
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json)
Hash identifier: 5paP5DLxL3ffSOGYAmV9b2IcuB34OyPeA/P3svUnzP8=
Subject key identifier: 5A:81:BE:C2:6B:01:35:C2:CE:CE:C0:D6:B6:97:AC:03:E6:B0:C9:E8
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
Manifest number: 0264
Signing time: Mon 02 Mar 2026 03:06:05 +0000
Manifest this update: Mon 02 Mar 2026 03:06:02 +0000
Manifest next update: Mon 09 Mar 2026 03:06:02 +0000
Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: pMzbZz3+fSC83CMdb2eHeaKFL/STMtp/pFNJE24Dvms=)
2: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: yctNWWiZhPVXhgLMblmsUERi9o24TYY6zYqQrUfyMsc=)
3: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: sa00jH8bw4HUITlYrffZw+f88KkU69vSq0M65+ZIMYI=)
4: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 3uTrRG1V9dC0o0IOwmSmMEJhHbML0nSq3yiQY+3J84k=)
5: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: lyLkwnvPiADGaBvpMXNqGtu0ktHuqEPAoUGEfoeoW7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Validity
Not Before: Mar 2 03:06:02 2026 GMT
Not After : Mar 9 03:06:02 2026 GMT
Subject: CN=69a4fe9d-8eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:db:c6:e6:d4:5f:fb:3c:d9:86:cc:a9:da:d6:
1e:47:3b:15:89:f1:80:86:ee:38:08:c1:7a:d0:a8:
0a:94:b9:f1:b9:73:ba:27:3d:1e:d9:03:5c:82:05:
c7:5c:99:2e:bb:48:2b:07:77:8a:04:30:6f:31:f1:
8e:d2:e3:4a:c4:65:21:55:41:50:ea:11:b4:3d:55:
14:c0:7f:f2:07:c9:ba:97:25:26:ea:ba:c7:58:85:
4b:ff:18:79:86:51:44:59:35:2e:0e:03:cf:c2:ea:
8a:fd:37:79:5d:6d:98:72:91:79:26:6c:88:c4:ef:
64:da:13:ca:20:35:b5:c5:61:5c:fb:bc:a6:63:2c:
80:56:67:00:d7:8b:01:f5:a6:00:d6:c0:b8:54:2e:
16:9d:03:11:ae:f2:a0:59:59:91:f0:e3:93:ed:15:
46:a5:3b:15:c7:ed:fa:02:e3:85:a2:9d:a5:b1:d0:
6b:60:d9:9d:bf:97:7b:64:ef:f0:e2:c4:cf:03:26:
21:c0:db:03:a6:cb:b6:8f:d4:e5:7d:da:d9:d2:51:
42:ab:19:5c:a9:52:38:ba:3f:95:5a:2d:3b:24:d0:
92:b8:e1:b8:da:90:e3:f9:39:f2:40:be:1a:4b:87:
0b:6e:22:cc:d8:71:e2:f8:9f:63:3c:62:6f:3c:44:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:BE:C2:6B:01:35:C2:CE:CE:C0:D6:B6:97:AC:03:E6:B0:C9:E8
X509v3 Authority Key Identifier:
keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ec:57:07:0f:bf:e6:d5:9e:4b:39:82:d4:58:75:50:73:e6:
75:19:b6:93:45:24:9a:09:a2:38:21:cc:dd:77:94:56:cf:8a:
f1:70:cf:30:9f:70:41:04:2b:39:9f:45:83:0e:b2:b9:19:7a:
8b:33:28:21:bd:00:3e:9e:32:1b:93:e8:4c:ec:b2:3c:d5:f6:
a7:0e:b8:d6:ab:54:7d:4f:06:56:9a:b5:25:59:67:4f:fb:0b:
80:06:1b:45:e0:3d:3e:e5:b8:f2:e8:45:ef:81:90:37:1a:28:
24:c2:5e:cd:25:7e:7c:dd:41:ff:fb:b2:b6:89:66:08:7e:8a:
69:74:39:b0:d2:cb:40:8f:d8:78:d6:a4:ec:69:e4:26:34:87:
f3:b4:f5:33:d0:67:c9:c7:58:4b:9f:03:1a:9f:91:9b:d7:ea:
e1:7e:1b:25:f1:2f:91:3b:98:a0:cd:72:7c:43:16:f2:88:66:
96:fd:47:a6:2b:aa:cf:eb:9d:67:41:a2:56:9b:a6:33:92:f4:
ee:77:09:48:a5:6c:ce:9d:f9:d0:e9:2e:e0:a4:e1:78:1a:2b:
15:7a:be:5a:51:71:b9:9a:36:8d:2b:ad:5d:6a:1e:72:b9:6c:
53:23:c7:d7:c4:d8:17:10:cf:8b:42:f9:92:46:8d:83:5c:fb:
75:06:64:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3
MUFDMkQ0REIwHhcNMjYwMzAyMDMwNjAyWhcNMjYwMzA5MDMwNjAyWjAYMRYwFAYD
VQQDEw02OWE0ZmU5ZC04ZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9dvG5tRf+zzZhsyp2tYeRzsVifGAhu44CMF60KgKlLnxuXO6Jz0e2QNcggXH
XJkuu0grB3eKBDBvMfGO0uNKxGUhVUFQ6hG0PVUUwH/yB8m6lyUm6rrHWIVL/xh5
hlFEWTUuDgPPwuqK/Td5XW2YcpF5JmyIxO9k2hPKIDW1xWFc+7ymYyyAVmcA14sB
9aYA1sC4VC4WnQMRrvKgWVmR8OOT7RVGpTsVx+36AuOFop2lsdBrYNmdv5d7ZO/w
4sTPAyYhwNsDpsu2j9TlfdrZ0lFCqxlcqVI4uj+VWi07JNCSuOG42pDj+TnyQL4a
S4cLbiLM2HHi+J9jPGJvPERT6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqBvsJr
ATXCzs7A1raXrAPmsMnoMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG
MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv
ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeexXBw+/5tWeSzmC1Fh1UHPmdRm2k0UkmgmiOCHM3XeUVs+K8XDPMJ9wQQQr
OZ9Fgw6yuRl6izMoIb0APp4yG5PoTOyyPNX2pw641qtUfU8GVpq1JVlnT/sLgAYb
ReA9PuW48uhF74GQNxooJMJezSV+fN1B//uytolmCH6KaXQ5sNLLQI/YeNak7Gnk
JjSH87T1M9BnycdYS58DGp+Rm9fq4X4bJfEvkTuYoM1yfEMW8ohmlv1Hpiuqz+ud
Z0GiVpumM5L07ncJSKVszp350Oku4KTheBorFXq+WlFxuZo2jSutXWoecrlsUyPH
18TYFxDPi0L5kkaNg1z7dQZkTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:03 2026 by rpki-client