
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json)
Hash identifier: bFJ0UeJuFz4tv2IfqXf67RZHAEZD9UtTjQsXPbShA2Y=
Subject key identifier: AE:F9:EC:A0:3C:08:C1:06:1D:DE:CF:A4:69:7A:B1:A5:B5:B2:D3:13
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial: 0D4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
Manifest number: 0D42
Signing time: Tue 28 Jul 2026 18:11:08 +0000
Manifest this update: Tue 28 Jul 2026 18:11:07 +0000
Manifest next update: Tue 04 Aug 2026 18:11:07 +0000
Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: 5arEp6wXEJUKo/c1XzTvxouYqyM0f+73oj6rNx0O+2o=)
2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Validity
Not Before: Jul 28 18:11:07 2026 GMT
Not After : Aug 4 18:11:07 2026 GMT
Subject: CN=6a68f0bc-2ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:5e:b4:ed:a4:fa:b4:16:f5:b7:b0:e8:31:
da:06:9b:48:e5:86:79:94:38:d7:45:ca:d5:50:2b:
b1:d9:32:92:7d:b7:c3:5d:4a:45:23:36:52:19:61:
04:58:a0:3b:c8:bc:a5:b9:82:f5:8a:a0:cb:8b:26:
ca:a2:5e:54:57:e4:9e:af:de:0f:44:db:0e:35:56:
b5:3b:bb:62:7c:f6:2c:d1:4f:5a:3e:36:42:c4:ac:
a9:36:6e:d0:32:2d:67:78:ba:59:28:f5:7b:ad:84:
46:7f:41:8b:b9:3b:9d:1c:19:7b:e5:87:45:eb:ad:
2f:5b:9b:9f:aa:03:f8:63:93:ea:96:cc:70:1b:54:
e1:7f:6b:04:cd:e4:73:18:07:1e:89:98:8d:cd:32:
0a:29:2a:a4:25:40:0c:cd:60:b3:1b:ca:91:bf:3a:
08:38:69:69:bc:e1:b6:70:37:91:59:7c:10:19:2f:
f0:29:3c:f8:b7:ad:41:2b:77:e4:e0:ee:3f:35:13:
25:15:b7:c0:ec:74:d7:59:1f:58:12:1f:dd:ec:b6:
b4:30:7f:19:0a:46:16:d4:56:7c:ab:a7:09:21:1c:
cf:9e:d8:e3:34:8c:a4:0a:67:bb:84:5c:b0:f5:7d:
bc:2b:26:b6:78:d1:19:8c:d6:26:a8:fc:d7:97:fa:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:EC:A0:3C:08:C1:06:1D:DE:CF:A4:69:7A:B1:A5:B5:B2:D3:13
X509v3 Authority Key Identifier:
keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:f6:fd:90:b2:ca:3e:9e:d1:c3:f5:90:c5:90:0a:1e:39:9e:
cd:2f:4b:a6:e7:c9:93:50:84:f7:6d:ba:52:32:c8:96:3e:47:
03:6e:e0:c4:c7:6d:88:5c:72:4a:90:c4:a5:99:fe:ad:bb:d1:
b3:f1:c8:20:d7:2a:26:f7:27:9e:78:f6:b6:a4:9e:8c:48:7c:
43:1b:bc:2c:30:0e:d5:1b:ea:e2:ec:04:a9:ed:0e:f8:64:d3:
ae:63:4f:47:c6:8d:08:2c:bd:6f:c3:76:7c:3f:ef:b4:27:92:
3f:e3:e4:14:15:4a:66:75:5e:37:3d:dc:64:40:30:af:0a:7f:
21:7f:da:ef:4c:d6:4f:74:be:b8:4c:33:5f:df:3f:01:ee:3d:
a2:03:e6:bd:75:df:04:73:15:ed:cb:e3:d6:1d:fe:bf:53:83:
fc:91:b2:08:5c:91:55:72:5d:58:6b:94:4b:0b:31:e3:59:51:
33:3c:7c:a7:7f:3d:c8:5a:85:77:6a:05:de:81:b2:8c:34:b2:
ed:b3:ef:f1:d6:e5:81:fe:a0:d4:e2:08:f3:97:82:f2:f6:7f:
45:c1:cd:80:4c:ea:22:e4:62:21:53:13:14:a6:d8:9a:4d:a1:
1b:93:dd:20:6a:ac:60:5a:5d:41:ac:86:2d:b7:ea:4e:be:58:
f2:a5:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:20 2026 by rpki-client