
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json)
Hash identifier: UhBy0p6ZviB5BPx0GRSViOcxjifurL8j8XmyYdluWV8=
Subject key identifier: 9D:B6:96:52:B2:B6:0E:61:9F:BA:12:A5:7B:D5:1E:AF:69:36:31:DE
Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Certificate serial: 2032
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
Manifest number: 2022
Signing time: Wed 06 May 2026 15:56:09 +0000
Manifest this update: Wed 06 May 2026 15:56:09 +0000
Manifest next update: Wed 13 May 2026 15:56:09 +0000
Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: G+xSrLagF35yC5FlOi3svnS6M35GCtyKxlyoMGg5ch0=)
2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: f53n49BRZ+a4OFczbu9IHjhQmjnGPixaP4vK3+8G2j0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8242 (0x2032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Validity
Not Before: May 6 15:56:09 2026 GMT
Not After : May 13 15:56:09 2026 GMT
Subject: CN=69fb6499-9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:c9:9a:17:75:6f:ad:62:d6:43:ff:cf:d0:
66:87:fd:a5:e0:21:36:26:86:a6:56:80:e2:d4:c1:
39:3a:4c:1c:ca:7e:7b:a0:47:e0:4a:dd:77:f1:df:
90:d8:43:8b:7a:62:74:2b:30:de:fb:dc:f0:a7:b2:
0c:12:2a:f4:21:27:7e:be:62:f2:e8:d7:ca:cc:5a:
94:fe:54:0f:b4:e6:22:ea:35:15:f5:c6:35:e4:46:
04:c8:89:ab:91:ca:0c:04:ab:05:46:56:2c:42:b0:
0c:79:19:37:29:75:af:b0:38:cb:da:c4:83:2b:f4:
6d:86:e0:bf:72:26:30:d2:c7:b4:bf:8f:e1:af:3b:
ae:e2:a1:fa:b5:cf:8d:bf:2f:6f:e5:cd:3b:df:db:
24:bd:4c:90:45:17:42:21:8c:a8:8f:df:a9:32:eb:
0e:e9:50:54:e6:a7:47:70:ff:ac:66:99:df:a9:cb:
fe:d0:11:b8:76:ea:86:da:c7:d7:45:d8:3d:46:e8:
68:6d:a4:d3:e6:44:8a:b2:d8:60:a8:39:bd:14:0c:
23:8a:b5:fe:3f:b4:3d:d9:d6:42:d5:c9:23:44:e7:
c9:e0:23:c5:7c:b9:a9:be:27:27:1a:09:cd:e7:91:
46:56:9b:40:3b:70:56:75:8d:be:a8:98:98:90:22:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:96:52:B2:B6:0E:61:9F:BA:12:A5:7B:D5:1E:AF:69:36:31:DE
X509v3 Authority Key Identifier:
keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:94:c1:be:34:19:42:75:af:d8:65:2a:5a:96:ee:b7:c0:9d:
85:e0:81:dc:15:1e:fa:25:36:e4:c8:ef:7f:4f:59:72:de:16:
3f:c0:0b:5a:be:2c:e0:35:66:d7:3c:d7:ed:bf:ec:6e:61:02:
b1:27:8b:b8:69:32:d6:b7:2e:3c:86:88:7c:77:c9:4b:36:17:
89:c9:f5:7a:c7:d9:27:e7:94:58:23:ac:31:b8:d8:45:3d:91:
e2:62:d3:6b:94:8a:38:27:8b:44:d6:93:b1:e6:83:7c:b8:0a:
14:58:e4:a1:ba:3c:cd:65:43:f2:df:30:d1:60:d0:ff:04:1d:
e5:4a:13:70:04:3f:01:c3:09:ef:4c:6b:a2:8c:f4:ca:e0:0f:
ff:1e:3f:c5:11:fd:bb:91:63:9b:7f:5b:3b:2c:81:33:e0:c6:
87:ea:6a:78:60:27:1e:ff:bf:f1:50:27:d8:f7:b0:c8:46:6f:
30:86:93:14:e5:e4:1f:ab:16:fd:f6:20:8f:3b:b1:9a:4b:fb:
0e:c4:1a:4a:c6:b3:eb:b1:e7:68:b5:40:28:6b:24:79:78:2a:
a7:0e:6c:2e:45:7c:e5:b5:62:7b:ca:26:09:92:40:75:68:1b:
a9:62:a1:f0:e9:1a:22:f4:2b:75:1e:e3:84:6b:f7:f2:21:91:
8b:fc:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:32:25 2026 by rpki-client