
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier: UEJopAnoX++48D50fGuX32xNrdOmvPeP7jBVzJzTFfU=
Subject key identifier: AE:40:FE:93:55:91:18:7D:F9:1A:7B:0C:77:B7:F6:EC:81:E6:A9:AC
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number: 63
Signing time: Sun 01 Mar 2026 09:20:45 +0000
Manifest this update: Sun 01 Mar 2026 09:20:44 +0000
Manifest next update: Sun 08 Mar 2026 09:20:44 +0000
Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: wxAz7HlvwWbShl5EaMRUniG9mzL1LXUGMgYfdy0LBfA=)
2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: BOcoiAspHCwkr5azVOhAvR+BAnY8G++2Bq7+nnR+vDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Validity
Not Before: Mar 1 09:20:44 2026 GMT
Not After : Mar 8 09:20:44 2026 GMT
Subject: CN=69a404ed-1d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:ca:c7:c6:6b:37:83:df:26:9f:fe:24:9a:
9c:77:a8:87:6e:dc:2e:fd:63:eb:9c:5a:83:a4:bb:
f9:e3:a9:aa:d3:85:d8:90:d0:b7:51:6b:2a:f5:35:
61:32:ad:9a:40:c3:ff:7c:98:49:be:59:d7:73:d8:
eb:23:69:19:80:37:07:f6:42:9e:b5:21:c7:56:28:
ab:d9:72:aa:b6:1c:3f:73:cd:0a:d2:96:45:9a:3f:
7b:54:4a:72:2e:9c:ea:18:fc:38:2b:95:60:36:a0:
9e:9d:22:46:74:a0:66:64:d9:46:fc:66:fb:8f:6f:
7d:25:26:3e:41:4a:e1:b0:34:2d:34:c4:38:62:31:
56:84:eb:4d:4a:a0:56:15:be:b9:c7:c1:fa:4c:78:
1f:d2:54:04:d2:e6:88:17:2a:7b:de:16:00:4a:a0:
f0:35:f0:93:8c:99:c3:e6:13:a6:9b:cd:1b:f4:92:
3c:70:18:91:41:f1:83:cb:a6:03:97:63:cd:9d:4d:
35:fb:49:55:ea:5d:10:3a:ff:cf:eb:a9:d3:1d:96:
10:4d:d3:38:49:d2:78:a7:20:17:05:4e:fe:f4:55:
b4:89:53:66:54:44:1d:c5:15:a1:69:b0:d5:5e:11:
65:15:e5:a3:b3:87:ab:a3:c9:e7:75:69:a9:98:36:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:FE:93:55:91:18:7D:F9:1A:7B:0C:77:B7:F6:EC:81:E6:A9:AC
X509v3 Authority Key Identifier:
keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9e:21:fd:cd:0b:12:cf:23:a9:83:b1:35:9b:ba:53:4e:18:
74:24:b3:20:cb:9a:b3:3b:69:0a:c0:8d:a8:dd:8a:c0:f2:19:
3f:ae:7b:fb:2c:13:6d:2f:fb:76:51:8e:c4:ee:11:f1:3c:6d:
9b:53:45:41:59:88:ec:14:6d:21:f0:0b:d0:01:8a:99:a1:b8:
7a:b7:38:84:f8:1d:20:b3:1e:2e:f7:36:a9:42:21:f8:55:a3:
9c:7b:86:e3:08:cb:5d:f5:21:65:52:8e:7e:c0:7a:ad:61:b5:
61:ca:50:f4:c7:f7:d0:46:e2:69:58:4e:09:92:32:41:7b:24:
78:8f:5d:f5:f5:d2:23:60:4e:27:c1:4d:67:29:04:2c:db:81:
84:78:cb:99:1e:fe:3e:da:91:3f:ad:25:13:db:c1:ae:0f:c9:
09:0d:2f:a2:06:40:1f:65:2e:e3:eb:7a:6c:4c:68:a2:54:08:
03:25:50:68:82:b8:86:16:c2:ed:9f:67:3f:23:34:4f:5b:b4:
cb:cd:9b:13:37:3d:71:d4:c6:09:76:aa:02:78:b7:b5:6d:6e:
b4:a7:d8:a3:da:3a:d3:b3:0e:9c:13:dc:97:82:48:d1:ce:5b:
3e:34:cd:62:9e:b2:a2:64:47:9e:ea:86:c2:e3:d7:6f:83:27:
a6:59:8e:1a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Nzc2MDExMC8GA1UEBRMoRkU0OUNGMzNGQkU0MjQ3QjJCQTFFRTlBNTQ4NEE3NDBB
RDNCNkUwRTAeFw0yNjAzMDEwOTIwNDRaFw0yNjAzMDgwOTIwNDRaMBgxFjAUBgNV
BAMTDTY5YTQwNGVkLTFkODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOSsrHxms3g98mn/4kmpx3qIdu3C79Y+ucWoOku/njqarThdiQ0LdRayr1NWEy
rZpAw/98mEm+Wddz2OsjaRmANwf2Qp61IcdWKKvZcqq2HD9zzQrSlkWaP3tUSnIu
nOoY/DgrlWA2oJ6dIkZ0oGZk2Ub8ZvuPb30lJj5BSuGwNC00xDhiMVaE601KoFYV
vrnHwfpMeB/SVATS5ogXKnveFgBKoPA18JOMmcPmE6abzRv0kjxwGJFB8YPLpgOX
Y82dTTX7SVXqXRA6/8/rqdMdlhBN0zhJ0ninIBcFTv70VbSJU2ZURB3FFaFpsNVe
EWUV5aOzh6ujyed1aamYNpTLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrkD+k1WR
GH35GnsMd7f27IHmqawwHwYDVR0jBBgwFoAU/knPM/vkJHsroe6aVISnQK07bg4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzdENTMxNDIwN0Uz
RjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2Jn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX2tuUE1fdmtKSHNyb2U2YVZJU25RSzA3Ymc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
NzYwLzdENTMxNDIwN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhz
cm9lNmFWSVNuUUswN2JnNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBcniH9zQsSzyOpg7E1m7pTThh0JLMgy5qzO2kKwI2o3YrA8hk/rnv7LBNtL/t2
UY7E7hHxPG2bU0VBWYjsFG0h8AvQAYqZobh6tziE+B0gsx4u9zapQiH4VaOce4bj
CMtd9SFlUo5+wHqtYbVhylD0x/fQRuJpWE4JkjJBeyR4j1319dIjYE4nwU1nKQQs
24GEeMuZHv4+2pE/rSUT28GuD8kJDS+iBkAfZS7j63psTGiiVAgDJVBogriGFsLt
n2c/IzRPW7TLzZsTNz1x1MYJdqoCeLe1bW60p9ij2jrTsw6cE9yXgkjRzls+NM1i
nrKiZEee6obC49dvgyemWY4a
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:43 2026 by rpki-client