JNtLd01BF6++ZtGwetyc=
Subject key identifier: 9A:8C:41:09:3B:D4:80:61:98:0E:B8:2F:D7:1E:1D:C3:18:53:F8:9A
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial: 07E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
Manifest number: 12E6
Signing time: Sun 26 Jul 2026 19:44:49 +0000
Manifest this update: Sun 26 Jul 2026 19:44:48 +0000
Manifest next update: Sun 02 Aug 2026 19:44:48 +0000
Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: E9/y7SMn36o03SI//AKzeQcpFpD7tBCBqdaFnPU1nGg=)
2: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=)
3: 6243075E653411EB98060C17C4F9AE02.roa (hash: v0uC7Tgqg5Ka5gyjZsM8cExfBYnQ3ib9cJkCqTADvOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Validity
Not Before: Jul 26 19:44:48 2026 GMT
Not After : Aug 2 19:44:48 2026 GMT
Subject: CN=6a6663b1-8786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:15:6f:48:d0:1a:29:d0:14:1e:34:df:68:
94:cc:3f:b3:54:d7:7e:2b:71:4a:c4:7a:42:43:b0:
c7:f5:7f:37:1f:b0:85:fd:57:c1:39:09:9c:5d:d9:
6c:52:41:25:c5:1e:f8:ce:c6:27:95:01:1c:61:5e:
1a:6a:2b:4e:93:a5:79:ef:cc:8a:37:2d:fa:b4:bf:
b6:de:b5:2b:60:f8:78:78:ff:90:ac:5d:1d:05:fe:
66:3a:d4:ca:42:f7:38:31:49:47:08:24:95:cd:46:
ca:9a:8a:f1:cb:4b:13:2b:54:f6:38:ba:2b:4a:bb:
6b:a3:54:d6:b4:e4:72:93:2b:34:5f:b0:53:86:5c:
83:9d:c0:ef:0a:f7:d2:62:c9:54:fe:48:e3:d5:10:
23:d6:f7:d6:92:e2:26:8d:aa:86:03:52:ce:58:23:
5d:01:3b:d4:48:17:2f:a4:b0:7e:a6:3b:12:fd:ce:
db:c8:4a:d0:d7:4b:d9:1f:e0:b0:b6:d8:f5:25:43:
5f:dd:f6:18:31:dd:66:ed:4d:ca:e0:d1:aa:cb:5b:
14:c1:c7:d9:86:27:8b:74:c2:5f:51:41:14:e8:85:
f7:ff:df:82:b2:91:02:ab:7e:91:48:1d:73:bb:11:
a4:0f:d5:b4:1d:9d:77:5d:4c:a3:4c:62:c0:48:db:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:41:09:3B:D4:80:61:98:0E:B8:2F:D7:1E:1D:C3:18:53:F8:9A
X509v3 Authority Key Identifier:
keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:7e:1a:6f:98:e1:8d:19:2f:d7:73:d0:e6:6b:97:c9:c0:
18:8c:ef:27:11:2f:7a:17:24:3c:c5:3e:88:9f:31:8c:ed:ed:
cb:5f:23:ae:47:7e:9a:26:32:6d:2a:48:02:50:41:9f:b3:c7:
41:e1:b9:c2:ab:85:27:03:80:04:85:34:0d:f4:90:1c:15:ff:
f1:3b:07:bf:0a:17:6d:55:82:b0:0d:91:eb:12:30:3d:a4:e7:
2e:73:2b:2b:f1:3e:d0:9e:cd:8a:ba:dc:30:77:87:e2:98:1a:
fa:2e:c4:31:99:a5:1f:0e:92:5b:3f:74:cb:da:5e:a0:9c:a3:
93:7e:04:0a:e5:20:6d:f4:54:ea:22:cb:39:3b:a8:65:9e:18:
07:74:83:21:52:bf:46:04:78:8e:a2:e7:8d:b6:70:2d:b1:00:
3b:ae:90:ab:a2:1e:af:9d:75:ea:60:12:f6:f1:a6:35:8b:4a:
c1:78:3a:98:cc:25:dd:5f:26:7d:4c:d9:15:5f:e3:e6:c0:f9:
aa:be:a8:fc:c0:d8:da:8c:99:e5:28:fc:0c:4d:e3:5c:95:68:
91:9c:b4:18:ad:db:e2:98:1f:15:68:ab:15:ff:66:44:7c:33:
94:7b:04:72:78:28:31:e2:0f:a4:ae:5d:6d:2f:2d:d3:5b:54:
7a:99:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 23:13:16 2026 by rpki-client