
$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: 5DqBJU+DjYWvdxkjw/YxB6dVeeVfX9ZCs0Tw+L8xWgY=
Subject key identifier: FD:95:F6:25:1F:EA:68:73:AF:2E:6E:F3:EB:ED:F2:2B:F0:75:C8:F7
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0CC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0CB8
Signing time: Mon 02 Mar 2026 02:44:35 +0000
Manifest this update: Mon 02 Mar 2026 02:44:34 +0000
Manifest next update: Mon 09 Mar 2026 02:44:34 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: MOE7x34VrP6O8agVHTKLrX1g2Zo0gNdNPBRDkYeVb7U=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3264 (0xcc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Mar 2 02:44:34 2026 GMT
Not After : Mar 9 02:44:34 2026 GMT
Subject: CN=69a4f993-a997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:da:c6:13:70:1a:43:e4:14:a1:ed:a7:74:
e4:45:85:97:8b:26:d2:cd:21:dd:bf:f4:7b:6b:57:
fb:25:1a:c7:9c:08:c4:5b:d4:77:b6:c1:17:0b:68:
1e:61:6e:17:13:a3:51:2f:79:31:2e:60:aa:40:3b:
81:0c:08:3a:0a:c9:14:ad:87:4f:60:1d:a9:69:ca:
82:85:e7:4f:54:df:0a:f5:fa:52:70:a6:c8:31:63:
59:5f:25:cc:2c:97:ff:70:78:b6:db:b8:ce:27:f5:
49:20:a6:48:65:52:b4:2a:e0:26:19:bf:52:aa:65:
24:49:06:c0:52:ba:cd:70:64:45:26:65:ba:3e:9e:
66:53:cd:8c:3a:01:71:69:69:61:60:53:c6:6f:8a:
73:ab:37:4e:46:20:3b:bb:28:ea:f2:44:21:bf:c2:
38:c7:35:dd:f3:9a:5e:45:85:f5:31:72:06:f3:c5:
bf:f9:85:75:b4:e4:6b:e0:09:8a:cb:7a:49:2a:be:
48:d0:a7:23:5e:c5:a5:35:50:88:b4:3d:cc:00:ae:
dd:7a:00:09:2f:a4:ae:30:99:c7:37:d5:7a:7c:ab:
df:94:13:9f:7c:32:9e:2d:91:cf:2e:37:db:ce:00:
38:f9:f9:7e:85:39:72:b6:97:98:ed:41:a2:1c:d2:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:95:F6:25:1F:EA:68:73:AF:2E:6E:F3:EB:ED:F2:2B:F0:75:C8:F7
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:ba:af:e4:31:d5:d7:ed:17:1f:22:e5:0d:bd:54:f7:9d:0c:
46:a0:4d:1f:51:05:4e:f5:93:3d:fa:fb:06:4c:64:b7:72:49:
c5:aa:9c:8b:70:34:3a:35:0e:67:1c:95:1f:85:69:cd:30:9f:
2d:4f:25:9a:09:6e:48:e7:17:ea:0a:f1:09:f6:dc:1f:77:d0:
b2:ca:72:81:83:bb:de:60:2f:af:03:f0:f1:49:07:13:52:02:
fe:ef:ba:f8:72:be:63:62:20:13:38:92:16:98:12:d2:01:38:
b0:67:fa:a3:a9:ac:4e:2f:54:71:9a:c5:db:17:6e:5d:15:3b:
63:16:b0:96:15:6e:86:7f:58:f8:2b:83:b3:41:db:47:53:0a:
27:d5:46:ea:93:a2:0b:69:5a:ce:a8:85:1b:ff:fa:4d:1c:e4:
b1:cf:08:6e:b8:41:fb:32:8f:e2:18:15:b9:4b:08:5d:b5:9b:
0c:e6:51:e9:10:1d:da:39:6a:1a:6a:99:82:5c:35:c3:d4:15:
6c:32:4c:c6:96:2c:c9:1c:17:c6:be:f2:1f:8b:b5:32:2f:90:
80:d8:23:13:e0:99:a1:66:b2:b1:6f:13:93:8c:70:b4:d5:2f:
29:b2:38:af:0e:41:2f:ca:6b:1e:58:01:f5:63:ea:0d:c4:03:
79:85:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:37 2026 by rpki-client