
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json)
Hash identifier: q07l+n+JTVVVfO3O7SSvuPAGJWZI8809zwmUs1ciKMQ=
Subject key identifier: 70:B7:F1:19:F2:3B:C2:85:C6:54:3A:A7:36:31:10:C1:E4:2D:4C:C8
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Certificate issuer: /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
Manifest number: 8C
Signing time: Sat 05 Sep 2026 07:19:32 +0000
Manifest this update: Sat 05 Sep 2026 07:19:32 +0000
Manifest next update: Sat 12 Sep 2026 07:19:32 +0000
Files and hashes: 1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: vwj+T11TCTd7xqoOC6UD9K6naoxgZvIoIPDa7QuKBn0=)
2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Validity
Not Before: Sep 5 07:19:32 2026 GMT
Not After : Sep 12 07:19:32 2026 GMT
Subject: CN=6a9bc284-39db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:f5:99:1c:70:f0:07:3f:a7:e7:fe:41:3c:
be:61:fb:10:5b:91:bc:bf:e2:54:c0:9b:9a:2b:02:
9e:6a:23:1b:d6:ae:48:bf:5f:b1:9a:b1:2d:5a:8f:
53:ba:ec:c1:88:a8:69:8c:fc:f9:4c:b6:94:80:b7:
00:17:2d:8e:0d:60:be:f5:e7:e1:40:f2:f0:e3:2c:
fb:aa:f4:56:63:13:25:e1:3f:52:ee:63:3b:d1:eb:
4a:f5:a5:f1:3a:5f:ae:89:2c:23:16:49:27:63:30:
d4:65:16:dd:c8:65:b1:d2:b9:ba:2d:6e:a0:3f:79:
56:67:44:f5:79:57:76:24:3d:fc:46:51:a0:74:80:
90:0a:0e:19:67:bd:fa:ca:a8:e8:b8:1e:bd:ef:93:
e3:f7:86:5f:8b:45:65:c9:a8:4d:e9:2c:d4:f0:cc:
b7:3f:bd:2d:c5:16:82:0e:39:ca:97:2d:f1:50:98:
ca:42:2d:b2:9a:e7:b0:55:29:f5:66:e4:91:09:1b:
37:d6:da:ff:78:b8:ea:d8:74:f6:04:bc:89:82:a2:
80:fb:7b:7b:16:f0:7a:2a:c3:4d:e5:5a:7a:ee:d4:
d7:d9:ec:32:ba:0a:a8:0b:c1:f7:ef:e8:62:5b:e7:
a0:dc:10:7c:10:e2:ba:c8:41:35:b9:ed:61:2f:1c:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B7:F1:19:F2:3B:C2:85:C6:54:3A:A7:36:31:10:C1:E4:2D:4C:C8
X509v3 Authority Key Identifier:
keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:93:0b:b3:69:91:8b:1b:41:a3:de:72:aa:2e:5e:59:6a:
61:33:ef:bc:43:1a:2b:fb:d3:7e:0b:57:d1:80:f2:03:c5:c4:
b3:60:72:54:25:71:b6:8e:63:ff:29:b4:30:f4:3d:8e:01:d9:
44:74:08:c8:f1:57:f1:e7:2f:5f:65:44:cd:03:2d:85:fc:9a:
ac:46:f5:3a:80:82:05:22:e9:f2:c6:83:6f:bf:f3:9b:bc:39:
61:d3:f2:12:c1:5e:1b:29:17:84:bf:3c:28:a6:72:d9:31:58:
53:4c:5f:25:71:05:a6:6f:8c:a5:62:2c:94:d6:35:6d:1b:23:
5a:48:6d:31:4b:2d:b1:c4:bc:aa:ab:d7:34:fe:27:94:a2:26:
03:bf:02:86:74:17:a7:25:b0:6b:8f:1e:d4:56:ca:4d:5b:f7:
32:c7:18:64:c1:f4:4a:4f:b6:2b:f8:bf:10:d7:62:63:d0:c8:
e1:d9:ec:af:57:19:1d:f7:a6:0b:aa:a2:ec:c2:f9:e0:4e:30:
22:aa:46:e6:db:30:3f:d0:62:6f:f3:61:7f:3e:f4:30:e0:16:
b3:b7:49:04:e5:7d:ba:d1:84:a5:4e:f7:09:c4:94:3d:db:0e:
d4:da:11:9e:88:f9:3d:ea:89:5a:31:4a:ae:af:52:82:a2:bd:
29:4c:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:13:05 2026 by rpki-client