
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json)
Hash identifier: K2ZFcXIH1rRWB+QP5D17cvmESlEi2dBEbCg8GXFZTZQ=
Subject key identifier: 14:7A:85:3A:85:46:B5:15:F3:38:18:B6:0E:90:37:44:D3:17:7B:C0
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial: 0749
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
Manifest number: 0741
Signing time: Sat 26 Sep 2026 21:58:56 +0000
Manifest this update: Sat 26 Sep 2026 21:58:55 +0000
Manifest next update: Sat 03 Oct 2026 21:58:55 +0000
Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: 9ZcnpFUkhLax6QDIyoYCmh4PosVF8N4MhTQvEJTb+YE=)
2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: ZLw8huOg2nveXXA6ySB0lncxnJt9V0PAEh/Tv0xMDkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Validity
Not Before: Sep 26 21:58:55 2026 GMT
Not After : Oct 3 21:58:55 2026 GMT
Subject: CN=6ab84020-686f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ca:0b:c4:c5:d7:c8:a2:ce:e5:54:7f:b5:e1:
16:45:94:b4:9a:17:aa:7a:5b:2b:ae:f1:58:42:d8:
0f:93:74:1b:ea:b0:ba:c6:9b:7f:7c:87:2d:1f:2e:
06:0e:b8:6b:44:37:8f:65:26:e4:6d:c5:73:64:c3:
b9:46:dc:99:8f:de:49:6b:0a:ee:a9:39:11:14:87:
39:b7:53:3a:e9:3a:46:3a:5c:89:4c:39:e5:70:4d:
83:26:61:63:8b:6c:58:47:2b:58:1b:e7:84:2d:49:
a9:98:25:2c:ba:cb:fd:91:6b:a9:df:ad:fc:24:b1:
08:a0:43:cd:ab:57:2a:51:ba:bd:a4:88:ad:9e:8e:
67:aa:57:87:1c:00:0b:fb:8f:26:41:e6:ad:92:4e:
a8:d5:ee:87:05:97:47:3d:7c:85:40:10:2f:68:de:
cf:92:4c:42:f3:7f:6e:0c:63:cb:59:00:c8:33:c3:
82:a0:4f:c6:df:94:b2:65:5b:1e:45:65:12:78:19:
80:14:0e:2e:cf:5e:5f:da:4a:7c:f2:43:96:4a:20:
59:0e:10:c7:4d:ad:78:29:c1:4c:a0:44:00:07:67:
b0:f2:f2:a9:6b:80:2d:c9:6c:c5:53:d9:72:72:02:
47:be:f3:10:72:58:cb:d8:8a:a6:4f:58:fd:5a:59:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7A:85:3A:85:46:B5:15:F3:38:18:B6:0E:90:37:44:D3:17:7B:C0
X509v3 Authority Key Identifier:
keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:16:f8:38:12:90:42:d2:5f:e5:b9:06:06:87:7a:2f:49:1b:
1a:64:11:bd:53:7f:a6:6a:d5:62:ef:a9:14:56:63:35:8b:e8:
0d:7d:68:07:54:3b:cd:72:01:09:a1:83:fb:c6:27:3b:67:f1:
91:fd:5f:ba:80:33:e1:1e:9d:ed:22:ec:57:43:49:e3:42:6c:
9a:ef:29:eb:42:0f:49:ac:8d:ce:8a:46:42:e7:f5:12:d9:e7:
4f:51:f7:74:eb:36:8b:70:b3:a1:b3:c5:9d:be:77:37:74:51:
e2:e6:80:b5:46:21:f3:90:56:75:44:ea:23:9c:c0:a4:fb:72:
08:44:94:72:87:60:c0:c1:bf:3e:e2:96:e4:07:b0:de:d4:d2:
af:3b:6f:0b:ad:d1:92:1f:ed:e5:9e:c6:60:dd:36:d6:39:59:
cb:2c:65:b2:96:cf:e3:d6:9a:98:46:97:12:b0:1a:1b:fb:70:
33:97:88:a0:ca:c7:46:dd:10:c8:77:e8:6a:10:ed:bb:9d:ac:
4e:ab:68:85:b4:65:da:72:01:9a:a2:61:2c:d5:3d:93:78:10:
51:07:8b:02:56:e1:27:c5:78:69:e5:d1:2b:29:7c:e5:1b:1f:
19:83:1a:04:56:5a:88:5b:02:e6:6f:2e:51:c4:c4:88:6f:15:
18:89:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:45:39 2026 by rpki-client