
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
File: kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json)
Hash identifier: V5uXZODbVePOdhfCw9kqhtmA86NTpkGRuTiQjCnZvOg=
Subject key identifier: 03:B2:F5:09:2D:79:D2:CD:C4:70:3A:BB:DF:62:79:15:0D:8F:1E:DE
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Certificate issuer: /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial: 089D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
Manifest number: 0894
Signing time: Wed 20 May 2026 20:35:29 +0000
Manifest this update: Wed 20 May 2026 20:35:28 +0000
Manifest next update: Wed 27 May 2026 20:35:28 +0000
Files and hashes: 1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: ZF2t14R0/woJWL2pusDQR7f5d413LXtG6HbV6xsOJGg=)
2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: Zu7ovE1EUW36D/gzrtGv9a6ZOHHzmdXPGruHnQFEs4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Validity
Not Before: May 20 20:35:28 2026 GMT
Not After : May 27 20:35:28 2026 GMT
Subject: CN=6a0e1b10-948b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:1c:f2:20:79:b5:c4:d3:d8:9a:5e:6e:7e:
d8:fd:6e:f4:bc:57:25:f2:08:32:e9:2f:ac:08:a5:
2c:86:92:77:8e:06:c3:a9:57:a7:21:ce:e6:d8:7e:
d0:d7:81:ef:1a:fc:7c:a8:84:40:4b:f8:87:9f:d9:
82:42:08:ff:bb:35:c7:0d:51:96:d1:5e:39:00:37:
5b:22:36:be:5d:ae:2e:89:c3:a9:38:66:16:c7:17:
48:87:19:2f:27:68:47:ae:0f:a6:7d:39:c5:b1:be:
50:45:61:cf:ad:de:be:6b:c4:64:3b:be:cb:3c:7b:
a5:be:21:40:75:fa:5a:2e:6c:60:dd:1d:c1:47:c0:
f9:5f:00:c3:8f:ca:24:ad:32:f4:b0:64:2a:ba:a4:
1e:cd:86:49:35:2b:40:25:80:5f:e6:69:ce:72:24:
4a:81:7f:08:08:a8:63:94:bf:91:ee:dc:a6:6c:2f:
bf:29:7b:37:4e:36:52:c0:4d:4c:27:19:73:56:4e:
34:bc:3e:2f:bd:43:b3:0f:43:01:3d:cd:fc:21:88:
86:7b:2a:2a:cf:32:2c:42:81:e8:e7:fb:81:87:6a:
9f:a4:7a:32:02:df:07:16:1e:0f:bd:12:7e:f8:af:
86:45:2b:16:fa:28:05:76:96:ad:67:74:db:e6:16:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:F5:09:2D:79:D2:CD:C4:70:3A:BB:DF:62:79:15:0D:8F:1E:DE
X509v3 Authority Key Identifier:
keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:16:0a:d1:41:54:f1:80:00:20:12:cd:e3:32:3a:fd:b3:7e:
8e:80:4e:a8:f7:8b:30:c4:29:4e:8c:52:ae:2c:1b:3c:81:1e:
da:5d:d3:53:e9:12:7e:29:43:fa:d5:0f:14:2a:17:4e:e5:77:
6f:b1:ef:ed:b1:0c:23:8a:f5:c0:c2:32:ab:39:72:66:a2:82:
6f:25:23:ac:ea:d5:39:e2:ff:6d:0c:ab:93:2a:76:bc:5a:82:
38:c9:bf:c0:38:0f:56:fe:75:5f:12:d5:d9:18:af:21:60:19:
f5:fe:79:84:27:b0:19:93:90:5e:16:ee:14:fa:14:60:93:e9:
a5:b6:b1:f3:f0:87:c3:bc:a8:73:40:bc:30:46:88:55:41:08:
7b:a3:2f:08:ba:45:2d:7b:95:12:6a:c6:e8:2a:dc:17:ea:11:
56:9d:94:96:32:1d:06:c5:49:92:29:98:8a:b7:16:63:ee:94:
41:9f:ee:92:b9:23:ef:ed:11:16:4e:e9:46:4c:aa:7e:b6:02:
ba:ee:a0:fb:2b:24:be:b3:a0:59:8d:c8:b1:1c:08:07:4d:65:
e5:5b:f3:0f:8d:65:1b:3a:59:f4:0c:73:4a:e4:3d:4f:a9:35:
1a:52:45:91:8c:97:ee:de:69:04:3f:d9:59:95:61:52:5a:8d:
ad:ae:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:21 2026 by rpki-client