
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier: seO1JYt0hdOazcuOekDns52Dmczw4kkhzVz/1oVml4Q=
Subject key identifier: AB:C4:38:9B:1D:24:0E:CB:69:9F:D3:84:33:A6:F0:F6:8D:36:FF:CE
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial: 098E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number: 0953
Signing time: Sun 26 Jul 2026 20:44:18 +0000
Manifest this update: Sun 26 Jul 2026 20:44:17 +0000
Manifest next update: Sun 02 Aug 2026 20:44:17 +0000
Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: lj/cdqFQadU0tU3LBnv7NyKvjuAgpEFUYoAIijYfmMw=)
2: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: FXMw4gU7m6cMDVIFR2ioRmioqgFmxJcgor2Nog9jRxk=)
3: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: pHl2UlpqvRYqNzqgzVyVtJS995yGr9GKW6dkHakGY/A=)
4: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: KT7zEvJNVvs97oYvIe5jqgLfgSdT+s+2AedPsqQHGgo=)
5: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: pwTpLqoix1ml/iDyvZtQl2PM0Bjf1ih1Kt+rjQ1/6gY=)
6: C6E6A146171011F1BE8A5674053D8C67.roa (hash: giIRr2ar8YF7Sh/tonFBshlOwMtWsPmV9SJJhoV2jPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Validity
Not Before: Jul 26 20:44:17 2026 GMT
Not After : Aug 2 20:44:17 2026 GMT
Subject: CN=6a6671a2-79ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:e9:c8:55:7d:d1:d1:26:36:3a:ef:74:fb:
1c:55:05:32:68:f5:12:34:8f:42:4a:2a:89:68:fe:
5f:ec:d8:65:fa:7b:79:ca:f2:42:c6:70:81:1f:56:
ba:c6:cc:5a:26:87:7a:3c:fe:06:b0:1a:06:6e:c4:
4f:9d:62:7a:78:32:4c:ff:4c:b6:a9:4c:39:08:e4:
27:0a:34:5c:64:8b:d3:4d:13:11:09:2b:b8:bd:e6:
71:49:d2:f9:b2:59:70:c0:31:87:61:68:fb:bc:b4:
ce:85:96:e1:22:f4:d3:37:e7:fa:dc:b5:ee:48:39:
68:87:40:cc:d3:fa:bb:53:b3:07:1c:57:d3:04:4d:
80:e3:4e:f8:c4:c9:48:5f:8d:c2:ce:50:14:fa:e9:
29:c6:4e:05:43:87:da:14:e5:85:f1:e1:b7:9b:19:
e0:4f:00:23:0d:eb:32:83:1e:b2:ca:11:7c:97:9a:
f5:16:9d:23:32:67:86:1d:42:f9:24:19:04:ef:40:
b5:51:f6:a0:ee:3b:d8:43:ba:74:83:52:3b:54:3f:
52:31:b6:27:90:b1:04:64:a5:3d:76:72:4e:09:2a:
8b:16:7c:d9:3d:e7:59:09:20:a0:e3:06:33:4c:48:
8b:da:40:b6:29:66:51:df:e4:83:68:c2:64:c0:11:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:38:9B:1D:24:0E:CB:69:9F:D3:84:33:A6:F0:F6:8D:36:FF:CE
X509v3 Authority Key Identifier:
keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ff:bd:f5:35:3b:d6:de:e7:97:95:d5:ff:f1:cc:90:53:92:
98:0d:14:47:81:2f:51:7b:38:e5:2b:f6:0d:df:fb:87:e7:dc:
c4:00:3d:9a:7d:13:49:fc:8b:93:fc:f1:50:78:8e:d8:25:01:
72:51:06:ee:c9:be:b7:8a:55:f9:d3:cf:33:c2:f1:26:69:7f:
39:ba:66:ec:5d:67:14:d0:2d:2b:30:d3:10:86:8e:4a:8a:84:
64:e6:c5:08:90:18:36:0e:c4:f7:76:1e:59:86:7b:e7:97:5f:
b5:4e:26:31:24:7b:6b:03:d5:cd:ab:55:ff:73:38:72:0a:da:
42:9b:c2:48:4b:3c:a4:1a:1c:49:2d:fb:8c:44:cc:40:8c:bf:
37:74:0d:2d:d5:09:9a:1f:bd:94:98:55:6f:9b:1f:b0:bc:14:
e0:69:b3:47:cc:fb:5c:f0:74:8f:6b:34:3f:35:3a:be:df:b3:
c8:7d:02:fd:8f:8b:00:0a:0c:14:8d:38:d3:98:1d:c9:0c:73:
ca:fa:67:d0:b1:9b:ab:77:c1:f6:79:27:cf:59:72:0a:3d:ee:
9b:f8:a2:4c:ae:0a:47:65:1e:40:cc:1d:4b:01:7f:02:5e:1d:
70:89:77:64:a7:39:43:85:c2:97:e7:f4:2b:03:d7:dc:cf:83:
fd:b6:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:02 2026 by rpki-client