
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier: ItyDPnrcE+vjBSnNBCLwx6fBODT88tbsb3R0wLhLKww=
Subject key identifier: 8C:18:B0:45:29:5B:49:E1:38:04:9C:35:B2:DB:1C:7A:E2:B4:4C:B0
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number: 015A
Signing time: Sat 13 Jun 2026 04:59:51 +0000
Manifest this update: Sat 13 Jun 2026 04:59:51 +0000
Manifest next update: Sat 20 Jun 2026 04:59:51 +0000
Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: 2v/O/JQqBm6Pd553mbeUdFGHuMWwZT7WvWR4ilm+N+0=)
2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Validity
Not Before: Jun 13 04:59:51 2026 GMT
Not After : Jun 20 04:59:51 2026 GMT
Subject: CN=6a2ce3c7-fcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:78:4f:86:31:02:05:58:d0:a2:72:83:3a:
f2:f4:89:74:e2:84:b5:ea:eb:92:0b:ed:70:39:e6:
29:ca:cf:67:dd:ed:35:c4:23:07:66:b3:91:67:ba:
5f:18:a4:87:56:3c:28:91:fc:2e:88:aa:90:8f:7f:
02:77:fe:4f:c3:0d:17:70:5c:9f:88:bf:2a:6b:40:
13:c9:42:ae:16:83:e2:c7:8d:19:8f:93:2f:88:98:
fe:35:e7:82:48:85:79:27:55:27:f9:09:84:e5:2b:
88:03:c7:7a:7a:25:a7:81:4b:5d:a2:87:f4:06:01:
ff:07:a5:73:73:aa:59:0b:61:3e:72:bd:36:5d:f1:
55:f2:38:52:74:6e:8e:9c:b4:1d:91:54:29:68:37:
0e:1c:5c:96:15:f0:69:77:ad:19:67:1d:e3:08:75:
2c:97:ca:ae:0f:2a:4f:a2:9e:8b:74:42:6e:d4:ad:
47:75:c3:88:a0:1c:ca:11:13:a8:cf:a0:37:32:d9:
3c:e4:91:74:f8:fc:67:a4:23:af:66:e9:f6:80:74:
53:f9:df:02:a6:fb:01:ca:e0:02:95:23:0a:fb:f2:
95:74:0c:2f:5f:35:d0:66:1b:0a:8a:31:bf:95:f5:
eb:29:4c:28:a3:4d:79:7c:e2:99:70:6d:a3:22:53:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:B0:45:29:5B:49:E1:38:04:9C:35:B2:DB:1C:7A:E2:B4:4C:B0
X509v3 Authority Key Identifier:
keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:32:ef:02:fd:4d:13:63:cf:3f:50:95:1f:c6:d6:02:90:
fb:8c:c4:1e:55:03:5f:94:d3:b8:70:29:82:f9:6a:ae:b0:50:
eb:44:62:03:c0:24:22:f5:9a:5e:00:0e:eb:2d:ba:0b:34:b1:
54:9f:61:02:92:0d:60:f8:dd:18:c2:48:f8:89:53:31:d0:65:
7d:00:a7:85:8a:b9:07:cf:3d:0e:03:ad:ea:89:36:35:54:12:
8d:e8:da:62:22:68:77:ea:ae:70:27:62:9c:6a:b2:09:c3:47:
cf:92:ba:4e:23:c1:f9:9c:7b:7c:19:83:31:da:a7:b3:e2:f8:
3d:59:ee:4a:09:b3:4b:46:84:f5:cb:36:c2:dc:47:93:f8:94:
60:fa:eb:d9:ee:2c:3f:95:61:f1:88:cf:48:c0:3e:e8:ee:1f:
a2:2d:ae:22:af:bd:53:af:85:bf:04:2d:de:61:38:6c:39:a4:
2e:ab:d8:4e:44:33:1a:b3:a5:95:39:ef:f7:39:8a:5d:52:63:
e3:ab:bc:68:0e:f1:3d:9c:4a:15:8d:42:94:4b:ff:cb:95:2d:
ee:34:06:c1:f4:25:51:24:b1:36:8e:6e:80:32:2a:3f:2d:17:
80:d5:eb:da:19:0c:da:ec:66:2b:b8:23:61:8c:2c:50:e0:20:
7c:92:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:27 2026 by rpki-client