
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json)
Hash identifier: vk30gKsXdS2SbLulM9mIh5qCRshx0iNlXizoyXfDHHk=
Subject key identifier: CF:EF:5C:D4:35:53:FA:3E:9B:B4:59:FA:5B:2F:5F:6F:C2:6A:DB:06
Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
Manifest number: 01A6
Signing time: Sun 01 Mar 2026 23:44:50 +0000
Manifest this update: Sun 01 Mar 2026 23:44:48 +0000
Manifest next update: Sun 08 Mar 2026 23:44:48 +0000
Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: 8OMCL8PtBDkMjNUJY+WaSys7rEL/DFMm9QYbeDmU6g4=)
2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: R+cgAiGLFnxqgUaeTBzigI0telk5/iO6S+thcp6pkZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Validity
Not Before: Mar 1 23:44:48 2026 GMT
Not After : Mar 8 23:44:48 2026 GMT
Subject: CN=69a4cf72-6d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:ac:57:36:c9:76:1a:7e:74:8a:b4:83:d1:
6d:57:a9:e3:1b:a0:f3:8a:2d:26:f7:10:d4:a9:ca:
04:ad:dd:97:21:36:b5:48:34:a5:21:4e:02:ab:5b:
c5:a2:14:23:1a:34:30:5e:2d:26:a0:cd:36:55:3f:
35:92:53:26:a0:ac:8d:c8:ba:dd:47:83:d0:42:ad:
d4:ed:6a:da:22:68:d2:c5:57:24:4d:dd:b7:bb:43:
1b:98:96:70:21:dd:93:bd:29:77:12:c0:2c:fa:e3:
9f:e8:7e:ab:63:38:85:e2:17:46:c7:85:c0:be:af:
9c:ef:0e:6a:9f:2a:58:ec:98:e6:1c:b8:f5:17:de:
9f:7e:eb:ae:a3:20:28:84:bf:91:01:b9:37:c7:ea:
0c:27:72:ea:39:9c:f4:12:f9:c2:fd:61:7f:0a:1a:
c4:9d:99:a1:50:72:0d:2e:7f:82:86:ef:65:d9:ed:
c0:cf:c0:41:4f:33:ae:05:94:f0:36:b9:c2:43:8f:
01:49:1f:ad:e0:2e:44:82:da:3a:86:52:d4:75:f7:
a8:ce:87:49:e7:5d:1b:01:4b:93:5b:4c:d8:ea:67:
21:05:4d:7a:c1:b1:94:b4:5f:64:48:78:77:22:f8:
89:c4:ed:98:aa:e8:67:db:66:64:f3:b7:28:43:9d:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:5C:D4:35:53:FA:3E:9B:B4:59:FA:5B:2F:5F:6F:C2:6A:DB:06
X509v3 Authority Key Identifier:
keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e6:ee:81:4e:fd:ec:cc:47:77:b7:80:81:40:a1:0c:83:a4:
e4:51:88:50:d3:a9:2c:ac:0c:a6:39:4f:9e:5a:12:27:9d:98:
87:fc:07:1a:f4:2a:3d:f1:da:10:d8:fc:b9:23:be:db:21:a1:
21:cc:34:71:47:b1:96:46:02:6e:6c:cf:d9:e2:ff:0d:15:e3:
cc:73:25:fd:0f:cd:8b:5c:80:22:92:29:c9:b9:31:25:0f:d3:
8b:d4:3d:aa:a3:54:aa:97:b4:8d:c7:aa:e6:57:5a:99:b8:32:
cb:a1:c6:e6:4b:5e:9b:58:a7:31:0e:a3:b8:51:91:25:89:ea:
38:a8:3c:19:ce:75:58:f5:07:69:8f:8e:03:71:99:93:6a:da:
6c:4f:7c:3c:95:4c:e3:0d:2b:f2:bd:67:e5:2f:51:b8:de:94:
a0:67:2e:ac:df:51:0a:64:36:4b:82:ab:61:e1:80:4b:f2:13:
04:f1:4b:69:52:5b:c7:95:bf:dc:4f:5f:8e:47:53:4c:6b:81:
ba:61:25:7d:6e:6d:e0:c3:de:ea:60:01:48:c2:ab:98:02:fe:
4c:17:6f:e9:d3:a3:48:4b:20:5f:59:b3:76:76:b4:18:25:96:
c5:c8:c4:b6:42:6b:dd:eb:45:02:45:87:cc:c0:33:cc:12:64:
82:d7:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:55 2026 by rpki-client