
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json)
Hash identifier: xqo7yEAb7PDktn+2lmJd0Wh19RkjeqJhE+WkdWSw1vc=
Subject key identifier: 1F:A5:11:34:08:1E:82:D9:1B:3B:FA:D6:55:26:33:65:5E:7C:F7:35
Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Certificate serial: 02CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
Manifest number: 02C9
Signing time: Sun 01 Mar 2026 02:15:13 +0000
Manifest this update: Sun 01 Mar 2026 02:15:12 +0000
Manifest next update: Sun 08 Mar 2026 02:15:12 +0000
Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: HkvY08B5qBFyzMrl/+xjarMhbL82B2pGAR7CwR8Vj3g=)
2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: wBqvUEdJXS+W4twJcgw0kDbGssoYll+0BYZGvLl67rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Validity
Not Before: Mar 1 02:15:12 2026 GMT
Not After : Mar 8 02:15:12 2026 GMT
Subject: CN=69a3a130-57c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:2a:37:1f:45:a2:df:56:bf:a0:e6:6a:55:
69:38:fa:d9:cd:e3:fe:b7:cf:60:20:49:a9:12:50:
38:89:d6:ba:21:32:e2:2a:98:6c:21:80:fb:9d:95:
b1:36:42:79:38:56:c6:79:bf:fa:e9:73:ae:29:81:
80:7a:70:91:08:a9:0c:65:d8:e7:50:47:c2:a3:d5:
33:67:4a:03:4f:bd:1f:69:04:f1:39:00:80:e4:6d:
51:d5:af:89:a8:2e:1a:75:3d:09:0f:1a:c4:94:13:
7c:d7:a9:82:53:61:4d:5f:1f:f2:1e:0b:0e:45:1c:
c4:53:04:73:39:68:e2:c0:e5:a9:66:58:8a:80:b6:
13:4f:5d:e9:e4:e6:3e:0c:60:b7:2d:0b:d8:93:e5:
90:ec:4f:b0:47:84:fe:a2:bc:48:84:68:7d:06:54:
a3:9b:31:9b:4b:34:67:09:b6:92:ef:05:d2:be:f6:
ec:6d:ab:f4:e3:d3:c8:f6:61:ed:50:20:4b:f4:de:
1d:9b:19:5f:83:e1:7a:ca:ce:71:65:9d:be:b5:5c:
51:dc:c1:61:82:c5:ad:ab:08:f8:86:58:9f:77:7b:
ef:44:72:50:0d:c7:cd:f9:94:00:4c:e1:4d:18:34:
15:d5:aa:be:8f:3f:43:21:d4:5a:e2:ef:ce:9e:c5:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:11:34:08:1E:82:D9:1B:3B:FA:D6:55:26:33:65:5E:7C:F7:35
X509v3 Authority Key Identifier:
keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6f:7b:66:3b:da:ed:dd:0e:ee:ae:00:80:da:dc:65:83:93:
d3:f6:8b:34:d6:ac:14:3d:31:c9:01:73:84:f1:65:1a:32:c8:
5d:36:e7:9d:e2:c7:27:b3:9d:2b:aa:83:62:16:03:f6:41:bb:
2e:81:9c:39:7d:2e:27:42:af:7f:d1:00:18:14:b8:ab:8a:88:
1c:ac:b3:ec:79:54:49:dd:2d:3f:9e:c2:bf:03:e7:b3:58:aa:
1b:09:2f:b2:5b:b2:20:8f:42:b0:10:3a:67:73:69:61:d1:9c:
e9:45:72:88:67:f9:39:8f:12:fe:89:df:51:67:de:16:57:ef:
cd:9a:91:40:cf:f2:1c:01:dd:b3:cb:bc:70:d4:80:7d:1d:2f:
7d:f0:79:32:b4:fa:b8:0a:63:d1:9d:b1:e3:64:29:7c:d6:90:
71:29:84:ea:42:f9:98:68:bc:fc:a1:ba:e8:61:d7:fc:9a:4e:
83:10:06:e6:87:9c:56:70:f2:9f:05:60:6e:a6:fd:d0:d4:a0:
46:7a:14:66:1d:af:28:ac:68:dd:c7:62:37:f2:a2:c8:1f:76:
56:9a:98:43:bb:5c:7b:d9:f8:c8:e1:b5:3d:6a:91:3f:27:9b:
0a:af:d6:4b:00:75:dd:0c:a1:ec:54:b7:97:e1:79:08:f3:36:
ae:76:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:49 2026 by rpki-client