
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File: Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier: OOvqGCiYMog1qbk/eAGc8wo0jY15JlI7pR7/ZIumwio=
Subject key identifier: 82:D3:77:CE:BE:6E:FA:74:3A:A6:FB:AD:61:42:C4:AE:FF:5E:38:FE
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer: /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number: ED
Signing time: Tue 03 Mar 2026 05:59:39 +0000
Manifest this update: Tue 03 Mar 2026 05:59:38 +0000
Manifest next update: Tue 10 Mar 2026 05:59:38 +0000
Files and hashes: 1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: TGqsmiFrelCCr0Yumxwk1HbnSYkFO6wV3KXKCMNIu00=)
2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Validity
Not Before: Mar 3 05:59:38 2026 GMT
Not After : Mar 10 05:59:38 2026 GMT
Subject: CN=69a678ca-3679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:fe:ce:62:41:3c:44:06:be:ec:4f:88:ba:
c7:2b:d2:ee:90:75:f9:6b:70:6e:69:08:a3:1d:0e:
2f:16:33:e7:1b:99:7c:f3:9d:f3:86:1a:63:70:9f:
3b:32:6e:5f:48:09:96:af:40:3d:03:1a:25:42:3c:
85:cb:2b:ab:6c:25:63:92:10:d5:88:0c:8e:da:cf:
99:d9:b2:89:de:11:e6:36:a3:3d:ba:2e:a4:10:60:
a7:6c:95:ba:d4:e0:6b:5d:98:8d:79:ac:f2:a6:c1:
7f:e4:4e:67:00:92:b0:f7:cd:2a:b8:10:55:36:61:
aa:fa:4f:cd:37:6f:a9:81:90:82:c5:a1:cf:14:6a:
13:54:d7:af:02:ad:53:82:f9:9a:93:2b:2b:18:d4:
fc:60:dd:10:05:f9:5c:5f:47:2c:ce:80:46:48:4a:
b7:4b:15:32:39:cf:51:4c:87:ca:e6:d9:61:0d:19:
11:ce:2e:8b:1e:67:11:40:5e:b7:f7:bd:1b:c1:56:
ae:93:16:51:35:49:3b:c9:bb:e3:f5:91:72:ab:4f:
92:c4:4d:e4:d8:93:ad:00:ed:f0:c4:1e:91:4c:94:
76:f0:76:38:aa:e7:28:11:8f:ce:07:41:72:8c:7e:
d3:e5:a8:f6:cd:5e:41:ee:4f:ad:c6:74:55:95:1f:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:77:CE:BE:6E:FA:74:3A:A6:FB:AD:61:42:C4:AE:FF:5E:38:FE
X509v3 Authority Key Identifier:
keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:ff:5d:d1:40:2a:88:b9:b9:f3:6f:e1:56:6c:cd:9b:4b:
0b:c8:6e:18:ba:3c:15:32:03:08:12:85:41:f5:c6:6c:b4:4d:
ad:52:5f:32:c7:43:17:d8:63:87:07:94:a0:a8:0f:31:33:f0:
4f:01:c0:ec:0d:e0:43:68:df:59:d7:48:b3:7b:a6:8e:17:e2:
d7:13:07:7d:fb:d1:a9:d5:f0:85:51:66:d6:13:83:13:19:92:
ae:ad:c9:f0:4a:b4:ce:bc:23:24:c0:b4:46:38:42:91:cd:eb:
84:22:ff:4d:ac:fd:b1:59:c7:e5:7f:ec:ef:ad:9b:4f:95:fb:
c8:8c:8c:40:d5:7f:80:51:86:58:1f:22:8b:12:fa:37:c8:e6:
64:8a:89:fa:38:3b:bf:a1:5b:b8:d4:db:b1:4e:14:d1:88:d7:
f0:1f:b6:17:bd:d7:47:06:a9:5a:a2:ff:b2:02:36:76:95:24:
0d:f7:b1:5e:68:aa:09:4b:c1:3e:7c:d1:a6:8e:ba:95:17:be:
7e:e9:b8:62:5d:7d:21:d1:26:4d:c3:9e:5f:7d:40:1d:e5:b4:
1a:c8:dd:43:d2:e5:fc:20:ee:cc:41:2f:ed:cf:87:39:1a:97:
01:df:31:7a:3a:0a:3f:ae:61:95:99:85:d9:d4:50:86:b4:cb:
6e:03:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:23 2026 by rpki-client