
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json)
Hash identifier: IyMPO/GhPuo9uvgoP53v1ivNxCTtaSaULXmwePp+GrY=
Subject key identifier: 1E:A2:F2:6F:AB:A3:EC:82:09:EB:DE:38:15:22:5F:0C:67:0B:58:D3
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial: 10D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
Manifest number: 10C3
Signing time: Sun 20 Sep 2026 17:18:33 +0000
Manifest this update: Sun 20 Sep 2026 17:18:33 +0000
Manifest next update: Sun 27 Sep 2026 17:18:33 +0000
Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: uypgkPHbLv5Hinr+Uy0TnBf/UrOwUJQfc7VqQSQkNEU=)
2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: N/R+8vPZJokbXr/3RDT9z/N8TcDj96G+vFNXOa/HDA8=)
3: B1KZ7cH7Yd28WHi5niYgvVkmwgA.asa (hash: kxCLSwl7XpcMSeevC/G8alM16UxyV3Qsw0G0d2H8j6E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4309 (0x10d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Validity
Not Before: Sep 20 17:18:33 2026 GMT
Not After : Sep 27 17:18:33 2026 GMT
Subject: CN=6ab01569-26eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:65:d6:00:fe:04:da:02:0e:39:03:23:4c:
a3:58:97:dd:8f:09:f7:df:d1:f7:e3:4c:b9:ce:55:
8e:a1:fe:f8:bf:3e:23:18:ab:aa:7f:cb:b8:a0:6e:
72:77:5f:2e:9a:fd:0e:50:9b:2c:9f:ed:37:58:41:
78:b4:5c:bd:12:47:4c:05:d9:f1:2c:28:25:43:73:
2c:2d:47:df:e3:ad:7a:5e:05:25:5a:ae:b2:77:2c:
28:03:89:1a:0d:c4:ba:39:3f:31:06:85:7a:cd:b6:
1a:72:6c:d1:46:2e:9f:f6:4f:cf:80:3c:3a:e1:3d:
cd:3f:6b:68:d3:e7:f0:09:93:45:3d:40:70:c3:3e:
fe:ef:47:da:89:93:f4:b8:a2:1f:da:c4:52:bf:d9:
cb:f5:82:46:22:65:15:4b:8b:99:df:75:29:bd:81:
6b:f1:a7:97:6a:37:3d:8a:5c:c4:1d:24:f4:78:25:
ca:75:36:25:bb:86:06:57:81:a5:55:50:87:e3:d4:
d1:a2:07:88:81:d7:ec:e3:5a:c4:22:2a:59:24:ba:
7d:87:a2:4b:90:fd:43:d5:24:6e:b3:a1:42:10:87:
3f:50:8b:69:4d:6f:9a:35:64:bd:6e:b4:ef:2f:3a:
ae:58:f9:85:99:ce:e2:2d:bf:a3:66:6c:b6:32:27:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A2:F2:6F:AB:A3:EC:82:09:EB:DE:38:15:22:5F:0C:67:0B:58:D3
X509v3 Authority Key Identifier:
keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:ac:43:e3:4b:a7:3f:3a:57:fd:74:10:2f:d2:df:5c:ee:
d4:b0:16:91:57:f8:29:66:f4:a1:52:40:0f:bf:90:7c:80:e3:
f4:a2:60:14:1d:b5:08:8c:8d:7b:2e:78:98:a7:57:95:64:15:
1e:cb:49:9c:ba:a1:b2:93:50:ca:3c:33:86:11:81:53:4d:4b:
d0:8b:f0:9b:70:a3:fa:33:d4:14:33:bc:fe:07:67:30:61:68:
a2:a1:6d:4f:c0:69:a2:2c:3b:aa:a2:e6:11:02:e9:75:62:71:
68:f1:21:42:30:d7:93:f8:23:4f:8c:4f:d4:c5:bd:52:8a:f5:
b5:32:bf:15:e6:b9:a9:fb:8f:2d:2a:2b:96:58:c5:d4:71:cf:
0a:2e:cd:16:b0:7e:41:1e:4f:49:39:02:29:40:f1:6b:38:f5:
38:02:61:e9:7a:46:55:c2:60:5b:32:a1:dd:7f:1b:71:90:83:
89:d2:b3:5c:c2:e4:ba:29:ce:45:da:65:e2:9d:e3:1b:4b:16:
35:f5:c0:16:2c:2a:9c:ee:ad:77:df:b9:7a:0d:e1:7d:5d:34:
83:4e:8f:80:4f:86:d1:26:31:2e:15:a4:8d:32:93:55:e3:c6:
8b:04:e6:66:3e:de:80:db:19:a3:2a:d6:d9:89:48:10:0b:2d:
7a:79:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:37:30 2026 by rpki-client