
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier: gYw7ga0oH1xdY9RKzcBrE8mgazdpbP198/trPnVyLng=
Subject key identifier: 70:F8:36:B6:CB:B4:A0:60:A0:BC:A4:39:6C:94:96:19:D6:3A:00:9A
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number: 0159
Signing time: Sat 13 Jun 2026 05:07:47 +0000
Manifest this update: Sat 13 Jun 2026 05:07:46 +0000
Manifest next update: Sat 20 Jun 2026 05:07:46 +0000
Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: 4HSrLnB9QHmAjalLYS318TmXvTizE0UYIsB011yf+Dc=)
2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Validity
Not Before: Jun 13 05:07:46 2026 GMT
Not After : Jun 20 05:07:46 2026 GMT
Subject: CN=6a2ce5a2-4433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:9b:9a:23:77:6e:30:cc:b9:b1:1d:27:66:
56:75:48:5b:c0:64:4b:b0:ec:ee:af:73:af:2b:64:
e3:b3:6e:1e:3e:e0:33:0e:93:0e:fc:b7:b0:6d:d2:
28:79:37:99:14:c6:96:76:03:1f:de:e0:b4:a1:29:
be:ea:4f:a0:5c:7f:7e:6a:7a:ba:3d:14:38:67:69:
54:62:ca:47:ce:c1:55:be:9b:3f:b4:27:44:66:0b:
28:36:81:71:08:36:5f:99:50:97:7a:46:be:7d:21:
fa:1e:2e:ab:09:ba:2e:ca:5f:25:7c:b8:76:68:b5:
9d:ac:cb:f9:95:2e:e3:41:fc:5b:3a:96:8d:d2:d5:
37:04:42:1e:e8:84:fd:87:c2:50:e2:20:ed:2a:90:
5f:e1:48:f7:51:f0:c5:43:5d:b4:5c:a6:38:03:af:
39:b9:c5:98:ad:b3:01:84:4a:84:5b:f0:b9:75:f2:
9c:e2:a9:61:34:a4:88:bd:6c:45:17:1f:2b:9a:a6:
41:4b:fe:a4:3e:9a:a8:1b:58:8b:15:b4:cf:e9:b2:
de:6a:62:07:f9:a9:c4:41:d7:93:22:e4:db:2d:ab:
14:21:74:10:d4:8a:26:26:ca:9f:ea:5c:aa:82:96:
61:34:18:95:34:6e:bc:c6:9a:ad:bc:00:b9:7d:16:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:36:B6:CB:B4:A0:60:A0:BC:A4:39:6C:94:96:19:D6:3A:00:9A
X509v3 Authority Key Identifier:
keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:bb:28:fd:d3:62:f7:90:22:b5:f9:00:e3:0f:48:e0:dd:
c4:5a:d1:71:45:71:5d:f9:4d:ea:bc:40:1a:d2:31:48:09:32:
74:97:2f:ee:e5:71:89:57:81:ae:b0:72:09:6d:69:c0:39:b4:
a1:20:71:8d:b0:1e:f6:7d:ce:98:54:a3:4a:22:98:02:76:ac:
09:12:dd:85:00:ee:c9:bf:07:df:13:f5:e1:75:3a:f0:ab:c4:
28:a1:c3:4d:65:ef:76:4f:06:0b:d2:98:12:19:49:81:e4:46:
d0:84:41:d0:0c:01:91:57:7e:b8:53:80:d7:b6:1f:fd:6d:81:
6b:14:d7:08:13:90:4d:1e:53:58:0f:53:3b:81:ab:7a:90:4f:
60:ce:84:f2:00:65:26:50:11:7a:e2:df:bb:af:14:c0:62:08:
f9:bf:8d:63:52:f5:66:dc:5e:b1:da:a4:c0:e0:b5:66:c0:74:
c0:4f:97:12:b7:28:2f:f9:01:1c:00:f0:f3:36:07:79:9c:e6:
e6:45:6c:b5:79:47:1b:20:ec:f8:5a:7e:3f:a4:a6:45:77:14:
25:13:3a:e9:6b:d5:2c:a3:c9:48:47:0c:ec:40:a0:96:a8:59:
85:86:c2:b9:0b:da:e8:1e:c9:56:e0:83:56:25:2e:fd:c8:5a:
4e:90:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:47 2026 by rpki-client