
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json)
Hash identifier: KUaZWHedk2cTz7ZdSvFb80T9oM64JCokHOrM8DwDHkw=
Subject key identifier: D9:3F:7F:37:21:4A:9E:80:03:50:7B:5A:CC:F2:2C:95:E6:B1:A5:E3
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
Manifest number: 0D0E
Signing time: Thu 16 Apr 2026 18:01:34 +0000
Manifest this update: Thu 16 Apr 2026 18:01:34 +0000
Manifest next update: Thu 23 Apr 2026 18:01:34 +0000
Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: teR6FTHW8gY2F/moFJ4RSTDjttk/HwIe1NoMgy0xhLk=)
2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Validity
Not Before: Apr 16 18:01:34 2026 GMT
Not After : Apr 23 18:01:34 2026 GMT
Subject: CN=69e123fe-400c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:56:f3:0e:65:49:7d:52:74:3f:98:20:7a:
e6:85:61:81:b4:9e:9e:0f:e9:31:de:6d:ed:6f:70:
03:7a:c5:a7:93:1e:22:31:68:34:eb:db:b9:0d:da:
25:91:23:8b:ef:f7:a3:a6:13:f1:88:5e:cf:4c:52:
95:db:30:df:3d:c5:73:41:5e:d0:2f:5f:49:30:53:
a8:15:a0:35:31:58:d0:3b:fc:53:07:87:42:2a:21:
85:5d:29:80:d2:b3:6d:64:07:b3:cc:b6:c0:bc:8c:
15:4f:0b:a6:96:58:c9:b9:2c:9d:0a:f9:a9:da:f6:
83:fe:64:f8:f1:44:fa:61:89:a4:78:d6:52:ba:b7:
ee:87:05:2c:b6:34:8c:9a:27:2a:66:14:69:79:89:
1b:1a:e6:8c:91:91:bb:f0:af:b4:66:10:10:84:41:
e0:17:9f:a2:4a:ec:ec:cd:3f:27:84:90:a3:1c:78:
4e:91:7d:c7:95:41:9c:36:8b:3c:22:25:21:8b:5e:
62:ee:cb:a4:ee:eb:22:8f:9b:59:15:00:9c:2e:24:
26:39:60:ff:d7:b8:25:3e:d7:e5:76:2a:41:79:27:
c5:ff:6b:75:ed:b7:f8:88:16:ea:35:21:c5:5f:ce:
ed:2d:54:79:b2:a7:01:fc:7f:16:18:a7:39:b8:0c:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:7F:37:21:4A:9E:80:03:50:7B:5A:CC:F2:2C:95:E6:B1:A5:E3
X509v3 Authority Key Identifier:
keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:62:f5:d7:cd:7b:de:6e:54:76:81:50:c5:10:dd:ca:7c:e8:
78:f8:4d:1c:87:83:45:00:98:f2:18:6e:c6:33:66:51:d1:0b:
23:71:81:cd:aa:19:a5:65:19:c4:72:b7:5e:50:26:01:6c:b5:
f0:ba:ab:66:9c:b2:7d:f6:f1:ed:33:2f:61:4a:77:fa:a7:5f:
2e:e7:f5:a8:00:d5:89:f8:93:b2:d4:68:dd:64:63:b8:3b:64:
d4:db:15:30:e4:5c:39:fd:e7:29:7e:af:18:4b:8b:7a:61:d1:
08:4b:dd:bb:f2:bf:2d:80:99:34:9d:ec:25:38:f8:45:dc:d9:
ef:b1:a2:2a:c2:d2:9a:4a:36:88:92:58:e1:e9:ef:56:31:67:
8b:65:0c:5e:43:07:ec:4f:20:83:89:3d:92:b9:5e:58:9e:dc:
fd:74:03:a4:86:d6:ad:38:19:f9:f5:0a:cb:bc:85:8a:b8:93:
56:81:9a:bb:12:08:a8:08:d5:61:9c:32:94:92:14:5f:ca:18:
79:e9:ac:df:08:91:af:6f:89:e4:df:80:99:44:c6:25:ee:37:
80:ac:65:09:44:99:51:f8:92:25:f2:08:b4:3d:10:cf:ca:1c:
83:89:a3:9a:68:84:63:81:02:07:b8:fa:f8:a2:a3:ad:eb:bc:
cc:11:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:04 2026 by rpki-client