
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json)
Hash identifier: kM4SQfoJ2eYP3gc0uOi6xJC6UE4o8fT/KTevcI08tbY=
Subject key identifier: DE:AB:BB:11:E8:4B:4E:8A:49:E4:13:3A:D4:C0:2A:92:19:9F:9F:E9
Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Certificate serial: 0791
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
Manifest number: 1289
Signing time: Sat 04 Apr 2026 19:08:46 +0000
Manifest this update: Sat 04 Apr 2026 19:08:45 +0000
Manifest next update: Sat 11 Apr 2026 19:08:45 +0000
Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: mVRdGO7E1kPBYwFk6w4gpyw7KztGWnYegVYBfwMRF04=)
2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Validity
Not Before: Apr 4 19:08:45 2026 GMT
Not After : Apr 11 19:08:45 2026 GMT
Subject: CN=69d161bd-4365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:d9:55:df:de:e3:be:b2:78:77:be:87:70:
b4:e7:d9:c6:bb:d4:a1:e0:d1:c1:a7:76:d3:cf:d1:
a0:02:08:cf:14:05:8d:a0:04:62:47:f5:53:85:ff:
e4:97:0d:1d:1f:15:ec:f3:09:7a:53:47:ca:fb:0f:
90:05:a8:05:c9:a3:fd:c3:b8:ad:b3:c0:6d:7b:dc:
93:83:36:6d:43:1c:1c:aa:59:1a:1b:1a:fb:13:37:
73:08:57:38:d9:be:d9:d4:12:e0:ac:a4:ff:3f:5a:
70:ee:b0:b5:33:9e:a0:8b:15:39:b4:58:7e:f1:0d:
bf:76:e4:f2:26:41:a0:f7:27:90:66:50:06:35:6d:
de:0f:65:10:5e:22:5f:86:7c:9e:05:d9:26:4a:56:
2f:d7:0e:a3:29:de:58:00:a4:a7:70:b2:25:2a:9b:
30:22:07:ef:43:f9:23:cb:8a:2b:b7:2a:b9:83:f3:
68:1f:a9:c1:08:75:fd:73:64:85:da:a8:36:fa:ea:
10:f9:d4:53:d4:fd:81:6c:9b:3a:fd:39:e8:2a:ac:
19:f5:0a:c1:c4:f3:cf:df:dc:91:37:2a:93:76:c3:
7e:af:d4:32:98:9e:dd:d8:fa:15:9b:21:d7:24:dd:
8b:86:16:15:33:a8:12:36:3c:37:28:41:6f:c5:87:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AB:BB:11:E8:4B:4E:8A:49:E4:13:3A:D4:C0:2A:92:19:9F:9F:E9
X509v3 Authority Key Identifier:
keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:fb:c1:f1:ae:09:65:0c:2f:60:03:01:08:c4:82:47:eb:49:
13:6a:6f:48:13:5b:cd:d6:dc:3a:94:05:c0:e6:53:07:ce:3f:
e1:ea:9c:9e:06:f4:89:7f:31:01:cb:30:4d:8a:5d:8c:98:b6:
17:fb:1b:20:24:84:8e:45:fa:d9:2b:f3:8c:67:88:f3:cc:90:
45:f9:36:a3:f4:d2:06:9a:bc:9e:ee:43:8c:e4:a0:99:9d:70:
0d:8a:a9:f1:5c:a1:7c:83:93:4e:c3:2a:3b:09:f3:fd:c2:88:
d3:63:6a:12:78:61:51:00:23:ec:b4:bb:ec:32:9f:d8:fd:72:
69:2d:6e:89:a6:9e:da:39:f3:f0:5e:f8:1a:c7:90:3c:9f:c0:
f2:cb:93:35:ab:bc:33:b1:b3:44:dd:a5:3b:50:55:c5:c1:3b:
26:3e:24:49:d4:62:f3:98:9e:9f:ba:6a:ab:43:a9:5a:4a:63:
10:a3:ee:a4:51:bd:54:d6:1c:e8:b7:8a:a2:06:6b:f6:91:60:
62:6f:24:cf:69:d9:dd:1f:3f:0a:31:d0:cf:ee:55:61:60:10:
e2:ad:65:1e:6e:34:f1:42:ae:7a:6e:67:11:92:05:64:77:21:
23:e6:f7:64:05:24:3c:61:3a:bb:73:db:01:63:8b:ce:e8:9b:
ba:64:46:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz
NENGQzhFMzAwHhcNMjYwNDA0MTkwODQ1WhcNMjYwNDExMTkwODQ1WjAYMRYwFAYD
VQQDEw02OWQxNjFiZC00MzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDzZVd/e476yeHe+h3C059nGu9Sh4NHBp3bTz9GgAgjPFAWNoARiR/VThf/k
lw0dHxXs8wl6U0fK+w+QBagFyaP9w7its8Bte9yTgzZtQxwcqlkaGxr7EzdzCFc4
2b7Z1BLgrKT/P1pw7rC1M56gixU5tFh+8Q2/duTyJkGg9yeQZlAGNW3eD2UQXiJf
hnyeBdkmSlYv1w6jKd5YAKSncLIlKpswIgfvQ/kjy4ortyq5g/NoH6nBCHX9c2SF
2qg2+uoQ+dRT1P2BbJs6/TnoKqwZ9QrBxPPP39yRNyqTdsN+r9QymJ7d2PoVmyHX
JN2LhhYVM6gSNjw3KEFvxYcSLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6ruxHo
S06KSeQTOtTAKpIZn5/pMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx
RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G
YzhQbHNZa01XaHMwejhqakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARvvB8a4JZQwvYAMBCMSCR+tJE2pvSBNbzdbcOpQFwOZTB84/4eqcngb0iX8x
AcswTYpdjJi2F/sbICSEjkX62SvzjGeI88yQRfk2o/TSBpq8nu5DjOSgmZ1wDYqp
8VyhfIOTTsMqOwnz/cKI02NqEnhhUQAj7LS77DKf2P1yaS1uiaae2jnz8F74GseQ
PJ/A8suTNau8M7GzRN2lO1BVxcE7Jj4kSdRi85ien7pqq0OpWkpjEKPupFG9VNYc
6LeKogZr9pFgYm8kz2nZ3R8/CjHQz+5VYWAQ4q1lHm408UKuem5nEZIFZHchI+b3
ZAUkPGE6u3PbAWOLzuibumRGsA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:14 2026 by rpki-client