
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json)
Hash identifier: NJ6j1Kentap6AX9OY9uQ5cOx9h2KcE37sWXjkcrmDKQ=
Subject key identifier: 5E:69:0A:07:E2:F4:8A:81:69:55:14:13:C6:FF:E0:52:80:10:24:16
Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47
Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
Certificate serial: 05FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
Manifest number: 05EE
Signing time: Thu 16 Apr 2026 22:51:04 +0000
Manifest this update: Thu 16 Apr 2026 22:51:04 +0000
Manifest next update: Thu 23 Apr 2026 22:51:04 +0000
Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: OlJKHUDDpgfdWxkKU9z5dh+uObSvona9//0lqCkqFJY=)
2: C41538940B4711EC99840631C4F9AE02.roa (hash: V6JHUzOLGDXoFaxiTUAua6l+IvXzjhCqWaQC1lRJApU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl
rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47
Validity
Not Before: Apr 16 22:51:04 2026 GMT
Not After : Apr 23 22:51:04 2026 GMT
Subject: CN=69e167d8-5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:e9:63:20:30:39:c0:35:b3:73:83:89:c0:
b3:7d:c0:a7:55:b2:8c:9e:c1:47:a6:6a:32:39:d6:
e1:fb:64:f3:c9:2e:7e:77:0d:40:10:86:59:8b:30:
cc:96:b0:62:00:ca:44:2e:48:20:5c:bc:a6:c3:b8:
b9:63:7e:00:59:7b:6b:55:b2:9c:b9:27:f2:fb:f0:
9e:91:40:f9:b9:5e:12:69:93:f4:06:ea:bb:18:a3:
e4:a4:1c:2e:ee:da:f9:08:fa:52:d0:bf:f6:bf:77:
a4:da:e5:2d:55:cb:75:13:a9:11:19:ed:f0:6b:64:
c0:ea:be:7f:ad:40:f4:af:6f:2b:a9:b6:4a:b0:a0:
e8:19:a8:c4:b4:79:a3:77:b4:7f:63:c4:77:09:a0:
13:90:fe:66:82:8e:bd:bb:fa:75:d0:df:71:c0:15:
85:cd:50:21:75:14:02:fc:a2:a3:fe:94:ff:3d:33:
eb:e8:f7:9c:e9:dd:ef:9b:8f:12:1c:d1:71:90:31:
b4:61:85:cb:88:c5:a6:5a:b5:22:cc:84:df:67:9b:
a2:4c:f4:d4:1c:60:b2:be:04:1c:84:f6:b8:70:0c:
3e:3b:c8:77:ec:ad:b4:83:0f:75:ef:aa:99:28:5a:
12:3c:ea:09:82:cd:9f:94:78:b4:de:7e:32:3b:1c:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:0A:07:E2:F4:8A:81:69:55:14:13:C6:FF:E0:52:80:10:24:16
X509v3 Authority Key Identifier:
keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:0e:a0:8d:e0:f5:02:f3:e8:5e:1b:c8:b6:17:48:c8:53:
a0:8e:5a:3a:2f:89:20:91:26:c0:d6:64:26:4c:1a:29:8d:5a:
d9:52:4f:8e:11:34:0b:4f:0b:22:00:f4:f5:de:9c:80:d3:20:
95:f2:0c:a8:84:c2:40:64:01:5e:ce:8b:28:71:df:50:1a:ba:
d8:46:f8:9a:3e:61:a5:ff:11:ac:4d:10:b9:24:b7:ad:d4:45:
6a:f3:cc:1e:70:4b:79:a7:60:c4:36:ca:67:c8:f5:74:8c:e6:
c5:0c:85:94:af:5e:dd:23:d3:41:d0:74:67:a7:e6:6f:8d:a2:
aa:2e:50:bd:1d:65:be:d6:24:f6:b6:eb:9c:2e:7b:00:72:a2:
02:7d:66:df:ec:40:bf:31:81:33:f0:88:1a:20:42:3a:94:0b:
6f:40:0f:ee:7a:6a:c6:43:82:ea:48:2c:e4:07:7d:01:86:db:
bd:68:9e:a8:63:78:13:7b:b4:a4:16:87:20:a2:e8:90:b4:7b:
29:d1:25:e0:50:e5:7f:d8:b9:30:55:f9:b0:4a:c2:cd:90:4c:
2a:5f:05:82:98:7e:ba:69:79:f8:26:ae:a9:c6:ae:47:ca:e2:
a0:51:33:23:98:3e:50:93:c8:37:49:ee:cb:e3:28:17:7c:0a:
46:cd:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:56 2026 by rpki-client