
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier: hHFPGQ8E8pmj/BYJq63Lz6GT9JkBE5hBT7vOVBnnq1w=
Subject key identifier: 33:5B:DC:C8:24:8C:C6:4A:E7:DA:76:50:87:FD:50:42:44:03:B0:67
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial: 0370
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number: 035C
Signing time: Mon 02 Mar 2026 02:14:29 +0000
Manifest this update: Mon 02 Mar 2026 02:14:28 +0000
Manifest next update: Mon 09 Mar 2026 02:14:28 +0000
Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: Yxx3qcWMEBOxRK23e1mNQOmws8odBgh5NMbUW/rxaLs=)
2: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 9gkyYiNnNSTo4I2N7Ylm4fDivPDrnTxE1jPV8VJbGZE=)
3: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: rA7lCUagwlSoXVmBALjvh/zo0E3ghTMaHw2IDn8o0rE=)
4: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: X5xFnTuKzWqPd40Q2TFaDH7BIRtN7Zf8wD6VwT6xhXU=)
5: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: Rw8wdhCI/rNZP6FgC9C+qd0EQ9zAMz5LAI5l6VZT91I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880 (0x370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Validity
Not Before: Mar 2 02:14:28 2026 GMT
Not After : Mar 9 02:14:28 2026 GMT
Subject: CN=69a4f285-1f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:c8:03:62:54:d7:a7:c9:c4:be:d4:cc:aa:
e7:c4:4e:3a:3d:2f:3a:e5:6e:f9:74:e9:bb:a6:5a:
44:dd:e0:03:04:aa:f2:d4:bb:c2:a2:d2:60:98:fc:
e0:99:c2:41:b9:85:95:97:7a:e2:03:d4:0f:bf:32:
62:d1:f9:04:2f:16:53:a8:b0:92:d5:c4:cc:c3:5b:
95:a0:26:4d:4f:ea:1a:4f:25:75:55:04:6b:17:77:
07:85:ea:fd:6f:01:e8:0f:6f:1d:85:61:94:17:4c:
5d:8e:e0:ce:0b:9e:28:ff:d1:a7:86:1d:4a:53:8c:
9a:aa:54:dc:2d:83:c1:23:c5:e1:2d:a9:9c:ad:75:
a7:b4:fc:85:fc:13:8b:70:c1:be:dc:84:cb:ff:27:
43:c1:95:75:ec:da:62:dd:50:6f:d9:1b:4a:1e:69:
23:6e:1d:e1:7f:aa:4a:17:1a:03:62:7e:ec:a0:ed:
31:72:41:2a:97:85:51:31:7b:fe:3f:af:9f:6c:27:
cf:82:bb:5d:87:00:08:1c:3d:e6:81:33:b1:65:a5:
d9:88:3b:a8:c6:fc:c9:aa:4a:ed:f6:aa:50:c0:67:
47:6c:65:5a:7d:9e:67:7e:86:b3:f8:37:4a:e6:80:
92:33:0e:35:0f:83:b2:5a:7a:c9:d2:91:78:90:82:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5B:DC:C8:24:8C:C6:4A:E7:DA:76:50:87:FD:50:42:44:03:B0:67
X509v3 Authority Key Identifier:
keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:bd:92:94:3b:eb:a1:5b:a0:db:72:10:a0:11:ef:14:f4:1e:
45:58:df:f6:e6:c5:1b:d7:fe:2f:ef:c9:3d:82:1e:b5:74:08:
e5:f8:26:ad:98:f0:36:e9:f5:48:42:29:64:c4:81:29:8a:92:
97:bd:1e:3e:b4:8f:0f:88:a3:e0:5b:f7:e3:16:eb:43:27:93:
60:ba:28:91:9f:93:b4:95:2b:46:2d:37:66:c8:3d:60:47:d5:
04:59:1b:78:2d:aa:84:68:85:b5:36:56:43:2c:3d:65:cb:f7:
a7:46:a6:18:58:83:7d:2a:a9:7c:e3:30:87:11:35:98:97:bb:
cf:03:2f:3b:14:c7:44:13:54:d6:ff:4d:82:4e:a2:ee:c9:49:
6c:3c:a6:eb:19:d8:fb:87:01:93:3c:99:eb:6b:f9:50:c1:c0:
fc:65:55:e8:2f:15:22:04:b6:30:4c:47:7f:bd:9b:e3:72:78:
7a:57:ce:90:03:2a:2b:a4:47:da:95:c0:04:be:7a:44:4d:4e:
43:17:1b:6b:c7:fb:a1:63:23:c6:44:7b:00:65:57:c2:45:0e:
b8:66:2c:9e:c1:fb:91:6a:fd:b3:00:e1:a2:1e:5b:b5:08:b1:
ed:bc:cb:e8:3b:fc:7b:9c:52:8f:c3:a4:a7:45:e7:22:52:71:
d7:e3:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:58 2026 by rpki-client