
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier: Kag1jLPQDYt8JcQQIhAmPmDj9uh6yMIniCTPvdspDQQ=
Subject key identifier: EC:17:0E:F3:83:DB:2C:FC:66:3A:30:0F:74:1E:EF:7E:F8:AE:40:18
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number: 098F
Signing time: Tue 28 Jul 2026 20:22:55 +0000
Manifest this update: Tue 28 Jul 2026 20:22:54 +0000
Manifest next update: Tue 04 Aug 2026 20:22:54 +0000
Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: QlHigu+7mGk7avCkT6bGlD3vOFDWpF2FogyrNWFRu+I=)
2: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: azInidenMOueD30As1H+RBAKXgDG+VqWECAoFhqLl5M=)
3: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: SHeprPzbCJK7OlueBAVX3hu432Pz3KHbWo2lGdKMTQE=)
4: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: DPCUhEYWzZw/Q4o7/HdkA1e5q+1hk1SxLOVa65/v/3A=)
5: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: tGvR4Lvw2xcnvZAi3tVX941d13zG0cbdG6STnkMarY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Validity
Not Before: Jul 28 20:22:54 2026 GMT
Not After : Aug 4 20:22:54 2026 GMT
Subject: CN=6a690f9e-0ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:5d:e8:01:63:70:76:ec:5f:cf:f7:14:2a:
1e:96:7f:8b:5d:5f:ad:28:6c:fd:6b:7f:b0:33:96:
4a:73:4b:c6:a7:4c:8c:ca:12:b2:26:80:44:a0:6f:
62:ec:ab:69:e4:07:ae:99:10:77:0e:10:f1:93:a7:
5b:43:b8:ed:41:4f:a0:0a:72:30:f5:f7:c2:b0:11:
f1:ea:29:d5:00:71:64:87:9b:de:f3:15:19:b9:ce:
3d:c8:98:fc:23:12:9a:77:d6:06:cd:f4:44:7b:76:
a9:60:c5:49:63:4f:70:3c:48:17:d4:5c:57:c3:92:
1e:65:84:1f:55:56:e6:df:cb:72:36:e1:8a:87:b4:
97:b6:fa:4b:ea:9f:d7:ef:31:3b:99:91:0e:56:53:
fd:84:4d:1e:00:54:2e:26:b2:e9:01:9e:c4:28:4b:
93:11:c7:c5:1f:ed:b5:84:9a:7f:0e:ff:c9:5d:0f:
ef:75:10:0c:13:91:32:1c:b5:3f:76:de:a9:63:1a:
74:bd:73:ae:92:85:48:56:b3:23:62:57:14:e2:25:
c1:e5:a1:08:94:e7:e7:7f:8d:4e:3c:fe:69:fd:a7:
ad:73:48:10:6c:90:3d:87:81:1c:b7:06:ff:56:4c:
c6:b9:93:b0:2a:e6:37:58:cd:e6:eb:c6:af:dc:0b:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:0E:F3:83:DB:2C:FC:66:3A:30:0F:74:1E:EF:7E:F8:AE:40:18
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:9d:a4:d0:2c:dc:75:24:2a:9c:d7:2a:6c:08:ef:cc:24:
c3:20:53:70:d0:8e:0a:a1:b1:6a:f6:11:87:a4:54:7a:6a:4d:
9f:54:6d:aa:4f:ec:ed:0b:a0:90:f2:6c:2d:96:8d:7a:77:5c:
8d:9d:1b:02:67:c3:e3:20:fe:91:9a:fd:a1:18:a3:6a:df:4b:
39:cd:e0:ed:5b:8c:48:ca:5b:84:6a:d4:42:f6:56:42:07:c4:
60:89:02:fa:d5:39:cd:0c:05:a9:26:2d:33:e4:c4:40:b5:a9:
44:2f:9e:87:b0:23:ad:1f:b9:1f:04:80:39:d1:48:5f:82:9b:
0d:74:cb:f6:fe:e9:5b:13:0f:1f:db:33:8a:57:21:57:e6:8c:
3d:8a:c5:45:b1:49:0f:fd:c2:0c:c1:d5:7b:26:92:13:cc:ca:
37:ac:cb:6c:5b:73:d5:36:fd:2b:dd:f7:e0:11:ce:77:f4:07:
b8:63:62:c9:f5:bb:2c:09:0e:38:23:0e:6f:d2:b5:78:9a:5d:
11:01:81:bf:56:2f:6a:9e:e5:a5:61:07:56:c3:2e:7c:a9:23:
e2:1e:c0:1b:2b:c2:9f:2d:e2:f3:6e:72:2b:b0:e5:d5:7b:da:
8a:75:56:64:52:7f:24:0e:ff:db:81:09:68:31:54:2c:b3:72:
b3:85:b2:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG
MzlEQkM4NjYwHhcNMjYwNzI4MjAyMjU0WhcNMjYwODA0MjAyMjU0WjAYMRYwFAYD
VQQDEw02YTY5MGY5ZS0wYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn49d6AFjcHbsX8/3FCoeln+LXV+tKGz9a3+wM5ZKc0vGp0yMyhKyJoBEoG9i
7Ktp5AeumRB3DhDxk6dbQ7jtQU+gCnIw9ffCsBHx6inVAHFkh5ve8xUZuc49yJj8
IxKad9YGzfREe3apYMVJY09wPEgX1FxXw5IeZYQfVVbm38tyNuGKh7SXtvpL6p/X
7zE7mZEOVlP9hE0eAFQuJrLpAZ7EKEuTEcfFH+21hJp/Dv/JXQ/vdRAME5EyHLU/
dt6pYxp0vXOukoVIVrMjYlcU4iXB5aEIlOfnf41OPP5p/aetc0gQbJA9h4Ectwb/
VkzGuZOwKuY3WM3m68av3At+SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwXDvOD
2yz8ZjowD3Qe7374rkAYMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5
RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0M0Qy9DQ0IyMDM1NEI5RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtV
eWd1UkJja25IZXJ6bmJ5R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY6+dpNAs3HUkKpzXKmwI78wkwyBTcNCOCqGxavYRh6RUempNn1Rtqk/s7Qug
kPJsLZaNendcjZ0bAmfD4yD+kZr9oRijat9LOc3g7VuMSMpbhGrUQvZWQgfEYIkC
+tU5zQwFqSYtM+TEQLWpRC+eh7AjrR+5HwSAOdFIX4KbDXTL9v7pWxMPH9szilch
V+aMPYrFRbFJD/3CDMHVeyaSE8zKN6zLbFtz1Tb9K9334BHOd/QHuGNiyfW7LAkO
OCMOb9K1eJpdEQGBv1Yvap7lpWEHVsMufKkj4h7AGyvCny3i825yK7Dl1XvainVW
ZFJ/JA7/24EJaDFULLNys4Wy6A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:14:03 2026 by rpki-client