
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
File: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft (raw, json)
Hash identifier: VnRQozxMLo0NS8SNerXjxQxDJ8PG97YRd/zsRuerR/A=
Subject key identifier: 77:93:0F:30:3C:C1:A3:DE:62:B9:79:EC:60:3E:3F:7A:31:09:CC:42
Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
Certificate issuer: /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
Manifest number: 0880
Signing time: Sun 04 Oct 2026 20:52:18 +0000
Manifest this update: Sun 04 Oct 2026 20:52:18 +0000
Manifest next update: Sun 11 Oct 2026 20:52:18 +0000
Files and hashes: 1: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl (hash: 7NxW1JZ1RU9jyPkqNaCrFQNSEKISToXtyuzItH7mu+Q=)
2: E7BAB834B5F511F0B410AD78C4F9AE02.roa (hash: uxSAnvR6R6IbVNUOgDxpWGpdmYbvPquJW1vjjs3knts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Validity
Not Before: Oct 4 20:52:18 2026 GMT
Not After : Oct 11 20:52:18 2026 GMT
Subject: CN=6ac2bc82-acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:a1:9e:7a:48:00:ca:c9:6d:89:ba:0c:36:
b5:5c:b8:63:a0:32:fe:b8:c6:f3:ec:ca:a5:04:ae:
15:fe:52:ae:dc:49:0b:27:ae:be:eb:2a:30:8b:bb:
9e:7e:ec:8c:0f:c5:3d:ee:c3:7d:14:6a:6e:92:01:
86:a3:b6:9b:7c:af:c7:fa:c0:59:50:35:e8:02:39:
10:cc:cb:9b:bb:2a:e3:9d:5c:fb:1d:76:db:7a:a5:
50:d3:b7:d3:ec:d9:ea:85:06:ca:be:78:73:d6:04:
33:9d:23:2f:46:13:59:ba:ce:ce:d3:ac:1f:c4:51:
90:75:34:b2:d8:af:10:2c:b6:79:99:04:7f:ec:08:
8e:9b:96:69:0f:49:fb:13:33:f1:f3:30:6c:dc:d0:
45:2d:dc:cd:13:f0:80:68:ab:70:31:77:96:ef:dc:
f0:53:a7:4d:4d:3b:e7:5d:1a:f9:0c:8d:35:aa:95:
14:a7:8f:3e:6d:01:8d:04:db:e2:d0:74:d9:7d:87:
eb:93:f5:32:16:04:56:4c:0e:1f:35:e6:cb:70:89:
f6:48:6b:5e:09:35:57:b8:ed:5e:fc:68:71:e5:0e:
f4:ef:39:db:c3:21:d7:76:04:56:92:92:a8:c5:f6:
e7:7e:69:21:43:fb:34:77:13:ac:6f:37:15:72:54:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:0F:30:3C:C1:A3:DE:62:B9:79:EC:60:3E:3F:7A:31:09:CC:42
X509v3 Authority Key Identifier:
keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c3:de:20:75:7a:c5:99:06:ac:23:a5:b3:24:52:66:11:d7:
69:44:6c:ae:ac:a6:01:22:a3:94:9d:6f:93:d9:19:bb:8d:1a:
2c:fe:85:7a:0c:5d:a7:08:04:7a:06:fb:c3:6c:58:1a:9b:e9:
43:04:da:ba:c3:51:d7:d1:51:ef:bf:5c:de:7f:8b:d2:f9:dd:
19:4c:7d:7c:6d:42:a8:ab:3a:5a:a0:54:fd:99:aa:00:f3:1f:
d7:59:ef:04:76:f4:a7:5b:d0:63:cc:42:d9:08:e8:e8:8d:e9:
44:8a:0c:d9:81:7e:04:07:ca:8d:31:ef:fe:cd:03:69:13:e2:
72:3d:86:89:6b:15:3f:83:06:4f:80:48:b7:59:a9:e4:bf:c4:
c9:2e:bd:4a:fe:45:4c:3b:66:2f:d8:80:c5:65:90:f9:5e:b9:
74:50:52:99:fd:60:b6:69:51:84:26:e1:0e:e4:99:41:ec:3f:
21:cd:a6:69:5d:43:f1:a7:22:50:79:6a:05:a1:ae:36:22:58:
5f:55:ad:a7:b2:48:f2:8a:d3:99:7e:42:59:ff:ed:bc:a5:cb:
7b:02:15:7d:d5:20:87:c3:2e:f8:84:2c:c9:ea:9c:d5:f8:55:
fb:fc:4b:49:ed:d2:37:c5:ae:a1:aa:fd:fd:24:09:e5:77:eb:
34:01:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:59:23 2026 by rpki-client