
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json)
Hash identifier: M0akRE21ZNIWc+zP8Vk2AFuIu7kXexRrnD3mR+kmq68=
Subject key identifier: 2E:AF:5F:6B:E6:1F:42:5B:A4:6D:0C:2D:61:A7:F8:1B:9C:E5:64:81
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial: 0F20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
Manifest number: 0F15
Signing time: Thu 08 Oct 2026 17:41:41 +0000
Manifest this update: Thu 08 Oct 2026 17:41:41 +0000
Manifest next update: Thu 15 Oct 2026 17:41:41 +0000
Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: LOyWc1LN8bwP7zJUrZB8fnygmgQId8i/lA/MhzSr9oA=)
2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: I3a+AQK6qVCuGM8BlFl5ofUbKIxiO2UA8EiuLaXOEkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3872 (0xf20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Validity
Not Before: Oct 8 17:41:41 2026 GMT
Not After : Oct 15 17:41:41 2026 GMT
Subject: CN=6ac7d5d5-e108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:69:1f:3a:00:2b:d6:07:84:e7:26:1a:78:
c0:ea:f5:b3:4e:c8:af:41:ea:97:ba:89:5b:55:2e:
81:b1:fc:4e:2c:bd:91:60:97:e9:bc:56:68:6b:8d:
87:a0:47:30:91:c1:df:21:03:0a:22:50:7d:e6:16:
0d:74:ed:d7:11:25:6c:5c:d1:25:56:36:e7:67:65:
a2:a1:fb:ac:39:ca:1a:e1:90:cd:3f:84:a8:96:d9:
7c:a6:be:b9:7e:6e:f0:c4:10:22:1d:04:30:40:12:
52:6d:8e:63:bc:f3:80:2d:a9:9f:bc:4a:c2:cd:b1:
36:75:16:b0:72:a6:00:a5:e1:cf:f8:99:2a:fd:ba:
b7:de:b6:b9:de:b6:e8:30:db:b6:eb:4a:b1:ef:a8:
bc:11:8d:50:44:eb:7d:ef:e0:08:d4:09:b3:1d:30:
d9:50:7d:8d:7a:3a:42:80:2e:fd:0a:11:ff:b3:6d:
39:68:88:9e:79:e9:45:ed:dc:bb:e6:71:87:8e:93:
76:28:9a:37:10:50:3b:7b:0f:9a:0b:22:f7:2c:36:
f4:0e:43:db:ff:ef:4c:64:29:1e:3b:6d:9e:9a:b5:
0d:9b:cb:a9:a4:9b:ae:8e:53:b9:84:b9:05:b3:51:
e7:4d:b1:36:34:28:72:76:87:94:ff:53:47:ff:96:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:5F:6B:E6:1F:42:5B:A4:6D:0C:2D:61:A7:F8:1B:9C:E5:64:81
X509v3 Authority Key Identifier:
keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:f0:a9:1d:23:cd:00:3d:60:19:a3:a8:ca:41:ac:68:5a:
c8:a3:ab:a6:d1:25:fc:80:89:94:3a:10:90:c6:25:83:d8:71:
59:b9:34:92:ba:a3:ec:32:fd:ac:db:d4:5e:f0:32:cb:da:0b:
22:52:48:e5:b5:8e:0b:b8:2d:1d:76:b6:5a:ad:bf:a6:a8:a7:
e1:d5:de:ff:05:c8:3c:7b:0b:06:9d:4d:f6:7f:f9:38:ee:bc:
bc:8b:44:8f:29:63:f8:cc:fc:bb:dd:d0:b8:2f:63:93:8a:69:
dd:e5:21:ec:ef:2c:b0:c4:3a:b1:bc:1d:40:78:78:bb:5f:a7:
c3:16:69:47:2b:d3:52:56:72:3e:66:cd:82:8d:ed:ca:17:c2:
7e:02:4f:79:0d:d7:28:87:bb:03:41:84:96:9d:87:bb:e6:04:
f9:86:4c:6b:6e:fa:20:d0:02:47:5f:72:d0:ff:74:03:d0:04:
7c:c1:20:70:6d:eb:94:fb:e8:f1:d3:19:db:8c:26:05:36:4e:
0f:5e:59:7c:e9:54:c8:49:da:cb:d4:4b:04:3c:58:0d:30:08:
6f:c0:b0:db:45:ce:67:96:41:57:75:1c:0e:69:55:e9:f1:f0:
9a:af:35:c5:c9:66:08:d9:ec:9d:34:49:1e:26:56:02:fe:62:
fc:34:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:35:35 2026 by rpki-client