
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json)
Hash identifier: NF/1+PJHM+2Ypm1a2TCJ9Js0qIQgMeJDvgCM2e4aMOQ=
Subject key identifier: E0:FC:CF:7D:AE:E6:FD:37:D7:4B:08:33:B6:D4:40:C4:C5:94:8B:19
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial: 10B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
Manifest number: 10A6
Signing time: Tue 28 Jul 2026 17:27:19 +0000
Manifest this update: Tue 28 Jul 2026 17:27:18 +0000
Manifest next update: Tue 04 Aug 2026 17:27:18 +0000
Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: nJ8aLSzNMEHbv7HPI4zZ9863AIoaTsZ8MmHEZYWSF2k=)
2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: N/R+8vPZJokbXr/3RDT9z/N8TcDj96G+vFNXOa/HDA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4279 (0x10b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Validity
Not Before: Jul 28 17:27:18 2026 GMT
Not After : Aug 4 17:27:18 2026 GMT
Subject: CN=6a68e676-619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:45:54:73:a2:16:c9:25:15:30:42:48:5a:
9b:f0:ea:cb:eb:23:88:1f:a1:9c:c6:77:e3:0b:19:
fb:62:a4:fe:48:77:ad:9e:79:78:8f:2b:3b:d6:77:
93:01:3f:29:3a:c7:54:94:c5:97:30:be:a6:13:c8:
12:67:6a:1d:be:a4:c1:8c:95:bf:71:07:3e:00:3e:
6f:e9:e7:90:f6:bf:b5:c7:34:c9:e7:cc:b4:23:d2:
7b:97:2b:ce:73:00:db:4c:aa:a3:11:16:ab:22:d7:
79:69:c0:a9:16:6b:c1:e1:94:d6:f7:dc:18:7d:06:
9c:94:aa:f2:d2:e7:f9:60:92:c1:63:9a:30:b1:fc:
98:86:e0:6d:e6:64:14:76:d3:b7:41:cf:f7:a5:66:
6f:06:7d:e0:41:ed:bf:37:13:98:53:42:20:55:ea:
68:e0:08:8a:76:ca:d4:19:b9:71:cc:ca:a1:30:3b:
5f:06:55:f1:80:b4:65:c8:a7:95:b6:78:d9:b4:b2:
32:bf:7e:be:ed:1a:c9:88:f4:7d:4e:a1:80:18:3b:
fe:df:be:c0:9f:98:cf:cd:cd:8d:30:35:c1:d9:bc:
cf:91:b3:ab:dc:5d:64:2f:51:31:65:68:42:47:cd:
ad:01:b0:85:6a:25:cf:3a:3d:2f:ab:96:a3:3a:31:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:CF:7D:AE:E6:FD:37:D7:4B:08:33:B6:D4:40:C4:C5:94:8B:19
X509v3 Authority Key Identifier:
keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dd:e0:4c:e7:eb:47:15:04:f4:08:3b:4a:95:e7:b3:21:84:
a1:7c:60:90:d2:7e:ed:b6:f5:f8:54:0d:d3:1c:95:5e:a7:23:
ca:0a:05:21:18:50:2a:13:e2:a6:f7:5f:a7:8c:cf:96:62:f5:
01:71:02:d8:e1:cb:da:21:44:f9:8c:df:77:a9:4b:61:21:71:
c2:7f:9e:e0:0f:4d:ed:16:0c:e2:7d:85:d7:10:8a:e2:4e:c0:
61:1d:af:53:eb:5d:1e:0e:78:e1:2c:4c:94:46:a0:05:ea:e8:
ab:ff:cc:35:34:f2:74:cd:89:f9:a5:ee:d9:26:88:f6:00:bf:
b6:52:f6:f4:3f:fd:ef:4b:6e:f6:7b:2b:48:05:66:53:88:b0:
3c:28:72:ce:e5:af:ae:9d:0c:96:2a:a7:90:6c:86:73:79:73:
43:e0:11:81:ee:e2:46:48:3c:fa:a4:ba:35:64:36:37:0b:42:
14:18:7c:48:c8:04:76:f0:2c:1d:e4:bf:b8:3a:50:45:2e:7c:
04:78:d2:23:cc:f0:b0:c5:85:80:8b:45:f5:34:ee:83:74:84:
f6:83:60:4b:a2:12:a2:86:92:99:e0:9d:ed:32:65:f6:1f:c0:
ed:55:ba:a8:bb:61:54:7a:0e:15:5a:8e:61:cc:da:74:13:5f:
48:2a:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:58:26 2026 by rpki-client