
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier: PRd1LglYtCv1YDkicxaAIAWW79MBVlFlyoJzMonHXVE=
Subject key identifier: CA:E7:59:82:65:58:66:88:39:C1:48:F2:B1:6D:31:B7:D6:61:B4:29
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial: 3587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number: 3585
Signing time: Thu 08 Oct 2026 15:18:19 +0000
Manifest this update: Thu 08 Oct 2026 15:18:19 +0000
Manifest next update: Thu 15 Oct 2026 15:18:19 +0000
Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: 7DlZo6VVyKedH/tLpIawzLjd+h1rrokSYy1HMNXcNV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13703 (0x3587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Validity
Not Before: Oct 8 15:18:19 2026 GMT
Not After : Oct 15 15:18:19 2026 GMT
Subject: CN=6ac7b43b-ce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:80:20:c5:15:76:0f:17:6a:54:86:50:c8:
88:84:3c:f7:f4:af:bb:06:92:1a:53:b4:52:75:dc:
3c:0c:67:57:fd:40:c0:6d:2c:00:a1:05:57:a3:dc:
2f:a2:84:b6:1b:80:95:7e:56:81:aa:da:ee:d8:f3:
58:9c:9e:04:7b:d2:4b:20:68:86:fb:fd:30:2c:40:
30:a0:05:33:a5:7e:71:6e:df:9a:1e:f3:e8:ad:b0:
a0:99:10:3f:de:8f:1a:a8:dc:70:5b:fc:9e:b2:d1:
36:2f:64:32:a0:c5:8b:4e:71:68:a8:9d:17:34:6f:
ff:86:c1:55:5f:ee:87:fa:db:01:67:ac:ae:50:b3:
33:80:f5:5e:78:8c:7f:14:c7:b5:a1:15:8c:a8:24:
ab:53:0f:b8:e6:91:7f:17:6d:30:00:ac:58:c1:3e:
cc:e9:f0:0b:08:1b:77:4b:1e:4b:54:36:21:b7:02:
92:12:df:e3:1c:a5:23:96:6f:c9:67:7c:cc:51:96:
89:8f:ad:ae:4c:31:88:40:ef:ba:cf:1e:84:75:d2:
39:8f:d1:16:85:64:80:8b:bd:ce:5e:8a:ea:db:84:
02:02:db:26:b4:ff:35:4c:24:6c:19:45:f2:27:ee:
2d:4b:d2:c9:d3:ce:72:0e:30:eb:99:d0:2d:9f:13:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:59:82:65:58:66:88:39:C1:48:F2:B1:6D:31:B7:D6:61:B4:29
X509v3 Authority Key Identifier:
keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:41:f1:15:90:00:d4:10:0b:99:35:c9:e4:d0:56:90:d7:73:
62:ac:71:eb:1a:bc:79:45:59:88:d0:d6:d2:2b:74:83:a0:96:
77:48:e9:cb:ad:00:f4:ab:eb:a7:29:49:57:f8:b7:57:04:a1:
f7:9a:ec:a2:c5:fa:e6:32:8e:44:7a:73:cf:cb:80:f4:ec:37:
81:09:31:c5:ee:48:d6:4b:f1:75:f3:13:2e:c2:65:a5:a1:83:
29:db:65:3a:9a:5f:bc:47:0a:ac:d3:63:33:8b:00:c6:c2:c4:
ba:28:11:83:f9:8c:43:12:5e:b9:f5:3d:dc:b4:a9:d7:38:57:
67:95:b4:a7:bf:eb:f6:ec:15:a7:ca:20:47:7c:90:ca:05:d3:
5c:0d:80:45:0a:20:5e:cc:de:42:38:0d:f0:86:06:dd:49:fc:
51:a8:31:42:33:8f:85:32:55:62:ef:45:e4:01:fd:dd:18:76:
7f:f3:5c:72:4a:9b:28:e0:a2:a6:fd:22:6e:4b:f7:c3:e7:ab:
8d:4b:46:35:11:e8:27:7a:f3:c4:0b:95:2b:29:fc:6b:2e:a0:
0a:54:8c:c6:bf:63:cb:b8:f8:05:1c:57:6c:5a:e0:71:12:f6:
e0:f3:66:da:7c:43:70:28:39:dc:c0:5e:9a:95:c8:27:48:46:
07:4d:d7:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG
NTQwNjEwODIwHhcNMjYxMDA4MTUxODE5WhcNMjYxMDE1MTUxODE5WjAYMRYwFAYD
VQQDEw02YWM3YjQzYi1jZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxiCAIMUVdg8XalSGUMiIhDz39K+7BpIaU7RSddw8DGdX/UDAbSwAoQVXo9wv
ooS2G4CVflaBqtru2PNYnJ4Ee9JLIGiG+/0wLEAwoAUzpX5xbt+aHvPorbCgmRA/
3o8aqNxwW/yestE2L2QyoMWLTnFoqJ0XNG//hsFVX+6H+tsBZ6yuULMzgPVeeIx/
FMe1oRWMqCSrUw+45pF/F20wAKxYwT7M6fALCBt3Sx5LVDYhtwKSEt/jHKUjlm/J
Z3zMUZaJj62uTDGIQO+6zx6EddI5j9EWhWSAi73OXorq24QCAtsmtP81TCRsGUXy
J+4tS9LJ085yDjDrmdAtnxMHPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrnWYJl
WGaIOcFI8rFtMbfWYbQpMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE
QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv
X2lWaDE5amVTZTcxUUdFSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATkHxFZAA1BALmTXJ5NBWkNdzYqxx6xq8eUVZiNDW0it0g6CWd0jpy60A9Kvr
pylJV/i3VwSh95rsosX65jKORHpzz8uA9Ow3gQkxxe5I1kvxdfMTLsJlpaGDKdtl
OppfvEcKrNNjM4sAxsLEuigRg/mMQxJeufU93LSp1zhXZ5W0p7/r9uwVp8ogR3yQ
ygXTXA2ARQogXszeQjgN8IYG3Un8UagxQjOPhTJVYu9F5AH93Rh2f/NcckqbKOCi
pv0ibkv3w+erjUtGNRHoJ3rzxAuVKyn8ay6gClSMxr9jy7j4BRxXbFrgcRL24PNm
2nxDcCg53MBempXIJ0hGB03XTQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:07:33 2026 by rpki-client