
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json)
Hash identifier: 9qM0W0fCTTjrTn1oZ7nY2BC2wKjR/Qk5+p/NAABZyjg=
Subject key identifier: 5F:3B:D1:E7:22:FF:8E:AB:79:55:D0:E7:22:9C:29:BD:91:A8:25:52
Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
Manifest number: 013A
Signing time: Fri 17 Apr 2026 05:03:48 +0000
Manifest this update: Fri 17 Apr 2026 05:03:48 +0000
Manifest next update: Fri 24 Apr 2026 05:03:48 +0000
Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: okd428QiHHY/Z8wFoxD2IWB9TVa6BE5TJaLU5DdT3k4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Validity
Not Before: Apr 17 05:03:48 2026 GMT
Not After : Apr 24 05:03:48 2026 GMT
Subject: CN=69e1bf34-ee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:12:c9:79:c0:cb:47:94:bd:81:8f:77:37:
a1:e4:fb:fc:34:b1:16:25:23:b6:c5:b2:6e:48:0d:
3d:7a:27:69:a4:16:6b:06:c7:e7:af:2c:81:11:71:
e3:b2:de:dd:26:9d:a6:91:c3:54:a2:62:17:b4:e1:
55:38:36:ff:ce:b2:e2:80:e2:a0:f9:70:9d:39:d3:
a3:7c:5d:12:f1:07:d2:46:ef:53:06:b9:12:e3:39:
23:69:f1:00:1c:da:c1:11:d3:b9:80:81:a8:5f:82:
79:08:ff:63:53:55:22:87:be:2e:c5:75:6d:86:77:
ef:af:fd:4d:e2:d1:2f:65:ec:fe:1b:73:aa:10:dd:
3f:5d:a1:16:27:b6:5c:d4:dd:f0:7a:fd:82:0f:e5:
99:32:17:0c:c2:0a:9d:42:fe:42:61:39:1b:69:75:
d8:cc:9e:64:d0:3f:bb:91:2d:8e:64:5f:49:90:af:
1d:1d:b6:d9:e8:33:30:57:35:5f:12:f4:10:79:6c:
2d:90:50:57:a4:16:31:a0:93:28:6c:52:01:9b:d0:
94:bc:25:96:0d:c1:f6:2e:25:66:ea:5b:07:4a:8f:
86:59:27:9e:cd:1d:e6:26:8e:6b:66:ea:f2:d9:bb:
d2:ee:fb:3f:fe:d1:a4:44:3d:a0:6b:56:25:6a:98:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3B:D1:E7:22:FF:8E:AB:79:55:D0:E7:22:9C:29:BD:91:A8:25:52
X509v3 Authority Key Identifier:
keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:53:76:21:1a:57:75:7b:04:a1:62:56:75:2f:ec:d2:18:9b:
17:bb:ef:15:6a:60:d0:6d:42:12:d7:af:b9:0c:e0:2c:3a:78:
2a:7c:00:1e:05:8e:fc:bd:60:e7:f1:d9:39:4f:04:72:1a:7d:
48:a7:a7:85:33:87:a2:46:0f:89:2f:9c:ca:49:fb:c3:8d:05:
95:23:1f:b9:1d:45:f6:0b:76:b2:7f:6d:58:5a:17:c3:c7:c6:
48:f7:61:41:09:eb:9b:d1:0d:92:35:81:ed:e2:2e:91:92:a3:
1a:3b:00:ea:6e:a6:2a:ae:c2:41:8f:9a:16:d4:e3:dc:11:1c:
d5:f4:28:52:75:65:ac:cd:f6:95:e0:93:fd:32:5d:0c:14:0f:
7f:34:6d:5c:d1:39:a5:ca:1f:4e:0f:2c:dc:db:7f:b9:e6:e7:
b0:d8:32:74:e5:28:28:b9:e4:4a:25:e2:33:6b:d6:86:bf:54:
00:31:14:99:13:93:90:76:bd:31:db:63:8f:ca:ac:9c:62:6c:
0d:91:3e:ed:4d:32:25:7c:14:79:75:e8:e3:88:3a:f4:75:17:
94:bb:84:49:06:ef:bd:1f:b7:8e:ec:af:b8:51:d4:31:43:45:
82:79:ed:27:22:13:b1:0f:d9:e6:4a:c6:0d:a8:5e:51:25:ff:
64:4e:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:31 2026 by rpki-client