
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
File: KtPYi16OCwUUGjvJL4XkJzoFYqE.mft (raw, json)
Hash identifier: YRGuuf+ZwUg/5VazVGhRSkQdPqbitLWA2BxvfzvoPm0=
Subject key identifier: 0F:E2:71:B2:92:4F:20:0A:28:F7:BE:10:25:0E:0C:D0:5F:43:2D:ED
Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
Certificate issuer: /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
Manifest number: 01BF
Signing time: Sat 13 Jun 2026 03:52:29 +0000
Manifest this update: Sat 13 Jun 2026 03:52:29 +0000
Manifest next update: Sat 20 Jun 2026 03:52:29 +0000
Files and hashes: 1: KtPYi16OCwUUGjvJL4XkJzoFYqE.crl (hash: 7buyyf5c3syEJkr1PGECTG3ChwYMTwsmrmjWL74sR2o=)
2: 1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (hash: KGc0TSSoFoKqnsUVoh0np4Cm7NUT/EBHE/n1p8DVqTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Validity
Not Before: Jun 13 03:52:29 2026 GMT
Not After : Jun 20 03:52:29 2026 GMT
Subject: CN=6a2cd3fd-4867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:db:c6:8a:71:d3:e1:a3:fb:79:a2:b3:0d:
62:db:35:ac:6e:ee:bc:67:a3:ca:e5:8d:fc:79:41:
d8:0a:64:79:42:c4:e8:df:3e:eb:26:07:d7:19:a7:
59:dc:cf:1a:4e:8a:54:15:98:f3:49:a8:00:d3:cc:
66:bc:a6:52:47:a2:32:63:08:a1:9a:5f:85:b0:06:
c0:ff:c9:b1:13:f6:e7:e6:19:f6:7b:5f:d1:75:fe:
f4:fb:7e:62:47:c9:c3:61:7b:01:3f:71:ea:56:a7:
d9:d7:e7:f7:70:6f:e0:00:fe:48:d5:6d:2b:f0:6c:
91:b8:3c:da:e4:48:c4:02:78:89:4d:88:19:77:e1:
75:2a:cb:21:9e:f4:3f:7f:b4:cb:ec:cc:d7:99:0c:
da:51:d6:9e:29:b2:05:15:64:ba:91:e1:a5:01:13:
1c:cb:db:80:87:75:c5:1c:91:f4:44:9d:ec:85:29:
67:82:0b:a2:91:df:c2:0c:6f:89:bc:f1:ec:2a:3f:
54:66:eb:6c:48:41:d9:e7:f9:fd:88:2a:ce:49:ef:
e9:ed:31:e7:0f:9e:0a:e3:6d:a4:a7:03:3e:83:d0:
d1:21:05:11:e9:a9:3b:37:86:60:b7:45:c0:89:9f:
4e:09:a2:78:2f:1b:2f:f5:70:5a:7e:d4:d9:af:74:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E2:71:B2:92:4F:20:0A:28:F7:BE:10:25:0E:0C:D0:5F:43:2D:ED
X509v3 Authority Key Identifier:
keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9c:dc:9a:55:5e:77:f9:a4:2a:ec:c5:55:b9:0f:f8:97:f0:
27:7c:c9:c5:d5:73:c3:ac:35:be:d3:79:06:59:21:3d:11:55:
90:e8:2a:5f:ad:2a:86:0c:ff:3e:91:01:cc:d2:ca:66:85:7e:
5e:db:bd:53:15:4a:f8:de:62:35:3d:65:d8:a4:28:3c:19:09:
bf:50:2b:58:84:f3:62:c6:86:64:e1:53:f3:20:0c:6d:42:05:
80:56:54:b1:93:66:44:50:2c:00:3e:dd:8f:23:20:43:63:a7:
0b:da:d6:c0:6a:52:12:0c:b6:a4:4d:c8:c0:3d:ed:17:d5:ea:
82:9c:1d:ba:d5:33:b0:d4:cb:24:38:c2:77:92:a6:d4:0c:41:
e2:e2:3b:49:9d:8c:00:8e:32:48:66:84:8b:9a:0d:07:91:bb:
c9:05:88:a6:cd:6a:8e:08:06:7b:be:dc:cb:13:35:37:6c:e4:
bd:06:f3:f0:0b:d8:87:97:cb:31:19:b6:a2:7e:a0:73:da:b8:
4c:6d:6b:5c:43:e0:78:1f:ac:b1:1f:92:cc:3e:65:0d:56:b5:
8a:8a:bb:d5:59:38:bb:2d:69:0d:79:52:d6:9e:76:90:9b:68:
09:8d:88:1a:89:30:67:3d:ad:d3:9e:e1:2f:3f:ab:e4:b3:ee:
32:0c:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:04 2026 by rpki-client