
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: lNzJ40lT31wFPUViS5kHFyU+1AR8uWaP0JtIMmFQ1RQ=
Subject key identifier: 2D:C9:47:EC:CF:81:84:4B:9B:30:5E:16:8E:8F:05:EE:A9:FB:F9:B1
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: 0124
Signing time: Wed 07 Oct 2026 06:20:27 +0000
Manifest this update: Wed 07 Oct 2026 06:20:26 +0000
Manifest next update: Wed 14 Oct 2026 06:20:26 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: /XGaYAfdkdcqXCMA00rtvAk3tIDLYvsLLNqRINAqxG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: Oct 7 06:20:26 2026 GMT
Not After : Oct 14 06:20:26 2026 GMT
Subject: CN=6ac5e4ab-ef82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:05:6f:6d:15:bd:6c:8a:cd:1d:47:6c:57:
60:57:1e:64:76:4f:b6:c0:f7:1f:b3:87:99:f3:27:
ac:4e:3e:a3:be:56:46:89:ea:95:28:ac:35:5a:95:
b8:b1:47:c0:30:5c:f1:0a:41:2e:bc:11:cf:1d:ab:
a1:99:fe:84:81:dc:aa:20:20:7a:0f:6c:87:b6:37:
18:ea:10:60:05:c7:06:6d:eb:3b:1e:1f:d9:8a:38:
83:52:2d:94:14:2e:07:8d:d1:a8:72:2f:fd:e0:be:
41:fc:30:16:83:1e:f9:15:b7:cc:98:2a:57:a7:78:
7d:38:0b:18:f4:22:c0:12:dc:f9:b9:b2:a5:35:21:
b1:5a:a6:34:37:0a:44:3a:41:5c:21:42:89:6b:3e:
d5:db:33:05:da:6c:f5:74:c6:3c:aa:91:f0:f0:be:
b0:06:28:ff:47:7e:94:93:8e:d9:b6:68:06:68:92:
8d:63:d5:8e:b4:38:7d:dd:57:28:d2:b0:fa:db:6c:
bf:35:bf:8c:24:ef:8f:b9:32:a6:9d:82:28:ad:49:
d3:1d:3b:78:41:98:5a:0d:da:b1:e2:13:a2:99:30:
e7:8b:d3:08:f6:2f:12:39:3e:71:06:fb:5d:49:d5:
ea:ba:02:ca:82:54:a6:c1:08:26:be:29:06:fc:28:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:47:EC:CF:81:84:4B:9B:30:5E:16:8E:8F:05:EE:A9:FB:F9:B1
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:9a:ff:cb:90:16:90:37:8f:0a:d4:c6:7c:14:4a:49:25:6f:
10:aa:93:53:55:3d:c8:16:7d:c9:48:d0:56:a2:69:85:a9:bd:
e5:c1:ca:44:c0:36:31:df:67:21:fe:49:7d:fa:39:5e:20:e2:
9a:3a:fd:e7:9c:12:bc:cf:95:d1:7a:b6:10:9f:9a:6a:9c:06:
e6:41:66:4a:b0:4a:69:f9:3e:05:c1:c3:3b:49:04:39:97:96:
b0:f4:b3:11:92:84:1b:f0:c1:ea:8f:29:8f:7e:c1:51:c8:11:
02:18:d0:fe:39:13:d0:c1:9f:a7:0d:36:f7:2f:12:fe:72:63:
14:71:ef:51:44:ae:fc:87:85:49:29:08:6d:02:20:15:e3:2a:
a3:0f:34:da:11:5b:83:c7:74:a2:7d:cf:7b:3e:40:56:33:cf:
f9:07:d3:fc:6e:5d:c8:b8:35:5a:32:97:4d:78:0d:6f:6a:5f:
31:c3:46:af:15:99:2c:e8:dc:55:a5:17:8d:db:94:5a:61:bf:
14:0d:a7:ab:c9:58:e7:16:4f:8c:ac:86:04:dc:9f:50:99:63:
f8:97:92:ce:91:55:52:06:6b:a9:f9:79:f4:0c:7c:43:3d:30:
ef:d0:1c:ab:39:c7:33:b1:43:43:4f:d1:1b:5b:ff:03:3b:ac:
41:5d:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:25:10 2026 by rpki-client