
$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: 72XnNOxSelSADEe5OxnwGI0uMGc+EDE6/5cQWh00LSE=
Subject key identifier: 03:AE:71:4F:9B:F6:E1:A9:23:08:C1:C4:03:42:7B:B1:5A:18:04:10
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0CD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0CD0
Signing time: Thu 16 Apr 2026 18:15:27 +0000
Manifest this update: Thu 16 Apr 2026 18:15:26 +0000
Manifest next update: Thu 23 Apr 2026 18:15:26 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: EtVYZIftPhygQOgiCr3ADCibJdEOESwwsVdcJCNHJYY=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Apr 16 18:15:26 2026 GMT
Not After : Apr 23 18:15:26 2026 GMT
Subject: CN=69e1273e-b661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:ad:53:ea:e4:dc:8c:6c:fc:e6:58:08:65:
a6:5b:b6:f3:0d:06:dd:74:9d:72:a0:9a:74:04:ae:
8b:95:10:97:87:53:55:da:76:c2:1a:0a:e4:23:1f:
fd:e1:54:f6:3d:bd:b1:2c:77:da:3d:f5:30:f4:2d:
25:71:c0:b5:64:ba:34:90:b1:70:7a:db:50:f7:6c:
5e:e5:50:6b:11:93:eb:be:47:26:b5:1a:95:5b:e2:
da:0e:39:cf:09:7c:fb:29:8a:17:3c:b2:4c:2c:6b:
0f:97:5c:9d:d3:12:e3:7f:15:f7:80:57:39:e8:43:
5e:f0:db:57:26:15:dc:97:f1:f6:7b:94:ec:ff:d1:
1d:90:0b:d9:01:d4:84:ec:05:9b:fb:9a:2c:a0:00:
6f:73:f0:a6:01:54:c7:57:18:8b:61:a4:a5:d2:01:
fe:48:5e:10:5d:de:6b:95:f9:01:99:37:67:c9:c0:
04:4c:86:94:77:ba:dc:67:8c:f5:e5:f4:37:b0:15:
21:10:ec:ee:b4:c0:29:5b:33:71:bd:6f:ae:43:24:
fd:c0:7b:b9:1c:2a:8c:89:95:ab:ac:97:4a:24:33:
36:c8:17:98:1d:e0:74:d8:6a:d4:d5:b2:5d:65:c8:
fe:a3:c6:aa:cc:48:57:22:a1:94:19:38:a0:8a:ab:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:71:4F:9B:F6:E1:A9:23:08:C1:C4:03:42:7B:B1:5A:18:04:10
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:44:7e:c6:78:6c:44:c3:d5:b1:1d:79:88:d7:51:42:31:c4:
c8:8e:ae:d8:81:7e:aa:46:2c:8b:7a:64:58:6d:52:5f:e2:bb:
62:c6:43:d3:5c:0b:5e:e4:43:73:b4:ab:91:26:2e:3c:2c:7e:
a1:ef:5b:ca:75:93:ee:c4:fe:d7:b7:81:22:93:94:45:87:7d:
26:83:c1:4d:cc:b5:14:7c:ae:0b:a1:73:15:aa:d6:6b:95:1b:
64:99:40:24:7b:41:b1:d7:27:44:72:fa:b7:95:e1:c0:ed:9b:
d5:aa:22:0c:df:58:d8:cc:77:13:9e:26:6d:b4:d5:04:88:64:
16:c9:b4:11:dc:74:b9:ee:b6:e3:cf:6d:87:29:12:01:ca:46:
1f:40:44:ee:9f:0e:7c:dc:79:95:9b:13:6c:d6:a1:69:52:31:
ed:2f:bc:26:ad:eb:5c:e4:4f:ae:fa:33:a6:16:db:9b:80:07:
79:ba:e7:ab:b2:3c:4e:3e:0b:fd:d5:30:2c:33:c8:9d:15:0b:
df:c2:57:1b:83:8c:11:2b:bd:ab:b6:8f:0f:8d:31:00:2f:46:
ed:01:f7:cf:06:41:d4:5c:b3:c0:04:32:79:ff:23:5f:e8:e8:
bc:8a:34:15:fe:d3:3a:88:b0:bb:f0:eb:66:29:82:f7:21:cf:
f6:aa:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:18 2026 by rpki-client