
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json)
Hash identifier: qB462OgDv+NT5cP2hHhHjnNopAaX6JUwEaIRJlWRyro=
Subject key identifier: 29:DF:78:AD:C2:86:72:86:D1:6E:7A:12:BF:60:23:EC:F1:4C:C3:4B
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial: 1116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
Manifest number: 110C
Signing time: Wed 20 May 2026 17:16:19 +0000
Manifest this update: Wed 20 May 2026 17:16:18 +0000
Manifest next update: Wed 27 May 2026 17:16:18 +0000
Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: woOKkbjakhv83n7Yx26F4k9m8A7vqvIEt9AklBOqM8Q=)
2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: 4agi+QhWWtUPKmH1/dW+seJgI+qk+4RdSuU9ar5oRKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4374 (0x1116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Validity
Not Before: May 20 17:16:18 2026 GMT
Not After : May 27 17:16:18 2026 GMT
Subject: CN=6a0dec62-0cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:e1:e6:58:01:16:00:c8:cd:1c:de:ce:45:
1f:6a:df:06:56:c4:e0:00:05:9f:b1:77:3b:19:d5:
3b:d2:c3:25:cd:27:9e:14:6c:a8:3c:b3:8e:6e:29:
26:cc:49:03:2d:6c:4e:ef:93:ee:05:a5:3a:dc:78:
e6:73:b3:ed:c0:6a:04:fd:0e:55:f9:d5:70:ce:d7:
f8:bc:2d:97:35:aa:34:e6:10:ef:38:c3:92:3e:b5:
62:4a:0a:cf:29:12:b9:57:b4:6e:b9:b9:d4:9b:c1:
9c:ff:55:51:a4:77:20:6e:aa:42:eb:1e:8a:88:fd:
25:f6:fa:31:0c:6f:bb:f0:10:84:8a:47:e9:56:2d:
c2:6c:25:27:41:7a:1e:f0:3a:0c:21:0b:94:f3:61:
df:b9:0d:7e:75:14:e3:85:9a:f0:c1:68:ab:1e:c8:
95:e4:3f:16:e3:ee:2a:9f:d6:bb:93:3d:10:20:38:
cf:b9:ec:fb:ed:50:7e:10:bd:e3:e0:17:e3:1e:8f:
07:f0:fb:d0:6e:bf:1a:51:d5:fe:f6:00:c9:95:b9:
9b:0a:a3:81:03:b0:db:97:dd:d1:6d:18:cc:a1:5e:
d5:03:b6:a0:55:8f:88:89:da:05:ad:51:16:25:c4:
05:5c:d4:f2:eb:bf:fd:61:ad:04:9f:2b:55:85:6d:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:78:AD:C2:86:72:86:D1:6E:7A:12:BF:60:23:EC:F1:4C:C3:4B
X509v3 Authority Key Identifier:
keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f5:ea:b2:45:52:a0:88:2e:6b:6b:c7:96:c3:02:8c:3e:66:
36:bc:03:a5:c4:f8:06:85:d5:81:58:be:18:4f:e9:c1:9d:13:
fc:46:f7:a7:f0:3d:73:96:85:17:67:72:a1:22:d1:36:ea:02:
56:7f:c8:bf:16:e5:27:60:65:af:4d:4d:46:be:56:0d:ca:c6:
69:5c:15:c6:58:d6:89:d5:67:3c:c0:62:40:bd:62:90:f2:f7:
f1:6b:67:0d:69:31:0a:a0:48:8e:44:c5:8b:62:0f:c1:bc:79:
bc:e2:9f:2a:b6:63:f1:1e:06:c1:44:7d:8a:0b:1c:bc:11:32:
98:d1:b5:88:b4:2f:5b:c4:3c:b6:29:34:4c:38:50:e1:28:16:
9c:55:03:84:e4:fa:0b:22:05:f7:b7:2b:d1:dd:80:20:47:41:
bc:c2:d2:4d:53:30:28:62:82:ca:6b:56:40:f2:c8:40:dd:59:
44:63:0c:8b:a5:21:5e:4f:be:5d:2c:1f:e7:dc:23:a2:05:26:
50:01:43:7f:73:d1:b3:75:eb:d3:8b:ce:a6:45:49:c0:63:bc:
c4:4a:ac:78:99:65:45:d6:db:97:bd:39:20:5a:d1:31:fa:f4:
17:94:c3:d8:ff:2c:a0:b8:37:af:00:32:c2:d3:c3:e0:4f:64:
fa:3e:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:12 2026 by rpki-client