
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
File: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft (raw, json)
Hash identifier: 0vtK50g9hwgcilxMmT2BaMEezglhnpP4oLzyRZRI8Tg=
Subject key identifier: F9:5B:CF:FF:81:6E:D7:54:8B:9B:3C:E0:7A:98:25:E7:CB:C3:EA:71
Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
Certificate issuer: /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
Manifest number: 010E
Signing time: Fri 17 Apr 2026 05:42:27 +0000
Manifest this update: Fri 17 Apr 2026 05:42:26 +0000
Manifest next update: Fri 24 Apr 2026 05:42:26 +0000
Files and hashes: 1: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl (hash: IKffuOAgnPX2GdThClMLxI5kJtLqYsyPV76FsQiDURI=)
2: 38161248A26911EFBF6D0319C4F9AE02.roa (hash: AVpmO1XfQqx7osD3xv12YLKG1Ejq79RCs8GNCY34Q2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Validity
Not Before: Apr 17 05:42:26 2026 GMT
Not After : Apr 24 05:42:26 2026 GMT
Subject: CN=69e1c843-c96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:de:4b:0b:99:2a:09:f8:e7:a5:43:02:ea:
db:25:d3:17:ca:4a:03:63:cb:a1:9e:b3:9e:a6:cf:
70:c1:25:98:c6:46:31:71:2f:01:2f:2b:de:1f:7a:
ed:3b:10:ad:df:30:6a:ac:38:cc:b7:91:95:be:d7:
86:66:51:c9:53:19:4b:af:ab:f2:76:80:22:5d:ac:
cc:ac:38:e4:fe:6c:9d:21:3a:7e:43:43:fe:a5:18:
80:d2:3b:15:9e:c9:bb:0d:2e:96:55:da:f6:f7:dd:
70:7c:da:9a:bc:b7:4c:97:49:49:30:e3:fe:d8:d7:
92:e2:46:f9:9f:46:89:83:e5:9d:15:c1:76:b2:8f:
c8:96:f7:35:4a:d6:84:de:0f:9a:59:ef:aa:83:43:
50:a2:51:ff:79:0f:04:dc:ed:26:14:dd:a0:03:f2:
da:3d:fa:b7:21:cf:01:9c:1e:0a:8f:8e:c0:b5:bd:
37:41:68:a4:a0:9c:da:a7:93:4b:cc:7b:ca:0e:3e:
b8:0b:6e:e9:30:cb:b6:f4:a7:a1:0f:39:cc:b4:33:
0c:67:40:92:4e:7f:12:10:3b:a5:97:e2:e2:47:be:
46:5a:97:a7:da:fc:57:ea:0c:cc:3f:8e:aa:27:d9:
64:35:12:c7:60:ee:5e:bd:b8:39:69:6a:f3:47:cc:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:CF:FF:81:6E:D7:54:8B:9B:3C:E0:7A:98:25:E7:CB:C3:EA:71
X509v3 Authority Key Identifier:
keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:bc:92:17:fd:77:79:b4:06:ef:d4:48:3e:47:1e:2a:48:08:
23:ef:5a:49:79:95:50:d6:b3:13:90:0e:f5:64:88:40:37:69:
55:89:9a:0f:4c:fa:11:e8:75:2b:ff:8c:92:32:44:95:cf:ae:
ba:e8:0e:6c:17:3b:7d:1d:9d:fd:6c:ac:d2:f1:94:27:63:f7:
a6:b7:2d:a4:dd:c9:e2:0d:71:3a:af:00:a7:55:0d:cb:3d:a3:
46:34:a1:23:6d:83:67:c4:a3:51:49:d4:57:af:58:f5:69:2a:
85:9f:de:e9:ad:7a:76:a5:03:35:e0:bd:3e:7e:c3:f2:2e:f5:
6b:11:80:b2:67:52:ff:ce:16:1d:4d:a5:e4:d3:b8:13:c8:18:
c0:19:43:3d:95:a8:a7:96:0d:0f:99:a4:fc:1d:1b:ad:9b:d5:
30:79:af:e0:3d:99:be:2b:ad:c3:c5:31:bb:52:e9:90:05:8c:
2d:e1:ec:15:4b:b5:09:95:8e:17:08:b2:4b:32:b0:85:16:f8:
fd:85:1f:2f:23:6f:d5:02:bc:c4:60:6b:65:2c:90:29:8b:7f:
73:13:6d:d5:9c:6b:d3:84:e5:ae:1e:d0:1b:22:d1:1a:11:3a:
09:e3:0d:d0:56:5c:40:26:a7:1d:7a:87:c7:33:37:88:7c:1d:
3f:67:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:56 2026 by rpki-client