
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
File: kI54kDTxhBXYdZwmo0brgQ71pBU.mft (raw, json)
Hash identifier: rp3udQ0nTqvy6T0omJNhhv4TE2nxXwKoSRS5v5NV9FI=
Subject key identifier: EB:B5:B2:5D:C7:14:9C:8B:A4:B2:C0:D3:52:BE:0D:68:DD:65:CF:F7
Authority key identifier: 90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
Certificate issuer: /CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
Manifest number: 0265
Signing time: Wed 23 Sep 2026 01:59:50 +0000
Manifest this update: Wed 23 Sep 2026 01:59:49 +0000
Manifest next update: Wed 30 Sep 2026 01:59:49 +0000
Files and hashes: 1: kI54kDTxhBXYdZwmo0brgQ71pBU.crl (hash: 9Lt00aCfSlGp3z5ub1HtxeimuXP8VtG7ZS7932QCxds=)
2: 86A2CEB60F3E11EEA4C55465C4F9AE02.roa (hash: BdCHR64jQmcQxz2LQIkbVjA0OA0jAQdPiVvvMKyKatQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B4ED, serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Validity
Not Before: Sep 23 01:59:49 2026 GMT
Not After : Sep 30 01:59:49 2026 GMT
Subject: CN=6ab33296-1acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:c3:09:de:70:9c:92:6b:32:cb:38:f8:b2:
78:bf:a4:e3:49:cc:64:36:22:48:29:2f:39:23:3a:
f6:33:0e:b4:8f:09:05:a6:99:2c:d4:06:6a:19:1a:
5b:35:13:81:69:c2:96:d1:5a:03:8b:43:3d:ba:1c:
0f:74:6c:8c:10:a3:27:ef:60:a7:21:7f:c7:28:40:
db:55:0a:d8:fd:8b:01:9a:c7:2e:9b:c8:6d:13:94:
ca:8b:c8:50:e4:54:04:bb:4e:9b:09:44:8f:7a:03:
24:3e:30:89:a0:68:de:17:30:d4:e5:d2:7e:4d:a1:
a2:72:c0:8d:34:62:49:2d:d1:0e:96:51:5d:c2:ee:
ac:31:ba:8b:3d:82:25:06:85:1e:be:49:54:87:d0:
86:fc:ae:84:1f:63:b1:13:fe:76:c7:18:b1:51:74:
2c:54:73:45:6e:10:f0:8d:74:18:91:58:20:f7:ca:
3e:b9:fc:98:95:56:a0:12:e4:37:0a:92:02:a9:99:
0f:60:b1:4c:73:aa:c4:f8:2d:37:04:b4:ce:53:81:
64:4b:1a:f0:55:12:04:28:42:00:b8:02:60:15:1c:
6d:41:9a:30:39:7f:d7:04:e9:f7:14:62:e5:32:28:
bc:ee:c1:8e:81:39:b9:2f:45:88:d8:02:3b:96:e4:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B5:B2:5D:C7:14:9C:8B:A4:B2:C0:D3:52:BE:0D:68:DD:65:CF:F7
X509v3 Authority Key Identifier:
keyid:90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f3:1a:e7:e9:24:62:1f:47:3c:e4:cb:e0:ba:d6:4f:b3:dd:
ff:aa:5a:38:cb:85:0f:1e:8b:37:bb:92:6f:c8:13:40:e1:c3:
b1:aa:12:41:3a:88:5c:5a:9b:7a:16:6a:d5:13:90:12:4f:fe:
a9:55:58:0b:b8:3a:7c:7e:27:76:54:26:47:b6:0d:21:28:25:
d0:23:9c:8b:5e:e6:27:25:cf:71:61:52:3e:d5:c4:4b:16:be:
20:ff:86:5d:6b:ec:aa:f7:c6:3e:2d:32:ed:40:25:56:47:6f:
24:52:f8:df:e6:76:75:d2:73:f2:02:87:04:0f:3b:fd:c2:1c:
a5:c2:e7:0d:9c:65:6c:6c:a5:de:a1:73:b4:5f:f6:1b:a4:5e:
bf:28:f1:2a:7f:74:7c:96:e9:2b:1e:78:c5:f8:8f:00:09:62:
e0:e3:4e:df:92:14:27:27:ca:3d:1f:15:09:e5:27:a2:9a:03:
35:73:46:85:dc:95:8b:fb:8c:30:d4:ed:2b:1e:f1:ae:66:64:
ac:df:1b:b6:2e:ab:7e:f5:e8:d3:fd:27:88:3c:ad:c8:39:83:
c4:59:a0:78:0d:6e:b0:b1:76:c9:1f:b2:db:ed:f4:08:d9:d6:
82:93:f7:3f:54:48:60:35:e8:57:c2:28:c6:bc:74:d8:70:d9:
10:85:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:53:04 2026 by rpki-client