
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
File: k8AGrOprUHWaPH3DPvhLR6cRfWg.mft (raw, json)
Hash identifier: z1xy2W74XSdAitnHpkiPqv4qJNfRwi5Vq+nx6B9ZH6Q=
Subject key identifier: F8:23:87:F0:16:11:72:B9:E7:C9:1E:05:0D:9B:78:2E:A7:80:25:C4
Authority key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
Certificate issuer: /CN=A9152C54/serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
Manifest number: 0F
Signing time: Sat 19 Sep 2026 09:10:29 +0000
Manifest this update: Sat 19 Sep 2026 09:10:28 +0000
Manifest next update: Sat 26 Sep 2026 09:10:28 +0000
Files and hashes: 1: k8AGrOprUHWaPH3DPvhLR6cRfWg.crl (hash: VKkNi7tCugYlZ2f039mSC8SnXAOXKoJ6OY5DXvb0eCQ=)
2: EXC8be9JdyHppT7JxqzJe0TXCXw.asa (hash: 93itLPNDswBkIJ+WVnIMTMwxeZsWUrco8IhBc7A8oig=)
3: AD1172A4A46511F1B6EFAD894111F970.roa (hash: 6pPAKpMW2YSgyhK4I4VmYUKOhtycLfIa7D8U9x/G/q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl
rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
Validity
Not Before: Sep 19 09:10:28 2026 GMT
Not After : Sep 26 09:10:28 2026 GMT
Subject: CN=6aae5185-f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:65:ce:fb:a5:c2:1c:73:ee:e3:0a:06:bd:
5c:48:f6:69:99:06:f7:0f:6c:90:10:4f:2a:3b:04:
ee:8c:54:c5:18:83:a8:f8:0e:a3:81:e6:fe:e9:35:
f0:ab:19:17:7c:4b:94:3e:16:4c:ba:94:09:63:18:
85:60:f2:e8:07:12:fb:b9:35:a4:dd:d4:3b:e0:f5:
cd:61:e0:c3:e4:2e:3f:e6:6d:07:41:39:22:fe:30:
ab:4a:b0:71:0d:3f:19:ac:5e:82:9d:0e:b5:79:37:
1b:e3:96:dc:6e:62:47:b5:ca:b4:70:9c:ca:98:56:
7e:fe:89:fb:22:c9:4a:5f:1f:88:f3:13:b7:ff:4b:
69:0e:6f:7f:13:89:73:c7:88:02:23:78:31:35:81:
82:dc:e6:2d:0e:89:98:41:5c:12:b6:99:30:69:f9:
80:0f:7f:57:26:76:0c:6b:73:28:5a:80:7f:97:45:
e9:2c:61:b5:aa:b3:28:69:32:05:87:04:64:ce:9b:
47:a4:16:a7:a8:fa:f5:93:af:be:44:ed:da:b9:5e:
72:45:a8:ff:1f:15:f6:65:8f:05:92:5f:92:87:63:
2a:bb:f7:7f:96:1f:62:d1:ba:58:e1:dd:38:44:f6:
21:d0:a4:37:fc:1b:ce:3f:1b:a7:94:3c:28:70:09:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:87:F0:16:11:72:B9:E7:C9:1E:05:0D:9B:78:2E:A7:80:25:C4
X509v3 Authority Key Identifier:
keyid:93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:e0:9e:79:89:1b:cc:08:ea:24:68:9b:77:aa:c5:7e:f0:5a:
fa:12:08:25:fc:84:d9:6b:48:ec:08:f3:b7:1e:d1:aa:d7:4e:
2b:20:68:ba:03:e2:ed:03:2b:3a:2a:ff:25:30:f5:da:90:35:
89:2d:1e:db:84:5c:05:03:bd:6f:d1:2d:5c:90:d1:20:40:bc:
2c:c6:9e:a6:63:90:18:0c:bb:17:26:2a:84:c6:4d:c3:97:52:
31:01:e3:86:b0:79:0c:6a:c8:c4:68:b7:e9:65:b3:62:41:0c:
54:0e:e0:62:dc:a6:b4:7a:36:a0:b0:60:35:be:07:68:97:c7:
04:5f:58:75:29:b1:85:8d:11:8b:a0:dd:15:48:b6:9c:8b:a1:
39:1e:37:ee:b3:19:5c:f6:57:cb:89:3e:90:a4:47:7f:0d:f9:
7a:98:1d:10:2c:eb:3c:bf:88:12:dd:b9:64:4d:ed:81:47:6c:
f3:cc:91:04:55:2b:2c:0a:00:fc:f8:87:8b:bd:2b:5e:da:31:
d5:8d:ed:ca:fb:2d:a2:a5:1c:86:bf:a5:d3:0d:45:f3:a8:89:
30:52:03:a8:0d:13:d1:9c:86:1d:b5:94:f1:09:48:7f:2c:00:
d2:5a:2a:1c:d6:c2:0e:2b:c9:a4:e6:d2:b2:69:14:51:67:53:
6a:d8:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:29 2026 by rpki-client