
$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json)
Hash identifier: ZgBdGwgDYMniT2VCyTETGGqHdoCjX2ynIxqF7FohH9w=
Subject key identifier: F7:93:AF:CC:E5:AA:C3:1C:C6:97:F4:7A:9F:E3:2B:8E:9B:A2:7D:C4
Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF
Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
Manifest number: 040E
Signing time: Sun 01 Mar 2026 01:15:46 +0000
Manifest this update: Sun 01 Mar 2026 01:15:46 +0000
Manifest next update: Sun 08 Mar 2026 01:15:46 +0000
Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: AB2aLdnOKFDmIThUNAb9WSKGX2w9PmHzE9DK/Yrgiyo=)
2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: 3k13Zb4rUCPiQVhmHXmV79sBuRx9W6om0fkw2CRWuLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl
rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
Validity
Not Before: Mar 1 01:15:46 2026 GMT
Not After : Mar 8 01:15:46 2026 GMT
Subject: CN=69a39342-dd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:1f:4d:e0:5b:df:7c:f4:fe:46:36:80:db:
2c:26:75:22:8b:06:2d:f6:c0:8b:47:5c:23:db:28:
30:95:e9:1a:d8:7b:4d:aa:9a:77:e7:4d:54:c8:c0:
ad:60:7d:0f:01:5f:f8:bd:aa:e8:5c:f4:03:7d:3a:
6f:18:83:38:69:b3:44:8e:c1:37:26:3c:0d:86:db:
b5:b9:06:eb:53:c2:1b:48:ad:d2:b9:8c:8e:ef:be:
b2:c8:22:ba:8c:6b:a6:26:8f:64:5a:8b:e9:d3:fe:
17:02:a9:5a:0b:51:90:87:4d:b2:87:56:f6:6c:50:
a7:4e:c8:17:fa:73:ec:c5:b5:33:d2:6d:64:1b:68:
b1:54:94:c6:b7:47:94:0c:be:11:7b:eb:19:04:c7:
52:50:63:20:ad:2c:ed:fd:1f:4a:69:1d:54:af:32:
6e:d7:fe:c8:3c:db:2d:e6:13:14:5c:e2:64:1b:75:
bb:8f:9a:9c:c4:d1:9d:d1:e1:a8:c7:21:f7:b0:49:
2f:21:9e:a0:1f:c3:2c:dc:ae:fc:46:5e:67:bf:e5:
e3:ff:07:7a:33:3a:2a:86:66:04:ee:64:6f:ba:ea:
cf:ce:7b:86:86:91:4a:c5:0a:51:98:0a:c1:b7:9b:
a0:3b:c6:4c:db:db:5d:63:59:24:2b:4b:fc:1a:5f:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:AF:CC:E5:AA:C3:1C:C6:97:F4:7A:9F:E3:2B:8E:9B:A2:7D:C4
X509v3 Authority Key Identifier:
keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c9:f8:9e:87:07:85:62:11:8e:b0:c5:52:dd:fb:e5:b6:04:
4b:40:c6:7b:82:1d:9f:f9:f5:a7:77:02:66:58:d4:bf:db:91:
2e:a8:34:8b:ba:34:8d:12:3e:ec:94:a8:33:2a:65:a4:42:96:
b0:34:4a:ba:3c:7d:29:e2:81:98:20:c5:e4:dd:59:92:ed:21:
04:c2:2b:96:ff:ed:0c:72:da:93:67:8a:2d:78:f9:a6:b5:0b:
22:f5:76:4a:61:28:67:95:7d:31:2a:99:52:c5:7e:d5:e3:44:
7f:e4:b8:c8:81:27:54:38:31:9d:c9:99:18:f8:34:d1:71:d7:
81:d9:d6:af:44:ab:8c:47:e1:ab:7b:7f:b5:40:95:f0:72:10:
3a:46:20:6a:e7:83:1e:a3:64:cb:6c:1a:a6:72:d9:11:40:e8:
b2:5c:a8:f3:70:ef:21:5b:1e:32:c7:fd:b9:7b:88:39:06:e1:
ae:2e:43:ba:86:c0:b8:cb:d2:ee:6e:fe:6e:e6:53:38:03:24:
65:db:36:ba:d6:1b:68:e0:f7:7d:c3:7b:cc:7a:2e:e2:1f:aa:
50:b4:cd:d0:bc:61:02:40:89:fe:8f:4e:36:32:8f:c1:14:4b:
6c:0b:29:02:29:da:6f:02:de:55:9e:91:8a:00:66:cf:a3:73:
30:fd:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:54 2026 by rpki-client