
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json)
Hash identifier: F4ILrcf2J+da3HZRUNH647LyS3Itu3PfM4T9o76cYSI=
Subject key identifier: 57:08:41:EF:4B:C1:64:1C:BF:31:6E:EE:BD:0F:6D:6A:71:AD:BA:B4
Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
Manifest number: E9
Signing time: Thu 21 May 2026 06:34:00 +0000
Manifest this update: Thu 21 May 2026 06:33:59 +0000
Manifest next update: Thu 28 May 2026 06:33:59 +0000
Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: pREPO6pyaZBa5vFdBCHOtTqbc27USbNNA8AXCsu2QSU=)
2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Validity
Not Before: May 21 06:33:59 2026 GMT
Not After : May 28 06:33:59 2026 GMT
Subject: CN=6a0ea758-0102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:9d:b2:55:18:97:43:1b:80:97:50:0f:df:
09:f7:d1:2b:78:a8:21:d4:92:de:ea:34:3f:dc:cb:
3f:a9:16:6c:16:07:70:26:4e:c4:0e:e3:43:3d:58:
53:ef:78:a7:77:de:b1:fb:4b:2e:49:57:0a:cd:6d:
4a:71:31:cb:dc:09:ad:0e:8d:38:ed:5e:bf:74:f7:
bf:89:b3:89:7d:2a:0b:24:51:15:c3:e0:97:33:a2:
3c:47:c6:8e:c5:a6:a8:4f:7f:e2:fe:85:39:95:ab:
42:55:5b:35:be:87:12:92:d8:1b:a5:80:4b:3d:77:
7d:f4:39:36:7b:7b:91:7d:58:c1:29:ac:7b:72:3f:
d4:0d:5d:e9:e2:b8:6c:e5:17:34:58:0a:32:6a:5a:
e3:10:45:b7:8d:a4:cf:91:1e:cd:47:e5:f6:34:a4:
96:49:16:ff:fd:b7:ca:da:15:a6:8c:d4:0d:27:d1:
1f:17:99:b4:51:89:9f:37:98:3a:c2:92:fb:f5:70:
b8:37:46:8b:2e:50:d5:36:d1:f3:b3:71:b3:d0:02:
bf:3e:68:6c:90:9a:06:34:00:fc:af:b7:93:81:c1:
9c:ae:33:4d:d4:86:b2:45:d5:a1:ba:a1:e7:67:e7:
ee:95:8f:71:30:7b:f9:97:86:0a:ec:a3:56:16:6b:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:41:EF:4B:C1:64:1C:BF:31:6E:EE:BD:0F:6D:6A:71:AD:BA:B4
X509v3 Authority Key Identifier:
keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c6:58:3a:51:0f:c9:c5:7d:0c:12:c9:fd:06:ae:21:7d:88:
27:2f:96:b3:ea:05:cd:e0:b5:11:e7:11:c1:4a:6d:2e:9d:79:
ff:08:7b:21:3b:41:0b:31:37:f1:29:18:f2:64:bb:87:54:e7:
77:75:28:08:c4:c0:e6:4f:68:f4:40:54:ee:02:2e:ff:d7:66:
c2:ac:f6:c7:49:cd:51:1b:a9:c2:3e:dd:37:a0:ea:93:ab:24:
12:75:2b:7c:9b:41:8d:47:ee:ff:0e:a9:7b:16:fe:59:f8:8f:
f3:1c:dd:ac:ff:c9:be:b2:4d:bf:8a:8a:48:0e:46:4c:10:8b:
eb:c2:d7:45:55:c0:7a:2a:4c:cc:ab:ed:2b:e7:15:9d:17:38:
6f:47:e3:03:e0:47:6a:ee:44:55:4f:b0:84:fd:5e:92:31:b0:
e9:eb:4e:be:96:64:63:86:40:a0:ad:f9:5c:af:cc:e9:4f:38:
f5:7f:30:58:32:56:d8:b3:b4:49:21:fa:1f:bd:7c:4f:c8:29:
26:71:a5:06:44:cf:8d:60:42:05:48:89:3f:2f:99:69:56:d4:
06:73:66:eb:f9:d3:df:04:1c:f5:5a:60:0f:30:f6:06:86:31:
7a:fb:b8:47:75:cc:2a:b1:7b:c3:4e:87:f4:13:e0:54:64:19:
c2:b0:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:58:27 2026 by rpki-client