
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json)
Hash identifier: bxrvRF38hDNuiksWZ7wBtZXBEsMntObYCwcbPw2j8nU=
Subject key identifier: C4:14:A6:65:2D:92:AB:B1:04:4A:89:D1:7A:89:D2:3F:B2:F7:EB:7C
Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD
Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD
Certificate serial: 0423
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
Manifest number: 041D
Signing time: Fri 04 Sep 2026 23:47:03 +0000
Manifest this update: Fri 04 Sep 2026 23:47:03 +0000
Manifest next update: Fri 11 Sep 2026 23:47:03 +0000
Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: UocFNaIQV5awjstPP8tqV1aRBryHI86WGttfobjnZyg=)
2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl
rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD
Validity
Not Before: Sep 4 23:47:03 2026 GMT
Not After : Sep 11 23:47:03 2026 GMT
Subject: CN=6a9b5877-9724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:47:28:21:ff:62:bf:f5:c2:24:aa:48:42:
00:f9:15:72:32:de:d8:79:0a:6f:9b:54:1d:b0:14:
d8:d3:41:a8:d3:c4:b7:f4:6c:7e:95:50:ed:a4:ba:
93:7d:18:00:01:c6:fc:bd:4b:58:ee:8b:41:5c:af:
95:49:bd:6c:54:6f:54:d5:33:05:0d:21:2b:fa:35:
83:aa:d6:02:75:4f:23:49:6a:04:4e:e4:c7:91:61:
df:c1:d6:5a:a5:ba:b2:69:49:b9:c4:e8:d4:12:04:
f9:d9:88:ca:05:76:9a:24:f2:af:05:60:fe:ea:47:
b0:f7:58:b4:8a:4d:0e:6e:9e:b9:30:bd:8e:19:f8:
ab:0b:f9:ad:f7:1c:45:ba:d7:8f:77:70:76:6e:ef:
83:18:9e:f2:bb:5a:d3:f0:0c:4a:6f:3a:2a:9b:a8:
6b:ee:f7:0f:8f:22:9e:30:ee:fd:6c:6b:03:7f:c6:
ea:18:03:6d:d2:25:43:45:78:76:1f:3b:8f:70:90:
ba:0e:02:cf:53:f9:1b:60:a1:7b:bb:cf:a9:f6:f0:
62:9a:5b:dc:86:bc:37:1c:04:f9:8d:10:61:f9:78:
b0:c3:80:d6:ee:6e:90:cd:e3:32:5c:35:ee:1f:0b:
ef:73:79:38:56:b9:0b:87:62:c3:bf:1d:86:f1:95:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:A6:65:2D:92:AB:B1:04:4A:89:D1:7A:89:D2:3F:B2:F7:EB:7C
X509v3 Authority Key Identifier:
keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e0:60:1a:5e:3f:d3:c8:09:24:9d:41:25:41:e4:b2:54:2c:
ad:ea:7d:49:c7:d0:cb:54:fc:e2:36:f2:a9:40:a8:de:d6:b5:
df:6f:a1:50:5f:7a:0b:b6:b3:1f:30:d7:ce:05:74:67:76:f6:
06:f1:3d:1b:c9:8d:84:8c:6c:ce:6d:bb:27:a7:2b:c7:34:da:
da:c1:d6:fe:43:06:7a:45:08:93:05:bf:82:3a:71:96:64:1a:
f2:b5:92:ae:cc:ff:de:eb:79:ef:aa:21:ba:62:fa:d1:c1:46:
d6:c1:eb:09:ac:8c:92:63:1a:64:77:9c:07:69:ee:5c:e7:e5:
5c:bf:3b:5f:cf:38:01:ba:59:72:18:69:31:7c:41:fb:13:1b:
98:d7:30:c6:2a:ea:c9:7b:8a:d8:40:62:14:9d:de:9f:73:e1:
df:a8:9d:2b:ee:89:f5:ff:c7:90:89:8b:51:d2:ee:a2:2b:80:
cb:ff:51:e2:e8:25:8f:4a:c2:b6:b1:c3:68:fe:35:8b:a0:4c:
05:12:3f:35:60:15:e6:9d:de:97:a5:2c:57:93:a9:1d:0b:f3:
1c:46:26:34:a2:bc:68:f2:a6:05:ad:bc:f7:0d:1d:84:0c:37:
fc:36:c2:d9:33:0d:e8:fe:4b:19:40:c9:d9:26:ba:ba:5d:04:
8e:fa:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:12:38 2026 by rpki-client