
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
File: kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json)
Hash identifier: AZrUFWXGPGeB9M9dzCYvgJFj+MxXCqZqWQodJKXsJWY=
Subject key identifier: 81:32:6E:32:5B:51:AF:60:38:B4:53:A7:10:3E:F2:FC:AC:6E:E9:1D
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Certificate issuer: /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
Manifest number: 127A
Signing time: Fri 04 Sep 2026 17:05:03 +0000
Manifest this update: Fri 04 Sep 2026 17:05:02 +0000
Manifest next update: Fri 11 Sep 2026 17:05:02 +0000
Files and hashes: 1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: hszkWi9uECxPgNim1k8HUNo35OfapEG2PEOQObxMdPQ=)
2: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=)
3: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=)
4: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=)
5: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=)
6: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Validity
Not Before: Sep 4 17:05:02 2026 GMT
Not After : Sep 11 17:05:02 2026 GMT
Subject: CN=6a9afa3f-1bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:31:a9:f5:7a:29:41:a1:fe:62:84:49:72:
51:79:23:cb:20:10:61:40:8a:57:51:ae:6e:6d:96:
80:1d:e5:c6:33:9f:20:24:c6:5f:ff:e0:d0:e3:a5:
30:b6:dd:54:26:15:0f:66:2a:47:74:ce:4d:53:38:
20:1b:80:f8:55:0e:ca:1a:f0:5a:e0:f1:87:fc:f5:
c5:de:1c:23:0c:f7:3d:07:c7:f9:56:23:6b:8a:b0:
12:4a:85:42:2b:a1:52:3b:50:73:00:45:b3:67:c8:
92:51:4a:5e:99:0a:94:69:9f:8f:4c:af:c5:f4:75:
7f:be:59:63:f1:c8:ba:01:93:60:03:aa:eb:8a:b2:
0f:0c:42:2f:76:ed:ce:a6:e7:df:d1:e3:5e:1e:83:
1e:6b:38:bf:57:5c:6e:c6:d5:d1:6a:91:90:2b:35:
c7:96:ed:30:49:5a:d9:9d:57:e7:41:be:61:64:c9:
86:58:d2:f5:cb:eb:18:e7:71:8c:fc:e7:3e:61:9e:
4c:33:a4:02:ef:45:81:42:d5:29:17:a8:80:38:4e:
8e:ac:3b:16:d3:14:02:6e:2f:6e:23:ce:28:f4:66:
87:de:53:e3:7f:18:99:69:7c:67:f5:f1:37:74:60:
75:10:23:32:ae:6e:98:36:34:b5:fa:87:1e:93:e7:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:6E:32:5B:51:AF:60:38:B4:53:A7:10:3E:F2:FC:AC:6E:E9:1D
X509v3 Authority Key Identifier:
keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:37:ef:8f:a0:f0:ce:d6:73:ca:61:37:1a:6f:ac:df:62:6a:
97:5d:84:5e:9a:93:69:88:91:84:53:fd:e9:0f:5e:ef:18:ca:
3f:99:ae:16:2e:fb:14:7f:8b:d1:90:9e:4a:58:e6:9c:51:4c:
df:d1:24:11:a8:81:06:7e:66:63:c1:f8:ee:bc:2e:3c:a7:b5:
bc:0a:49:74:66:be:8b:3b:85:cf:a7:02:12:ec:3d:76:20:b5:
8f:c5:41:af:1d:88:85:9b:d5:c4:27:d4:59:38:15:de:a7:a2:
ba:25:14:a3:45:57:b7:0f:6f:89:03:f5:e7:04:96:de:a4:4f:
4c:cd:2f:8d:0b:dc:b1:be:22:cd:a3:99:ac:76:b4:f9:26:92:
48:06:41:29:73:b1:06:a0:12:8b:5f:cd:0b:79:60:07:91:aa:
42:e4:da:8d:bc:f8:99:3d:a9:5b:31:86:55:cc:03:eb:2a:86:
0e:fb:f4:30:47:22:3d:1f:e8:0a:d8:35:b4:6b:e8:eb:3f:af:
32:c7:75:f9:60:d8:73:ad:c9:c2:5a:4e:98:d3:6a:0a:37:7f:
11:14:fb:ed:92:d9:fd:2c:7c:8c:9c:44:86:78:a6:9f:da:5c:
5a:f4:07:46:e1:64:5c:9f:1e:13:e7:92:77:22:ff:f0:db:8e:
15:21:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:28 2026 by rpki-client