
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier: Fu9LYTqj7Lc4OTSVe/CU5U261K2wrI6ZX/s11Vbt5Bo=
Subject key identifier: 06:79:A0:E3:49:01:5D:96:5B:4F:C7:37:C2:A5:2C:2E:3B:6E:E5:82
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number: 01D0
Signing time: Mon 27 Jul 2026 05:22:15 +0000
Manifest this update: Mon 27 Jul 2026 05:22:15 +0000
Manifest next update: Mon 03 Aug 2026 05:22:15 +0000
Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: ZIYfsM6znNt4VNYVzoENg0AYgoM2xuJABay2KedpHY8=)
2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: lo4efARTvEcP2ve6/ixSUWQB1NQ99xWjC1uzkkmYqbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Validity
Not Before: Jul 27 05:22:15 2026 GMT
Not After : Aug 3 05:22:15 2026 GMT
Subject: CN=6a66eb07-1dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:a9:46:ee:6a:9c:ef:dc:a6:57:d1:90:22:
00:d3:a7:6e:77:fe:de:59:be:09:78:44:f0:6c:44:
82:b6:04:27:96:0f:08:58:d9:4c:76:df:57:4a:57:
88:f8:c5:57:9a:54:32:26:92:4b:75:f9:60:00:2c:
f6:e6:c1:d2:1f:60:78:14:d0:4e:63:a9:2d:10:7a:
52:bd:61:a4:ff:08:91:e3:1c:e3:dc:f5:96:ad:d3:
f9:23:2e:61:47:9f:0a:7e:75:a3:09:bf:8f:5c:6b:
23:cc:7d:93:73:ec:26:dd:58:6f:ab:c6:4b:ec:ab:
4a:0c:aa:00:b7:f4:15:7f:36:4b:37:2b:55:0f:c7:
77:6d:66:96:bb:a9:14:95:36:d5:98:11:18:a7:53:
6b:2a:0c:8a:73:09:a7:ed:2b:7e:3b:74:97:55:b8:
70:0c:83:20:f9:5a:e5:37:fd:d2:8a:b4:00:2b:f1:
fc:13:c8:23:c5:97:72:5d:7c:fc:a8:39:5f:ba:89:
23:66:45:aa:e2:47:92:67:ec:62:62:7e:28:8b:5b:
34:f5:91:b2:4c:fb:fa:b5:a7:27:59:80:6e:c6:1b:
6f:f2:5b:2f:f7:3c:33:6e:7a:4d:25:76:88:83:6f:
bd:92:3f:16:8c:58:4b:38:f4:ed:45:7e:26:cb:b0:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:A0:E3:49:01:5D:96:5B:4F:C7:37:C2:A5:2C:2E:3B:6E:E5:82
X509v3 Authority Key Identifier:
keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:19:4b:2e:e3:6d:c8:ff:fb:77:83:c3:92:b1:d6:2a:9a:e8:
56:c1:36:9b:94:28:b6:f4:e1:c3:8a:7f:91:25:62:da:b9:3b:
cb:92:c0:fd:02:34:76:c3:b8:3f:eb:30:eb:8b:72:07:ac:4d:
5a:ef:a5:8e:97:f2:ae:1d:d7:7a:2b:40:22:77:b4:55:55:f7:
e9:c6:99:6e:b4:a3:99:c1:2a:f9:08:c3:b2:93:18:84:26:5c:
06:cc:d0:18:fd:b1:54:a9:cb:2a:c3:c3:e9:c5:6c:e7:ca:6c:
75:ce:55:c1:73:21:ba:2e:62:5a:82:46:de:1d:cb:f1:5d:57:
d3:19:71:5a:23:21:47:b3:c2:8f:54:df:35:d7:14:f8:24:99:
d8:23:b4:5a:a6:89:f2:3e:18:6e:15:df:af:03:94:6c:1f:1b:
29:c8:d2:c7:42:95:22:38:c5:5a:bb:a4:9e:48:cf:62:89:20:
b7:3f:ce:d7:d5:74:78:e1:b6:56:b6:e7:d8:f5:f1:2d:29:e5:
3a:9f:22:c2:ae:c1:f4:6b:37:6f:d0:92:64:ef:b0:98:27:f0:
1d:7e:32:47:78:84:e7:7c:b2:28:a8:7f:1d:8d:4a:be:39:61:
0b:ed:d9:54:4c:e3:6f:4b:4c:c5:93:0a:cb:c7:e7:28:8d:99:
dc:04:31:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5
MjNBQTc1QzcwHhcNMjYwNzI3MDUyMjE1WhcNMjYwODAzMDUyMjE1WjAYMRYwFAYD
VQQDEw02YTY2ZWIwNy0xZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6WCpRu5qnO/cplfRkCIA06dud/7eWb4JeETwbESCtgQnlg8IWNlMdt9XSleI
+MVXmlQyJpJLdflgACz25sHSH2B4FNBOY6ktEHpSvWGk/wiR4xzj3PWWrdP5Iy5h
R58KfnWjCb+PXGsjzH2Tc+wm3Vhvq8ZL7KtKDKoAt/QVfzZLNytVD8d3bWaWu6kU
lTbVmBEYp1NrKgyKcwmn7St+O3SXVbhwDIMg+VrlN/3SirQAK/H8E8gjxZdyXXz8
qDlfuokjZkWq4keSZ+xiYn4oi1s09ZGyTPv6tacnWYBuxhtv8lsv9zwzbnpNJXaI
g2+9kj8WjFhLOPTtRX4my7Ai/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ5oONJ
AV2WW0/HN8KlLC47buWCMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1
NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6
ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIRlLLuNtyP/7d4PDkrHWKproVsE2m5QotvThw4p/kSVi2rk7y5LA/QI0dsO4
P+sw64tyB6xNWu+ljpfyrh3XeitAIne0VVX36caZbrSjmcEq+QjDspMYhCZcBszQ
GP2xVKnLKsPD6cVs58psdc5VwXMhui5iWoJG3h3L8V1X0xlxWiMhR7PCj1TfNdcU
+CSZ2CO0WqaJ8j4YbhXfrwOUbB8bKcjSx0KVIjjFWruknkjPYokgtz/O19V0eOG2
Vrbn2PXxLSnlOp8iwq7B9Gs3b9CSZO+wmCfwHX4yR3iE53yyKKh/HY1KvjlhC+3Z
VEzjb0tMxZMKy8fnKI2Z3AQxyw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:14 2026 by rpki-client