
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json)
Hash identifier: LC4nA9R7GfM4KTNOrW5SZHRUsoF1jD/qnJu/a9PmWxg=
Subject key identifier: 49:95:0E:D9:C6:91:CA:2A:3D:84:DA:3D:33:99:F6:32:12:55:9C:71
Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Certificate serial: 35A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
Manifest number: 3593
Signing time: Mon 28 Sep 2026 14:56:57 +0000
Manifest this update: Mon 28 Sep 2026 14:56:56 +0000
Manifest next update: Mon 05 Oct 2026 14:56:56 +0000
Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: qHTIGbw7Bi6PdbvYKZ1pOse+2Milo3h7TnnpUbZKKeY=)
2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 07LE9X8LH2BaI/dz0O3mbMsKmiKgclhDrz2z98RF0c0=)
3: jL5H4WWk5uweAtGpMsuuxuOehM4.asa (hash: VE0Uz4JyhldZcaScldrzTn/xrAakRTFppWCFd2sM8Bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13730 (0x35a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Validity
Not Before: Sep 28 14:56:56 2026 GMT
Not After : Oct 5 14:56:56 2026 GMT
Subject: CN=6aba8038-9cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:fc:a5:0b:f9:b9:ae:ce:83:57:29:6a:4e:
1c:34:6b:67:65:7f:ca:0c:b5:91:1a:e2:8c:00:8b:
f4:a0:e6:61:06:54:c4:de:70:2d:0f:25:b9:b8:61:
56:d5:09:36:f9:60:d7:87:42:40:cb:ee:fa:d3:78:
6d:d0:40:95:1d:99:d0:dd:f9:b6:07:86:25:ea:51:
9d:69:a4:dd:1e:6d:f3:d0:7e:82:d4:e1:bf:cb:37:
5a:1b:f5:3c:80:84:b9:f7:06:10:28:d4:aa:df:35:
9e:64:4c:01:05:85:8d:22:bb:bb:f0:e7:79:56:64:
28:da:63:68:bb:eb:84:b6:76:55:c4:73:02:08:a0:
1d:d4:d0:5c:35:b0:b2:47:69:06:72:45:eb:bb:e2:
1b:94:2f:85:8a:80:82:72:56:26:52:4c:30:4a:f8:
1f:d7:19:1f:d2:99:04:b2:5e:97:c0:a9:e8:0e:00:
ad:4c:62:ad:ca:e0:04:0b:34:05:7d:15:21:68:80:
a5:c7:c6:cc:95:64:d9:29:35:e7:83:0c:d8:0e:90:
49:63:7a:e4:6e:0f:7b:9a:60:0f:bf:e9:6f:df:30:
fd:dd:11:4c:92:a0:bd:0b:8b:a7:69:20:de:eb:a9:
66:ab:6a:90:86:7f:40:7d:23:b0:ed:7b:9e:df:e7:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:0E:D9:C6:91:CA:2A:3D:84:DA:3D:33:99:F6:32:12:55:9C:71
X509v3 Authority Key Identifier:
keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:32:93:3c:10:31:df:45:d2:0c:66:5a:44:16:9a:34:ec:
33:8a:37:e5:28:12:a7:92:b1:0f:8a:b6:3f:f9:c2:b4:db:c7:
af:a0:b6:ad:8c:23:05:21:2f:5c:07:3a:cd:8a:90:69:cb:2d:
bb:dd:c1:9f:80:5e:a4:60:51:cd:eb:94:07:ca:e4:f0:fe:19:
37:e8:ee:62:d8:de:3a:b5:31:57:29:61:1e:39:78:33:3c:f9:
d2:03:bf:47:5d:95:81:6f:7e:76:c2:ab:52:da:33:d0:1b:6c:
a6:51:e6:ae:f7:31:fd:95:52:ed:5c:9f:5f:07:01:07:56:64:
e6:37:ea:04:39:23:26:27:76:33:e6:f3:bf:19:51:24:3c:e6:
8a:9f:e8:30:2f:1f:ef:c6:2b:01:b2:60:68:82:fd:77:bd:42:
95:a7:93:92:ed:3b:86:8b:1e:ca:39:32:63:d6:38:b1:2e:92:
6a:98:11:09:15:82:aa:df:fa:96:cb:60:bc:9c:d0:b5:bf:1d:
d6:91:41:2a:77:06:c5:49:03:c3:bc:a8:51:58:1d:71:fd:61:
5d:b7:0c:f7:8d:10:87:ed:36:4a:69:ea:0c:05:ae:6e:24:f3:
46:9b:02:c5:45:f6:05:6d:0a:79:55:4b:45:6b:b4:3e:10:dd:
56:60:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:50:26 2026 by rpki-client