
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
File: kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json)
Hash identifier: 60qvIOOpfNvXNCf07vFRipEDFbb2i3YVBRkPqpAs4Xs=
Subject key identifier: 17:39:0E:59:86:95:71:F1:9C:CC:2D:01:2A:A4:33:CA:99:7D:B2:42
Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79
Certificate issuer: /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
Certificate serial: 1095
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
Manifest number: 1085
Signing time: Thu 16 Apr 2026 17:18:30 +0000
Manifest this update: Thu 16 Apr 2026 17:18:29 +0000
Manifest next update: Thu 23 Apr 2026 17:18:29 +0000
Files and hashes: 1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: BCxm/6hLuwYomR02I+6U9HRrl2eeHhXf5p2rJ6ysJP4=)
2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: RzwYZuvd4XyjCOm9BluFD+cQ9dlkUBoYuq3X1xwqlGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl
rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4245 (0x1095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
Validity
Not Before: Apr 16 17:18:29 2026 GMT
Not After : Apr 23 17:18:29 2026 GMT
Subject: CN=69e119e6-385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:8e:cd:3b:29:d5:a0:2f:a4:98:06:9c:ce:
09:68:48:ac:96:56:21:e5:7d:9a:7c:b2:ee:32:35:
97:43:07:68:78:bd:88:c2:82:2a:ba:cb:3b:cf:56:
cd:42:bf:68:c5:c7:25:0b:52:b4:81:94:ac:62:d3:
a8:11:5c:72:3b:ff:37:61:8a:da:68:1a:70:16:74:
dc:33:ef:aa:dc:42:72:a7:6d:98:07:41:2b:ed:19:
a3:a9:fb:10:d0:5e:06:e2:f0:12:15:1f:44:82:6f:
48:06:76:c1:96:35:47:49:11:78:91:e4:4c:8e:4c:
79:ca:47:37:93:a1:50:03:33:88:78:82:f1:94:8c:
66:1e:28:30:12:45:5e:79:39:0f:81:3b:ed:60:f1:
4f:9b:b5:9d:7f:b4:12:20:8f:60:6e:f8:ce:ef:fd:
59:df:f0:3d:6b:33:2d:3c:ac:eb:8b:a2:ec:73:20:
94:79:38:ec:e3:63:b8:4a:81:30:dd:36:33:46:1b:
b2:15:d8:80:c1:13:24:21:51:13:7b:3f:18:ab:c4:
f6:ae:2f:79:54:aa:38:e7:4f:c0:70:62:a5:71:ba:
9b:1a:f0:89:85:d0:7d:47:d7:c4:f4:3a:23:a9:f6:
71:21:49:cd:ac:f6:16:0c:fb:a1:d5:25:c0:b8:e0:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:0E:59:86:95:71:F1:9C:CC:2D:01:2A:A4:33:CA:99:7D:B2:42
X509v3 Authority Key Identifier:
keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:9d:ba:bc:d0:41:5c:22:de:7c:0e:50:e7:c2:89:4a:1b:
0e:dd:62:2d:5f:af:cc:64:d4:11:76:24:9e:ea:25:18:7f:9a:
6a:6a:db:21:23:78:63:bb:be:cb:c7:bd:49:22:8a:f3:bb:c6:
b1:73:f3:16:87:a5:62:3c:1f:ff:3b:28:7c:fa:4d:55:2e:05:
c0:18:06:cc:06:68:a7:63:cc:c7:54:bd:42:b8:9f:ed:8b:b7:
0c:b7:66:ea:31:c8:d3:0c:9c:35:89:fe:79:a9:eb:ad:12:62:
87:aa:46:b4:c2:54:57:bc:d0:7f:5d:36:d5:45:94:62:52:6d:
0b:60:92:e0:9a:cf:28:7f:11:41:47:00:e0:35:92:d4:dc:42:
22:94:5c:d0:90:34:8f:e7:c7:88:d2:ff:18:e2:0f:c2:d4:30:
59:91:c9:fc:e1:86:f4:cf:7a:26:82:14:1e:e0:85:32:1b:72:
e1:de:72:ba:44:c1:34:2b:ec:76:97:22:0e:ab:32:b9:eb:0a:
aa:41:8a:c7:08:43:dc:4c:af:54:31:db:59:67:97:16:09:43:
e1:95:ff:e1:e5:f5:94:95:fe:89:a3:4d:ec:b4:fe:26:17:11:
d0:2d:23:aa:c2:02:03:1f:c3:0c:2e:31:f3:1d:b1:d8:99:7d:
99:59:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:42 2026 by rpki-client