
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
File: kI54kDTxhBXYdZwmo0brgQ71pBU.mft (raw, json)
Hash identifier: nOAZkLf9oWTCNkEyY1W3HU2mnvnYSsHodaC7gu6YUwE=
Subject key identifier: 52:F6:6D:0A:D2:DB:2F:4A:E2:A5:C6:1C:0E:E4:FE:7B:0C:AC:68:96
Authority key identifier: 90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
Certificate issuer: /CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
Manifest number: 0247
Signing time: Mon 27 Jul 2026 03:54:35 +0000
Manifest this update: Mon 27 Jul 2026 03:54:35 +0000
Manifest next update: Mon 03 Aug 2026 03:54:35 +0000
Files and hashes: 1: kI54kDTxhBXYdZwmo0brgQ71pBU.crl (hash: zT0WHSSck/4hZCv+sYgN0t3LSJHpbUzlECD1GJfVJ/k=)
2: 86A2CEB60F3E11EEA4C55465C4F9AE02.roa (hash: BdCHR64jQmcQxz2LQIkbVjA0OA0jAQdPiVvvMKyKatQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B4ED, serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Validity
Not Before: Jul 27 03:54:35 2026 GMT
Not After : Aug 3 03:54:35 2026 GMT
Subject: CN=6a66d67b-2f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:ca:34:7c:9f:be:3d:e7:8c:e9:0a:d7:50:
27:83:49:85:31:98:a3:68:d5:e1:5b:fa:5c:dc:4b:
b0:10:ff:48:a3:0b:b2:d4:01:ab:ba:3d:06:63:27:
8a:b6:4f:ef:9c:6d:65:56:d2:af:f4:d8:78:12:7d:
95:ba:ad:ec:8a:38:bd:12:ec:ec:f8:db:29:45:42:
47:2e:a4:e5:6b:9b:87:d5:e0:31:1d:94:08:22:c6:
d7:9a:37:db:35:3f:72:2c:d9:3d:4b:0b:1a:27:93:
46:a9:d5:2d:e0:fc:3d:e2:28:5b:cb:16:f3:45:8d:
4d:ac:01:18:bd:f6:6f:3b:a5:9a:6b:d7:d4:52:8b:
61:b0:9f:bd:84:f8:b7:f7:4b:9d:8d:30:4d:d4:0a:
af:d7:31:d9:37:6e:01:84:92:ec:93:0c:bd:78:a8:
58:40:3f:00:cf:47:93:f1:db:a1:62:85:de:94:a9:
55:73:fe:06:9e:fe:fd:48:4e:4f:d5:8f:8e:62:24:
0b:b2:02:9a:d8:b7:aa:4b:33:b1:74:1e:52:c7:d6:
29:fe:93:45:03:37:60:76:3f:1b:61:63:53:ec:2c:
82:79:2c:c7:14:20:e2:ff:42:05:3e:ae:6b:e0:c3:
5f:f5:da:30:91:d2:e4:4f:55:4f:95:b8:f2:2d:c1:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:6D:0A:D2:DB:2F:4A:E2:A5:C6:1C:0E:E4:FE:7B:0C:AC:68:96
X509v3 Authority Key Identifier:
keyid:90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:b6:e3:b9:f6:21:55:9f:af:f2:a7:12:28:4b:69:66:fa:
e9:07:8b:e1:11:fb:1e:f6:5a:56:66:88:ff:12:1f:b4:59:7f:
98:f8:18:43:85:c5:96:1c:1c:92:0e:b8:94:0d:8f:81:1c:1b:
e0:53:fd:f3:62:c6:99:98:f3:cb:7c:c9:6a:0e:40:f3:cb:6a:
65:79:dc:2a:41:18:bd:e7:2c:47:90:13:d9:fc:41:28:8a:9d:
d3:b5:1d:62:92:2c:e5:82:04:f7:cd:93:00:65:5f:ac:f2:25:
64:8e:0d:cc:0f:c2:00:06:76:db:9a:03:4f:5c:6e:97:1b:af:
4a:80:53:38:10:fb:40:5d:fb:42:a8:79:e5:31:75:54:e2:0d:
9c:93:27:d2:2e:01:e4:a3:64:7e:26:b7:2a:1c:99:9c:af:f2:
76:c7:ec:f0:fe:4b:7b:70:bc:0e:ba:d8:ae:1e:5c:e6:ea:df:
1c:d7:81:23:a5:55:ab:e1:73:ef:57:f0:40:af:59:37:10:37:
d3:1e:bc:0f:c9:6a:29:c1:68:bf:92:23:91:cd:e8:2f:d3:08:
c5:6d:3f:7b:0f:21:2b:4b:f3:d5:4b:f7:19:93:44:99:c9:f7:
d9:4f:91:03:82:d0:12:1f:c2:23:37:b0:48:c1:72:6c:1b:d7:
bf:17:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:39 2026 by rpki-client