
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json)
Hash identifier: R40T39XRVqt4rd0FsqTfQ1bsUldlUY9M1WXCpYNOeKM=
Subject key identifier: B6:08:D3:0A:18:74:E4:25:61:6F:D7:5D:A2:CB:67:47:94:AB:E8:D9
Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
Manifest number: 0156
Signing time: Sat 13 Jun 2026 05:01:15 +0000
Manifest this update: Sat 13 Jun 2026 05:01:15 +0000
Manifest next update: Sat 20 Jun 2026 05:01:15 +0000
Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: KedKxHgJCb4K1jCRTX1WUWkonxGhnk9PRFErQgNQIx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Validity
Not Before: Jun 13 05:01:15 2026 GMT
Not After : Jun 20 05:01:15 2026 GMT
Subject: CN=6a2ce41b-b780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:cd:19:d6:71:c5:2d:61:53:f2:59:b4:14:
4d:d5:42:60:ab:ca:af:b6:e1:09:a2:0f:d2:53:db:
97:b9:1a:29:28:29:68:af:eb:7c:1b:a7:26:d3:6f:
0c:42:15:66:98:8a:1c:d6:20:55:44:ea:d2:54:8a:
a5:18:07:b4:7d:e5:67:e3:5c:9e:3d:21:a8:f5:a1:
76:3d:6b:0d:e1:f4:c6:e8:e1:51:d3:67:b6:35:ee:
6c:64:7f:f5:25:de:b6:d8:48:91:7e:2a:d4:97:cc:
dc:63:a9:c1:8e:ca:a9:12:2e:8d:28:c4:7f:c7:05:
4e:5e:54:9a:bd:95:3a:bc:16:65:9f:d6:8c:53:a0:
4e:8d:36:93:f3:15:50:8d:22:77:64:7c:81:83:ec:
9d:e4:9c:0b:bd:74:8d:1d:54:17:e2:11:e3:e9:76:
7e:d0:03:5a:0a:7e:d8:21:59:69:e3:97:05:d1:58:
36:b1:2f:b9:4b:56:ba:55:d2:dd:a7:54:c0:a1:ff:
bb:fa:4d:99:e9:51:f3:13:76:78:f0:5f:8e:db:da:
69:7b:8e:16:4d:1a:93:10:b0:b0:00:04:44:5b:3e:
a0:0a:4b:7b:9f:bb:5b:3a:97:ab:a7:55:6f:62:33:
e4:d9:e3:52:af:85:93:92:d1:57:9d:7c:ff:41:e4:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:D3:0A:18:74:E4:25:61:6F:D7:5D:A2:CB:67:47:94:AB:E8:D9
X509v3 Authority Key Identifier:
keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:37:e2:b8:de:b2:ec:c5:cb:d7:3f:20:32:91:a8:22:3c:9d:
fe:25:45:d1:37:12:f7:8c:c8:a9:2f:0b:ea:08:3c:11:89:64:
c1:f0:7b:9c:11:98:44:a4:66:9c:5a:5f:a9:c6:0e:ab:d2:d2:
73:1f:66:b5:92:01:de:dd:3c:52:9c:10:8c:2d:45:aa:04:ef:
ac:2e:d9:aa:6d:81:5c:ee:b9:66:c1:61:60:5a:42:6a:94:93:
73:77:d9:92:89:26:92:69:9c:8d:b1:61:31:dc:47:7e:f8:bd:
af:a0:ff:2d:cb:f6:76:c9:9d:fa:d0:64:93:4a:a5:b2:91:22:
0b:de:dc:67:f5:4e:30:5b:31:af:47:fd:df:d3:40:a3:66:e1:
da:94:e3:1e:e5:46:61:be:97:02:e2:23:8d:4f:a9:e7:13:c3:
f0:e4:a5:ae:35:0c:c3:d5:eb:f1:0c:1b:e7:56:c1:23:ce:96:
f0:10:0b:5c:e3:48:8a:34:d1:50:1c:a9:69:57:ad:b1:a1:c8:
ab:81:cf:be:a3:c9:e2:93:46:5f:a6:60:36:3f:6a:82:b6:30:
84:11:05:ab:85:84:49:4c:d7:56:fa:f6:bd:18:2d:4e:5e:5f:
63:7c:b4:a3:97:8f:25:9f:af:2f:c1:44:9b:52:3c:06:a9:db:
a9:a9:50:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF
QzYyOEYwQTMwHhcNMjYwNjEzMDUwMTE1WhcNMjYwNjIwMDUwMTE1WjAYMRYwFAYD
VQQDEw02YTJjZTQxYi1iNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpHNGdZxxS1hU/JZtBRN1UJgq8qvtuEJog/SU9uXuRopKClor+t8G6cm028M
QhVmmIoc1iBVROrSVIqlGAe0feVn41yePSGo9aF2PWsN4fTG6OFR02e2Ne5sZH/1
Jd622EiRfirUl8zcY6nBjsqpEi6NKMR/xwVOXlSavZU6vBZln9aMU6BOjTaT8xVQ
jSJ3ZHyBg+yd5JwLvXSNHVQX4hHj6XZ+0ANaCn7YIVlp45cF0Vg2sS+5S1a6VdLd
p1TAof+7+k2Z6VHzE3Z48F+O29ppe44WTRqTELCwAAREWz6gCkt7n7tbOperp1Vv
YjPk2eNSr4WTktFXnXz/QeR0HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYI0woY
dOQlYW/XXaLLZ0eUq+jZMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC
OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84
S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm
SURYaURaR3FWZTNzWW84S00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmjfiuN6y7MXL1z8gMpGoIjyd/iVF0TcS94zIqS8L6gg8EYlkwfB7nBGYRKRm
nFpfqcYOq9LScx9mtZIB3t08UpwQjC1FqgTvrC7Zqm2BXO65ZsFhYFpCapSTc3fZ
kokmkmmcjbFhMdxHfvi9r6D/Lcv2dsmd+tBkk0qlspEiC97cZ/VOMFsxr0f939NA
o2bh2pTjHuVGYb6XAuIjjU+p5xPD8OSlrjUMw9Xr8Qwb51bBI86W8BALXONIijTR
UBypaVetsaHIq4HPvqPJ4pNGX6ZgNj9qgrYwhBEFq4WESUzXVvr2vRgtTl5fY3y0
o5ePJZ+vL8FEm1I8BqnbqalQgw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:27 2026 by rpki-client