
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
File: k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft (raw, json)
Hash identifier: hja3+ZN+jcKoEyuQOS0+bxT7Ub/pE8OXDu6w0gsjHUg=
Subject key identifier: 78:E6:E6:AB:F7:25:DE:8C:EC:0F:B9:D5:6E:E1:8B:96:AD:94:74:26
Authority key identifier: 93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
Certificate issuer: /CN=A912A3C4/serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
Manifest number: 16
Signing time: Sun 26 Jul 2026 20:29:10 +0000
Manifest this update: Sun 26 Jul 2026 20:29:09 +0000
Manifest next update: Sun 02 Aug 2026 20:29:09 +0000
Files and hashes: 1: k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl (hash: 2G1OszvuwGYkGTJCeh/MRICf5yy21uU6KwgQWJmCeBo=)
2: 39E2E2326AB211F1AD02B3F4A147A888.roa (hash: G1Hlr/rHIQ0S04hSoxt84tCzDTSCe59VGh3JefnKY08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl
rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3C4, serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Validity
Not Before: Jul 26 20:29:09 2026 GMT
Not After : Aug 2 20:29:09 2026 GMT
Subject: CN=6a666e16-20d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:41:75:ee:7f:88:23:34:02:da:1b:d4:ab:
b6:b4:b7:5b:46:16:b7:09:6a:36:a3:da:4b:64:eb:
80:37:59:dc:93:75:f4:83:9f:d1:36:b5:10:3e:29:
cd:de:47:3c:56:ea:76:af:72:36:c2:6a:06:c7:f5:
76:13:c7:58:a6:e5:c1:c1:47:a9:a0:2f:9f:1e:68:
52:a1:5a:3a:57:5b:fb:c9:0e:d5:50:2a:54:eb:81:
37:e6:0d:a3:b1:bc:07:17:0b:96:b1:8a:88:a5:e2:
62:dd:57:ec:e4:e5:3a:1e:87:f3:81:e7:c0:d7:69:
bf:7d:57:46:5f:12:21:3d:8d:4c:59:76:0c:16:71:
53:7b:44:8c:ef:a7:67:53:01:a4:c4:6e:7f:37:cd:
61:0e:9a:c9:5b:7a:a3:47:b8:7c:79:6c:87:7e:44:
e5:88:3a:df:15:e7:c0:17:bb:3d:32:25:87:7f:09:
57:91:0f:0c:6b:8f:5b:da:80:ec:44:d9:66:7f:e4:
74:50:a5:c3:dc:40:fb:df:40:22:fb:84:7c:e1:c6:
84:12:69:18:69:e2:d6:0a:b8:f1:d0:04:98:2b:cb:
9d:9b:70:2d:c2:8b:8d:4a:7d:4b:c3:70:e7:08:bb:
4d:b8:78:f8:6a:de:0b:3d:e5:28:c0:8a:df:46:90:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:E6:AB:F7:25:DE:8C:EC:0F:B9:D5:6E:E1:8B:96:AD:94:74:26
X509v3 Authority Key Identifier:
keyid:93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:86:1a:ee:ba:ce:46:44:d3:23:ae:89:65:08:e4:47:93:
d6:8e:90:a9:e1:79:18:20:af:fc:f1:ac:81:8e:e0:8a:21:07:
f2:ba:41:d7:eb:20:b1:25:16:c7:29:21:56:5d:0c:a7:dc:d1:
8c:f8:ca:23:1b:ef:b2:86:ac:00:39:cf:ab:c6:cf:30:05:55:
28:8c:40:29:91:4d:da:d6:ad:03:5c:ec:ca:ff:74:11:81:16:
1b:bf:cb:ce:62:c7:49:75:b6:c5:66:8f:63:2a:a9:0e:13:96:
e0:14:73:a8:f5:35:1b:0f:c4:39:f6:15:98:02:66:e4:c4:77:
43:71:2c:4d:29:37:2b:33:96:59:f0:0c:75:6f:3a:00:47:ca:
75:3f:38:5a:86:d5:5a:22:ec:e2:55:7c:63:4a:26:d2:57:b6:
cc:88:23:49:c8:3a:3e:62:b5:77:b1:30:08:00:6e:3c:1f:7b:
84:cf:62:2d:c2:4c:19:64:c7:02:b5:2a:d5:1b:a0:87:16:b4:
f4:dd:77:93:f8:8b:b0:87:c9:ea:80:51:c6:4b:15:33:19:8e:
a5:dd:53:52:0b:b9:3f:17:31:31:ae:26:02:a9:03:3a:43:9f:
4c:7c:2a:a9:e9:73:51:32:3f:f3:5a:ae:4c:b9:0b:6d:dc:cf:
09:d8:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:42:47 2026 by rpki-client