
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier: lUICIITlj1yNCXlPVvolrNLKm/Tq70oIkNMwKdUYO58=
Subject key identifier: A9:9D:53:6E:0A:D1:9D:2C:6F:03:02:B9:85:28:54:FB:9F:1B:6B:31
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 071B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number: 0712
Signing time: Tue 22 Sep 2026 21:49:42 +0000
Manifest this update: Tue 22 Sep 2026 21:49:41 +0000
Manifest next update: Tue 29 Sep 2026 21:49:41 +0000
Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: blGTcTL2tlMHDEteZkI5KnIUGg/Z2srijmkFQ+bFzsc=)
2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Validity
Not Before: Sep 22 21:49:41 2026 GMT
Not After : Sep 29 21:49:41 2026 GMT
Subject: CN=6ab2f7f6-bb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:25:e5:c7:fa:3e:03:67:88:66:7c:7d:4c:
3e:a5:2e:29:f4:0f:b9:1b:04:60:4b:af:ea:65:43:
c9:4a:77:58:77:8c:3a:cf:5b:45:c8:3b:a3:8f:37:
87:97:6b:d7:8b:7d:9c:ff:3f:fc:c4:db:16:33:20:
4f:01:8a:00:13:ad:62:80:38:0c:86:7b:61:aa:92:
f1:14:3f:8d:03:2e:2c:1d:cb:a7:b2:75:64:f8:c0:
cb:c0:20:57:2f:ef:13:5a:58:ce:0b:c0:35:9b:4d:
31:08:45:49:ba:8e:f2:dd:33:f2:80:9b:7d:37:0e:
4a:5e:fb:5e:85:32:ce:18:b1:35:12:87:64:b7:c2:
ec:ea:9b:59:c6:71:fb:b7:c8:6e:0f:8d:67:a9:9f:
dd:50:9e:aa:5a:81:7f:c4:0e:8d:7f:c8:32:a9:36:
db:b1:b3:8c:2e:23:63:c7:ec:d8:19:7a:0d:b9:ac:
da:9b:67:a1:a6:00:55:98:c5:3d:58:66:60:b0:8a:
2f:75:d0:5c:18:a8:46:85:8d:12:8f:41:b2:be:36:
24:bd:22:5f:b9:4c:e5:fa:e6:67:43:47:d7:9b:3b:
2d:8b:97:a1:23:a7:9e:53:bf:d4:3e:0e:64:23:9c:
82:c5:fd:ca:9b:43:83:2d:6c:2c:c3:ab:ea:70:8e:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:53:6E:0A:D1:9D:2C:6F:03:02:B9:85:28:54:FB:9F:1B:6B:31
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:97:52:af:d6:0b:83:cc:16:bd:50:77:55:ae:7e:3f:aa:
bd:78:02:2e:0d:64:9e:f2:07:a2:96:da:62:bf:a3:ef:f2:c7:
9e:47:70:bb:c9:2c:fb:81:d7:b4:d6:8c:b8:7a:b9:73:a7:6e:
eb:93:b8:8a:b8:01:84:9e:ab:30:5a:56:15:93:a8:be:53:d1:
87:6a:1e:f7:63:53:de:1e:ed:3f:7c:4c:69:6b:c7:39:48:ee:
57:dc:2c:bd:a6:b3:67:ca:ac:e8:4e:8e:23:ab:6c:63:ed:f5:
09:37:1c:76:1f:41:8b:82:be:34:e1:4c:d8:a4:9a:13:2f:a0:
a4:8c:19:da:b4:c7:8b:be:52:27:ae:8c:20:f2:d1:c2:09:55:
71:be:08:21:b8:5e:ba:6c:92:93:3e:12:1c:f7:9f:50:68:7a:
ca:ae:36:f7:4d:61:d8:83:cf:e0:74:44:b5:ad:80:d2:f8:20:
81:5f:48:4e:64:d7:09:a7:e2:13:4c:08:4e:52:98:07:66:c3:
2d:b0:07:2c:8c:d3:f7:d3:43:53:f3:2f:3c:56:c8:66:a6:75:
14:e3:5a:01:73:69:96:e1:e4:28:c0:09:46:7e:fd:ae:f1:95:
15:fd:3d:46:11:49:5f:5a:70:d8:e3:f0:a4:6e:2b:53:41:7e:
c4:f6:8f:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw
MTIzNkIyN0MwHhcNMjYwOTIyMjE0OTQxWhcNMjYwOTI5MjE0OTQxWjAYMRYwFAYD
VQQDEw02YWIyZjdmNi1iYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnl8l5cf6PgNniGZ8fUw+pS4p9A+5GwRgS6/qZUPJSndYd4w6z1tFyDujjzeH
l2vXi32c/z/8xNsWMyBPAYoAE61igDgMhnthqpLxFD+NAy4sHcunsnVk+MDLwCBX
L+8TWljOC8A1m00xCEVJuo7y3TPygJt9Nw5KXvtehTLOGLE1Eodkt8Ls6ptZxnH7
t8huD41nqZ/dUJ6qWoF/xA6Nf8gyqTbbsbOMLiNjx+zYGXoNuazam2ehpgBVmMU9
WGZgsIovddBcGKhGhY0Sj0GyvjYkvSJfuUzl+uZnQ0fXmzsti5ehI6eeU7/UPg5k
I5yCxf3Km0ODLWwsw6vqcI6ArQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmdU24K
0Z0sbwMCuYUoVPufG2sxMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw
NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs
aE9Rck5ETk04WElCSTJzbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGayXUq/WC4PMFr1Qd1Wufj+qvXgCLg1knvIHopbaYr+j7/LHnkdwu8ks+4HX
tNaMuHq5c6du65O4irgBhJ6rMFpWFZOovlPRh2oe92NT3h7tP3xMaWvHOUjuV9ws
vaazZ8qs6E6OI6tsY+31CTccdh9Bi4K+NOFM2KSaEy+gpIwZ2rTHi75SJ66MIPLR
wglVcb4IIbheumySkz4SHPefUGh6yq42901h2IPP4HREta2A0vgggV9ITmTXCafi
E0wITlKYB2bDLbAHLIzT99NDU/MvPFbIZqZ1FONaAXNpluHkKMAJRn79rvGVFf09
RhFJX1pw2OPwpG4rU0F+xPaPcw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:55 2026 by rpki-client