
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json)
Hash identifier: mdzEXuoHu2RQeMv9praT+XWRi4fCj/iqszILolfl4Vg=
Subject key identifier: 77:A1:1A:1B:73:FA:52:9D:EF:E3:FD:4D:0F:61:92:7A:C0:CA:7D:61
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial: 0D02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
Manifest number: 0CF6
Signing time: Mon 02 Mar 2026 02:44:41 +0000
Manifest this update: Mon 02 Mar 2026 02:44:39 +0000
Manifest next update: Mon 09 Mar 2026 02:44:39 +0000
Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: 0Ol0NwApM1U6YXlozu7T/5Er7Ds6s4hpC540aS1V6oI=)
2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Validity
Not Before: Mar 2 02:44:39 2026 GMT
Not After : Mar 9 02:44:39 2026 GMT
Subject: CN=69a4f998-8f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:6f:ec:62:7e:57:5c:e3:37:d9:c8:81:56:
6f:d2:44:1a:30:00:34:f1:89:a1:ed:9d:df:a1:67:
4d:85:04:07:cf:43:23:7c:7e:bc:f2:a0:60:1d:1b:
c3:56:3c:9c:c7:b2:ce:fc:38:17:e0:f7:5a:08:01:
19:94:cb:0c:62:9b:08:4c:60:33:52:fb:fb:62:54:
e5:75:c9:67:0c:e9:57:ed:78:19:09:39:2e:68:b6:
19:7c:60:40:25:58:95:cd:99:b1:68:b3:0a:8a:92:
26:f1:ef:90:5b:95:fb:ac:71:1d:d5:7b:6c:48:4d:
b9:d1:a5:9a:82:d3:cb:d1:30:ea:93:2c:9f:fe:d7:
91:ce:dd:01:dd:03:cd:a7:4a:18:57:4f:8e:79:18:
e0:e4:1b:f0:b8:22:c5:c4:0c:1e:99:47:b7:e9:d0:
e3:d8:b2:dc:5d:6f:fe:77:86:e0:ad:3c:b6:ee:6f:
1c:06:77:f3:b9:68:30:f9:75:fc:e6:a8:b1:84:60:
65:38:11:22:e7:99:1e:f9:68:90:e5:f6:9d:41:06:
db:30:db:7c:e7:3b:40:ea:46:0c:f4:b7:67:19:a9:
52:82:d5:b7:51:04:a9:17:2f:bb:ca:0d:e3:f4:66:
ba:90:a8:49:d4:10:a4:ce:10:83:dd:26:dd:08:97:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:1A:1B:73:FA:52:9D:EF:E3:FD:4D:0F:61:92:7A:C0:CA:7D:61
X509v3 Authority Key Identifier:
keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:31:8b:01:cb:f0:68:bc:4b:4e:01:28:4e:c0:6a:17:7a:7c:
75:4a:ff:5c:b2:6a:d6:db:00:3e:5b:60:99:7d:65:73:5d:34:
e1:b3:5e:f0:e5:78:91:8c:1a:a9:3d:1e:6a:b0:58:6c:14:7c:
e7:d6:d4:9a:0e:53:f7:4e:3f:80:9e:4e:13:8e:9a:0b:96:18:
1c:d4:8b:4c:b0:8d:84:d0:0b:36:00:c7:9a:b5:50:a7:e4:3e:
02:20:c1:a2:99:40:a7:b1:48:6d:37:cf:c2:3c:b7:0b:b5:ab:
19:29:2c:8e:ca:27:d0:02:93:ec:8a:ff:a8:56:0c:c4:b4:b6:
53:b3:7c:6a:d6:2b:cd:11:84:db:78:a6:c8:ce:3e:8a:e8:4c:
83:1b:7c:ec:c2:d3:29:2b:62:a7:03:6f:76:10:ee:43:1d:5f:
68:f6:e0:33:cc:de:7e:a9:18:19:2d:3b:8a:be:02:29:e1:68:
73:10:fe:9c:e0:36:b6:33:5e:f6:5c:ee:87:3a:85:2f:02:7a:
01:5c:7b:64:c3:be:39:f2:01:cf:64:12:f9:c0:65:94:0a:7c:
68:63:3e:b1:41:c7:69:08:2f:f9:82:11:46:3f:2f:75:fd:9f:
bc:0f:ef:0d:62:f5:76:94:e4:e4:76:41:0f:9e:77:b0:1b:1c:
8e:84:c5:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5
NjNBNkIwMDEwHhcNMjYwMzAyMDI0NDM5WhcNMjYwMzA5MDI0NDM5WjAYMRYwFAYD
VQQDEw02OWE0Zjk5OC04ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP1v7GJ+V1zjN9nIgVZv0kQaMAA08Ymh7Z3foWdNhQQHz0MjfH688qBgHRvD
Vjycx7LO/DgX4PdaCAEZlMsMYpsITGAzUvv7YlTldclnDOlX7XgZCTkuaLYZfGBA
JViVzZmxaLMKipIm8e+QW5X7rHEd1XtsSE250aWagtPL0TDqkyyf/teRzt0B3QPN
p0oYV0+OeRjg5BvwuCLFxAwemUe36dDj2LLcXW/+d4bgrTy27m8cBnfzuWgw+XX8
5qixhGBlOBEi55ke+WiQ5fadQQbbMNt85ztA6kYM9LdnGalSgtW3UQSpFy+7yg3j
9Ga6kKhJ1BCkzhCD3SbdCJffXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHehGhtz
+lKd7+P9TQ9hknrAyn1hMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF
RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ
QnZ1eWpHSWw2VU9XT21zQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGDGLAcvwaLxLTgEoTsBqF3p8dUr/XLJq1tsAPltgmX1lc1004bNe8OV4kYwa
qT0earBYbBR859bUmg5T904/gJ5OE46aC5YYHNSLTLCNhNALNgDHmrVQp+Q+AiDB
oplAp7FIbTfPwjy3C7WrGSksjson0AKT7Ir/qFYMxLS2U7N8atYrzRGE23imyM4+
iuhMgxt87MLTKStipwNvdhDuQx1faPbgM8zefqkYGS07ir4CKeFocxD+nOA2tjNe
9lzuhzqFLwJ6AVx7ZMO+OfIBz2QS+cBllAp8aGM+sUHHaQgv+YIRRj8vdf2fvA/v
DWL1dpTk5HZBD553sBscjoTFXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:23 2026 by rpki-client