
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json)
Hash identifier: 4/RD+2nx8v7KYwhfOBw9L5wyF4fd0xpzZG4VbSM1J0I=
Subject key identifier: 0F:24:4C:46:0C:BA:9A:8A:4F:E4:14:5E:9C:D8:8E:8C:99:E4:B5:FC
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial: 02AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
Manifest number: 0298
Signing time: Sat 13 Jun 2026 01:41:12 +0000
Manifest this update: Sat 13 Jun 2026 01:41:11 +0000
Manifest next update: Sat 20 Jun 2026 01:41:11 +0000
Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: QYmzLbwbnAya0kdNwCukUgq6NNnBAINc2pMiGpiV/38=)
2: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 3uTrRG1V9dC0o0IOwmSmMEJhHbML0nSq3yiQY+3J84k=)
3: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: lyLkwnvPiADGaBvpMXNqGtu0ktHuqEPAoUGEfoeoW7E=)
4: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: yctNWWiZhPVXhgLMblmsUERi9o24TYY6zYqQrUfyMsc=)
5: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: sa00jH8bw4HUITlYrffZw+f88KkU69vSq0M65+ZIMYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Validity
Not Before: Jun 13 01:41:11 2026 GMT
Not After : Jun 20 01:41:11 2026 GMT
Subject: CN=6a2cb537-7e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:96:3f:62:c9:a8:80:0b:5c:1f:eb:08:df:
66:47:63:7d:e9:83:01:52:e0:a8:35:07:a5:a3:25:
29:68:f3:b6:00:45:01:82:2b:ae:98:b4:6f:56:91:
50:14:c6:36:dd:1a:21:36:c8:e3:2d:66:9b:d7:34:
60:1c:96:ca:3b:66:79:f1:65:a1:3a:df:d3:4a:c0:
94:c6:18:26:23:f6:87:e0:47:53:95:ab:3e:c1:db:
10:54:38:b0:d0:bc:1d:c0:41:1a:c1:1e:86:4b:c7:
25:1c:ef:eb:c1:82:dd:d3:08:41:3b:f5:96:e8:4b:
b1:ba:14:84:69:7a:9e:aa:2b:b6:c5:9e:f7:78:6e:
53:67:69:ec:f4:0d:0a:18:f4:9d:86:16:ed:9c:97:
20:92:aa:86:26:2c:2f:1b:83:e6:8e:5d:ce:48:b4:
f7:97:1f:12:ba:f6:84:1a:51:6b:aa:54:32:10:a8:
b4:e6:ad:51:fc:f3:50:cb:05:42:7d:16:c2:4b:5b:
6b:85:46:4b:3c:41:1f:22:37:91:87:5c:d7:f5:bb:
f0:64:e6:9b:ef:0e:3b:76:08:ad:33:0c:95:98:0e:
ad:e4:3d:16:22:4a:f8:d1:a6:0d:27:01:8f:33:da:
2c:39:75:99:f9:24:78:a6:72:7c:8b:02:3d:5e:31:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:4C:46:0C:BA:9A:8A:4F:E4:14:5E:9C:D8:8E:8C:99:E4:B5:FC
X509v3 Authority Key Identifier:
keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c8:a6:f8:c5:ad:97:13:14:b4:88:06:85:60:88:e1:68:02:
f7:3e:af:08:59:06:a2:6a:42:e8:4c:db:7c:26:63:51:1c:a9:
0b:28:7e:f1:49:6d:0c:b1:94:ee:c3:69:b6:4d:75:8d:ce:c9:
fd:a2:ca:16:f1:c3:e4:8e:fa:a8:e4:79:18:ea:5d:3c:c9:c2:
fa:4d:e3:cd:ab:ce:c0:16:b5:20:bb:ca:ce:56:bd:74:28:3c:
3c:0e:ef:e0:df:2c:53:61:d7:9c:6a:0e:fa:1d:b3:99:00:ac:
fb:3c:6f:85:b9:0e:38:f8:68:66:5c:4f:03:86:57:e7:08:30:
96:8a:95:78:85:c8:dc:f3:11:82:c7:fe:62:43:16:f8:d6:01:
82:42:99:77:45:0d:9c:c1:56:59:a5:ab:51:aa:d0:74:3c:59:
dc:5e:65:4e:40:c0:ce:3d:a3:db:c2:3e:3d:b3:ec:cc:2b:58:
fd:a3:a6:f9:49:b4:fe:94:1b:9a:84:2d:7d:53:7b:80:7d:66:
4b:ec:17:b2:35:5b:8d:35:31:bf:17:68:51:60:62:8f:cb:1a:
34:aa:a9:ae:03:4c:f1:73:7e:ee:be:d0:1e:02:06:a6:c3:7d:
44:22:4b:25:bb:10:89:b6:23:68:c3:2f:18:61:db:8d:1d:37:
e4:de:c2:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3
MUFDMkQ0REIwHhcNMjYwNjEzMDE0MTExWhcNMjYwNjIwMDE0MTExWjAYMRYwFAYD
VQQDEw02YTJjYjUzNy03ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBmWP2LJqIALXB/rCN9mR2N96YMBUuCoNQeloyUpaPO2AEUBgiuumLRvVpFQ
FMY23RohNsjjLWab1zRgHJbKO2Z58WWhOt/TSsCUxhgmI/aH4EdTlas+wdsQVDiw
0LwdwEEawR6GS8clHO/rwYLd0whBO/WW6EuxuhSEaXqeqiu2xZ73eG5TZ2ns9A0K
GPSdhhbtnJcgkqqGJiwvG4Pmjl3OSLT3lx8SuvaEGlFrqlQyEKi05q1R/PNQywVC
fRbCS1trhUZLPEEfIjeRh1zX9bvwZOab7w47dgitMwyVmA6t5D0WIkr40aYNJwGP
M9osOXWZ+SR4pnJ8iwI9XjF+twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8kTEYM
upqKT+QUXpzYjoyZ5LX8MB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG
MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv
ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa8im+MWtlxMUtIgGhWCI4WgC9z6vCFkGompC6EzbfCZjURypCyh+8UltDLGU
7sNptk11jc7J/aLKFvHD5I76qOR5GOpdPMnC+k3jzavOwBa1ILvKzla9dCg8PA7v
4N8sU2HXnGoO+h2zmQCs+zxvhbkOOPhoZlxPA4ZX5wgwloqVeIXI3PMRgsf+YkMW
+NYBgkKZd0UNnMFWWaWrUarQdDxZ3F5lTkDAzj2j28I+PbPszCtY/aOm+Um0/pQb
moQtfVN7gH1mS+wXsjVbjTUxvxdoUWBij8saNKqprgNM8XN+7r7QHgIGpsN9RCJL
JbsQibYjaMMvGGHbjR035N7COA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:44 2026 by rpki-client