
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json)
Hash identifier: FvYieGJtR8bwyf/zop3pGG8ceLoH9a8odHFHEPmw9/0=
Subject key identifier: BD:F6:7B:0C:19:41:BA:ED:78:EE:9F:00:CA:5E:3A:54:C4:01:5A:AB
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
Manifest number: FA
Signing time: Tue 07 Jul 2026 07:31:05 +0000
Manifest this update: Tue 07 Jul 2026 07:31:05 +0000
Manifest next update: Tue 14 Jul 2026 07:31:05 +0000
Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: 7N8LRhpL7Ox7JNIcaKDVwmMzanX/2zD6eNn1GqeE0sM=)
2: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=)
3: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=)
4: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=)
5: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 07:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Jul 7 07:31:05 2026 GMT
Not After : Jul 14 07:31:05 2026 GMT
Subject: CN=6a4cab39-4542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:ec:7e:4b:74:82:c0:b8:69:c1:e1:8f:a5:
b9:4d:a0:5d:3d:de:29:5d:08:ce:51:6b:af:f0:12:
49:94:56:92:cb:90:e6:aa:d3:90:5e:52:cc:27:fe:
2b:a0:5d:7a:8a:80:f1:6a:a6:bb:2f:1e:66:36:aa:
8f:d0:ad:74:84:93:58:e3:15:78:ab:86:26:6e:e9:
f0:3e:69:40:ab:58:64:1a:ec:92:db:a9:7e:c1:51:
77:21:2b:4c:a4:64:6e:07:c5:14:48:29:38:f6:ab:
99:e9:1a:5f:bf:66:77:8f:b4:af:bb:29:97:99:0d:
fc:0f:3d:e6:7f:e3:a8:fe:e6:b5:76:11:c5:4d:d6:
cb:bf:5f:f3:71:01:aa:9c:d7:f5:10:b3:8a:e7:84:
7e:e5:c8:eb:37:df:1d:56:06:c3:aa:a4:f3:68:07:
5a:db:6a:d9:a9:2c:88:cd:17:8c:4f:41:23:8a:80:
21:6a:fd:b1:a7:89:b3:7e:ee:04:98:41:d5:6a:09:
e1:ad:01:bf:67:f4:cc:32:c1:56:f0:7c:f6:e6:14:
b8:bd:1a:7b:97:ac:e4:16:15:c6:f4:12:e7:fe:79:
2b:10:ee:10:f4:24:2c:b7:7e:6d:0b:29:f5:d8:5b:
09:77:02:43:95:b5:48:73:ec:b1:57:9e:8d:b9:53:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:7B:0C:19:41:BA:ED:78:EE:9F:00:CA:5E:3A:54:C4:01:5A:AB
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ed:7a:08:15:69:4a:ff:c3:ad:f6:8a:39:7f:23:bd:97:29:
7c:83:92:55:d5:0a:4f:8a:d3:7a:92:cb:66:94:2a:6c:b8:3c:
ae:dc:a0:f2:06:f4:af:43:0e:15:b8:5c:3a:76:07:17:ff:c9:
81:fb:bc:b9:c1:9c:de:1c:3d:9b:74:69:8e:85:9b:17:08:bb:
f4:a6:5c:e6:05:48:9a:c0:cc:d1:be:40:af:75:d4:d9:29:f7:
b2:28:d6:b7:a7:cd:ad:e8:5c:0c:ab:f9:c8:e6:ce:cb:60:fa:
c3:5b:ec:f8:3d:e8:78:dd:56:fb:7b:4f:13:34:a3:1c:78:86:
ce:d3:40:4a:22:96:8c:b3:6d:45:8d:f6:ba:0f:60:d2:3c:27:
e1:70:96:7d:5e:f0:ae:61:ae:4f:14:8f:82:45:45:d6:13:0f:
35:d5:1f:d9:d0:07:34:ba:18:9e:73:1d:70:d1:5d:8e:49:3b:
fe:d6:5e:75:9a:bb:9e:ce:65:7f:59:36:a9:87:47:c8:d6:ec:
6d:97:7f:a3:72:24:1c:1a:9a:d7:9c:72:24:35:a8:74:9b:fd:
6e:b3:dd:ec:7c:6d:15:8e:34:a6:b9:f0:7a:d6:4b:76:c9:12:
1a:b1:46:cb:7e:35:b3:47:18:80:00:f0:20:66:f4:64:9a:99:
34:f3:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 03:45:05 2026 by rpki-client