
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json)
Hash identifier: tig5zYEgf+k3kQW1j7c3o8xN3I/mCXp+j5R3se+HXt4=
Subject key identifier: 28:91:C1:E0:30:55:6F:48:ED:FF:37:17:23:67:50:F3:C4:6C:3D:AC
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
Manifest number: 77
Signing time: Thu 03 Sep 2026 08:17:18 +0000
Manifest this update: Thu 03 Sep 2026 08:17:18 +0000
Manifest next update: Thu 10 Sep 2026 08:17:18 +0000
Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: 9mQKpemFnlwUP9m9ML6aiA20qZlEFVhjvIStkUnjRTk=)
2: 174298368DB111F18EE5B03B4611F970.roa (hash: ncEej6Lc0TJTyx32wKUoM2ogTcTqlHpXgc40wTgsiPs=)
3: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Validity
Not Before: Sep 3 08:17:18 2026 GMT
Not After : Sep 10 08:17:18 2026 GMT
Subject: CN=6a992d0e-a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:bb:e6:0d:1c:67:2a:a5:7e:b3:f2:0f:53:
f2:5d:c6:49:6a:a9:1e:85:6d:11:9c:45:da:30:22:
c0:db:f6:35:db:03:ea:ff:da:5b:51:c3:52:a8:99:
9a:5b:e5:8b:08:ed:9f:79:42:6b:52:6c:9b:ac:03:
f6:3d:6d:2f:bf:23:f1:c5:87:ed:24:ac:e4:50:c2:
26:10:14:bd:20:79:44:20:96:8b:93:de:bd:24:65:
f7:d1:3a:ef:2d:9b:1a:b4:3b:a2:bc:cd:5c:87:ce:
d1:f7:d7:30:11:9e:67:6c:6a:4b:71:cf:1d:48:be:
56:65:47:bf:03:f5:3f:04:be:aa:f0:45:f1:d5:a8:
52:e6:63:6a:f3:f4:0a:4f:c5:f1:06:48:a0:69:28:
8c:cd:25:4e:ed:d0:f1:bc:61:c3:26:2c:c4:32:de:
d0:3e:b3:b2:af:cf:af:dc:75:b9:08:dd:33:76:9c:
07:4e:a8:26:ba:3a:c3:6c:6a:c1:1e:11:ff:f9:ba:
5c:8e:3f:eb:3a:55:d2:20:b7:10:54:c5:d9:4d:0f:
54:2d:53:a2:2b:8a:4e:27:8b:71:96:30:9d:c5:3a:
8a:b5:6d:ba:36:3c:74:a5:32:32:f5:22:c0:15:ce:
fd:c5:99:ba:ef:a5:df:4f:7f:18:e8:cf:8c:0a:54:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:C1:E0:30:55:6F:48:ED:FF:37:17:23:67:50:F3:C4:6C:3D:AC
X509v3 Authority Key Identifier:
keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:ab:1d:8c:9f:d5:07:b6:1c:4f:4c:e1:d2:d3:7e:c3:dd:
56:bd:f4:08:49:3d:8a:21:b3:2d:6e:d5:95:83:84:90:53:55:
a3:4e:3d:4f:d1:ef:4f:7b:10:2c:b1:8c:e3:6a:fa:17:fa:9a:
fa:30:77:95:ca:40:94:aa:48:59:eb:ed:8e:2f:2e:17:de:e1:
00:06:ad:92:88:9b:e9:71:19:3e:2f:8e:f5:51:b7:0a:5e:67:
47:50:3f:0d:da:b4:30:12:b9:df:3f:4c:37:c7:46:56:d8:90:
af:06:a7:d8:db:3c:8f:a6:2f:22:ea:fb:da:c6:a4:3c:87:74:
87:1d:93:79:c3:68:30:ca:c6:4b:da:fc:4c:35:c6:4a:38:04:
25:69:0c:ae:fc:b5:32:61:51:b7:d1:3b:8f:c7:69:3e:ba:43:
16:b3:31:5a:c5:18:41:ce:b2:5d:82:e4:86:db:0d:c4:eb:0c:
0c:ca:94:f8:e2:68:a6:46:04:f2:c6:7d:5d:b6:41:37:78:48:
5a:66:07:32:a6:3c:83:b4:f7:f0:14:aa:d4:b8:3b:27:c7:10:
9e:c2:ee:d8:fb:30:42:36:44:a0:8b:29:9f:9b:04:4f:73:70:
a7:ac:de:89:bd:f4:26:69:d4:5d:96:62:2b:12:13:cb:79:8e:
b7:b2:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:58 2026 by rpki-client