
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft
File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json)
Hash identifier: CI5gK1WVGjTbsyn58ErTfl+lHUsBVkn1+gnYJDli1iM=
Subject key identifier: 23:5E:81:52:92:D6:E0:19:13:65:A8:7C:9F:06:A1:E8:F2:08:08:D7
Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11
Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft
Manifest number: 69
Signing time: Fri 09 Oct 2026 08:49:07 +0000
Manifest this update: Fri 09 Oct 2026 08:49:06 +0000
Manifest next update: Fri 16 Oct 2026 08:49:06 +0000
Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: +9ySNaguBsJdWz8Lga3yQ13Z346xs+NvfIyyciuw1tM=)
2: E667E45629D211F19DF1399897833773.roa (hash: SD1U0oEAY17iDXAUSZr2OKlv5Jwiojbt4ibmLhQz9DM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl
rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311
Validity
Not Before: Oct 9 08:49:06 2026 GMT
Not After : Oct 16 08:49:06 2026 GMT
Subject: CN=6ac8aa82-77ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:87:c7:a9:97:76:9e:eb:09:c1:84:f3:97:
2b:4f:08:43:26:66:4c:63:5c:4d:04:ce:24:a5:70:
17:fe:b6:b3:ad:f7:dc:fe:09:26:54:09:da:9e:36:
bf:49:2e:cc:c5:15:f1:19:b9:bf:00:11:0f:9d:58:
2e:22:32:b9:02:72:2a:86:09:8d:1c:e3:0c:51:88:
db:ce:63:57:0b:43:92:18:d4:1a:e5:15:3d:dc:13:
9c:85:b3:c3:0a:ef:19:da:09:85:b8:00:95:ca:28:
20:b0:80:a5:b4:b4:87:9c:c9:bd:33:19:af:56:2b:
99:b5:30:3e:f2:43:a1:d0:8e:85:f8:fa:76:df:55:
8c:81:41:4f:9f:0d:7d:42:bf:11:2a:4d:09:76:c9:
24:8d:69:7a:7b:00:a7:c9:38:1b:ea:b8:53:44:ff:
95:33:c2:51:38:13:c0:be:f7:cd:27:6f:0c:57:39:
0c:d1:a0:93:d9:dc:a2:0f:4c:a1:68:32:b3:55:c6:
d3:29:ef:43:e4:96:96:cb:29:ef:66:c1:8a:7c:68:
4c:4d:74:0b:de:79:e1:81:e7:9b:be:19:47:8e:1b:
75:bf:a3:60:61:3b:0d:63:34:dd:5e:05:3b:fa:ff:
bf:f8:0f:11:79:b9:93:ee:d9:d4:24:72:f5:a4:38:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:81:52:92:D6:E0:19:13:65:A8:7C:9F:06:A1:E8:F2:08:08:D7
X509v3 Authority Key Identifier:
keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:17:98:d9:c4:e2:07:4b:b0:cd:f4:ec:ae:c6:61:23:82:0c:
37:64:3e:c1:ca:68:3b:db:a2:72:6f:ec:13:bb:31:ec:73:92:
03:46:fd:b6:39:76:08:ea:2e:cb:4e:5a:9d:2b:72:b9:9e:82:
7d:22:a1:49:44:fd:a6:b9:23:37:4d:d5:66:6e:d9:c7:2e:c0:
44:7b:38:3e:c3:0a:3f:3e:c1:0f:92:e3:71:00:30:23:ea:48:
8a:3a:95:41:00:66:b9:05:1b:07:e7:a6:6a:20:52:af:22:4b:
51:16:40:cd:b3:4f:b3:f2:3c:2e:1d:b9:f7:93:5d:ff:45:4e:
69:8b:63:e1:d9:02:31:ad:d6:97:9e:05:00:30:ce:67:98:c2:
98:62:ed:d6:07:98:19:b0:4b:06:f2:7f:15:f1:a2:11:8c:3c:
54:c4:e3:13:40:74:25:f0:7c:88:0a:ee:db:7f:54:5c:a2:61:
19:3f:3b:e3:ec:3c:6b:c6:2d:cb:79:38:15:d4:69:80:52:78:
13:14:bb:4a:bb:a4:ab:c3:70:01:3b:c8:eb:53:44:f1:3e:32:
59:0b:0c:ee:46:74:b8:91:ad:17:0c:2e:08:58:3b:27:6c:ac:
24:48:35:6a:8a:42:e8:e6:bd:2f:6c:62:b4:ac:74:32:97:70:
e0:c3:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:25:39 2026 by rpki-client