
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json)
Hash identifier: FDdhQ39LUwMsrSM5Xn9mjBQDu6xQXtk5+96LA9ji2pk=
Subject key identifier: 69:96:CF:5F:58:4A:6D:07:AA:8E:AA:EB:EF:FA:D7:60:7A:17:B3:76
Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Certificate serial: 07CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
Manifest number: 07C5
Signing time: Fri 04 Sep 2026 21:15:52 +0000
Manifest this update: Fri 04 Sep 2026 21:15:52 +0000
Manifest next update: Fri 11 Sep 2026 21:15:52 +0000
Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: PBjLlC0mAS03Hi3pJaRoOIMIxbGQdc/XmBtTiXjRr8k=)
2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Validity
Not Before: Sep 4 21:15:52 2026 GMT
Not After : Sep 11 21:15:52 2026 GMT
Subject: CN=6a9b3508-b172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:83:85:16:e7:ce:13:59:54:3c:97:a7:9a:
05:3c:25:54:f3:c1:e6:4b:a6:fb:98:22:b2:cf:0e:
a9:0e:c2:23:f7:e4:27:ca:d0:84:98:cb:06:6d:c2:
38:d2:98:ef:4f:79:eb:f8:ad:22:c6:65:c6:ea:8b:
66:55:b5:6d:40:70:25:bb:38:ee:06:4e:5a:c0:cd:
81:c5:1e:9a:64:96:1f:b4:73:74:a3:8f:fb:a6:c6:
4a:8f:61:66:23:4c:8d:9e:d1:50:7d:b9:ff:27:98:
c4:b4:f1:8f:67:e6:8d:e1:7f:69:72:c7:64:6b:26:
04:9a:3d:a8:0e:80:fd:33:b9:8e:a8:cb:91:5c:c6:
29:14:07:d8:2a:be:50:04:b2:9f:3f:d2:31:49:e6:
e2:9f:6c:cb:e9:f4:3d:d4:7f:38:2f:b0:90:d8:8e:
bb:7f:d3:69:23:85:d9:26:3d:d7:d7:cc:9e:92:5b:
1c:40:6c:21:e7:cc:83:4b:37:51:8b:80:98:92:69:
89:d5:49:b0:d9:f6:89:b9:c2:a2:d7:69:2a:c7:77:
5d:25:35:0d:70:7d:90:f2:bf:fa:07:7e:7c:c3:15:
62:0b:51:6f:9f:62:0e:24:a4:e8:ae:d6:d7:82:f7:
bf:a1:76:a3:9c:11:a5:66:0d:96:d9:df:75:06:32:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:CF:5F:58:4A:6D:07:AA:8E:AA:EB:EF:FA:D7:60:7A:17:B3:76
X509v3 Authority Key Identifier:
keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:b9:6a:34:7a:15:84:98:97:fd:c9:c1:d9:ea:9b:1f:d5:cb:
a5:c8:a8:c7:b5:b7:0b:91:5a:35:1d:a4:d4:be:c9:b1:be:63:
43:44:2e:1f:7d:29:47:6b:36:6c:86:68:28:1d:a4:ae:9d:8d:
6e:79:bb:c4:99:e5:26:87:fe:a0:e5:9c:1d:91:c7:a0:62:ab:
d0:49:b5:36:e5:27:f5:d4:91:28:7d:30:56:65:ba:a7:36:8c:
8b:1f:f5:06:7e:3e:4c:11:e4:22:9b:05:05:93:39:df:d0:e3:
66:b4:27:4a:21:c2:7e:b3:32:85:a7:2a:d0:59:dc:c5:30:bc:
aa:60:65:32:a5:33:27:80:e6:3f:53:0e:32:cf:b1:4e:e8:71:
fa:d3:91:fa:93:78:73:76:e1:ec:69:fa:d6:de:e1:9b:d6:64:
ea:b2:3e:18:cf:b1:10:d2:9f:4c:0d:79:b5:89:7d:dd:31:7a:
8f:35:13:4c:52:4a:76:e8:78:c7:fb:4d:47:d6:bb:bf:03:80:
82:ed:f9:06:63:59:7a:a0:ef:9f:6a:f3:7c:65:9a:53:7c:d8:
4a:20:a0:f6:f6:88:9a:61:5d:1d:33:ff:92:78:91:c7:e4:fc:
4b:1c:b7:c3:3d:42:f8:43:95:b2:83:b1:8e:58:2b:a9:fe:a1:
7b:84:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:14:51 2026 by rpki-client