
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json)
Hash identifier: 1PtMkQTJ2cT2Y1QQHBosyNYnoK0W8BfieGXYIjZLck0=
Subject key identifier: ED:76:54:84:99:19:99:B6:0D:B3:C4:BE:20:7B:14:BF:59:47:F8:3E
Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Certificate serial: 043F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
Manifest number: 0427
Signing time: Sat 27 Jun 2026 00:44:48 +0000
Manifest this update: Sat 27 Jun 2026 00:44:47 +0000
Manifest next update: Sat 04 Jul 2026 00:44:47 +0000
Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: 3dsOX7+WcEMjB+9OMroDqrj/0CmVGgfssCNWddHAgzY=)
2: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=)
3: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Jul 2026 00:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Validity
Not Before: Jun 27 00:44:47 2026 GMT
Not After : Jul 4 00:44:47 2026 GMT
Subject: CN=6a3f1d00-1792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:6f:43:a2:a7:7a:68:6a:18:44:dd:0e:f1:
94:df:4a:6a:35:66:c0:4e:9b:6a:d6:ba:6f:e9:ba:
1a:83:e7:b7:93:98:8b:57:ea:c6:34:ff:4a:21:1b:
c0:f1:13:40:91:c8:1f:64:9d:33:22:70:54:3b:a7:
aa:2c:51:70:f6:24:dd:94:f3:83:a5:fc:a6:58:0d:
c0:80:67:69:73:00:de:d4:51:91:26:1a:e7:8e:47:
69:3c:9b:84:e7:a9:d4:91:04:e3:a4:51:20:91:02:
3c:4f:c5:d8:7b:56:cd:65:c9:e5:67:19:cc:0d:30:
cd:69:cc:e1:5c:95:fd:1c:de:b6:e5:4f:13:d3:43:
e9:58:97:89:12:9a:4a:96:bc:af:ef:9a:f0:f2:d1:
f7:92:c2:9c:5b:62:a0:55:d6:e0:80:85:d9:92:14:
7d:47:f7:45:f1:95:51:37:33:0e:53:12:aa:dd:59:
9c:70:9e:a4:8c:42:f3:82:71:6f:96:1f:7d:37:1c:
95:24:8f:0a:1a:53:1d:aa:1e:52:97:69:9a:fb:67:
2d:ad:bb:32:08:1a:47:98:29:12:61:fd:62:69:a4:
b4:b2:d6:6d:f6:0a:5b:f0:ee:f3:48:d8:ff:22:52:
23:47:dc:ff:5f:dc:07:92:09:b0:03:dc:b2:7d:ce:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:76:54:84:99:19:99:B6:0D:B3:C4:BE:20:7B:14:BF:59:47:F8:3E
X509v3 Authority Key Identifier:
keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:7f:14:a4:98:4f:a0:63:90:a4:5f:95:8b:d8:30:39:ab:c8:
f8:9f:80:d7:0a:2f:a0:e5:16:05:70:a3:0c:ae:17:90:51:7b:
52:3d:91:92:17:05:5e:d0:43:5c:e4:48:5d:d7:ef:d6:41:8a:
67:e9:0e:89:0b:65:88:d7:5e:8f:31:e8:8f:23:b8:46:4b:a3:
dc:c3:a0:83:b8:44:b5:dd:5b:0a:8f:c5:5b:71:9f:39:6e:8b:
a1:96:a8:09:54:c0:e7:5e:e0:b6:bb:81:55:bf:3b:8c:cc:7c:
08:a5:aa:68:2c:d3:33:73:81:44:7a:27:03:a1:09:63:7a:b1:
f5:db:10:9d:77:3e:18:e5:26:3f:47:59:0d:e0:c8:c5:43:20:
71:72:1e:39:d3:f0:4f:70:af:1d:75:22:d2:e2:ce:7e:3f:8c:
b3:4b:d7:e3:f8:0c:78:0b:51:13:55:de:dd:2e:de:6f:d1:05:
26:38:24:0f:e1:9b:a4:84:77:b6:d0:0a:09:94:52:c0:2e:56:
17:61:1f:8a:3e:e7:b8:7b:8d:d8:7f:3e:4f:23:a9:26:94:3c:
f4:52:68:e7:93:13:59:54:5c:39:73:82:47:22:2d:ab:6d:89:
10:fa:e4:40:e6:01:de:ca:7a:2c:5d:83:99:88:b7:f6:e1:46:
11:04:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:05:41 2026 by rpki-client