
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json)
Hash identifier: SGaTWhmo1mL0u/S11JboihjNtS2GilNHWqLxxBZ2tRU=
Subject key identifier: 52:5A:67:25:EC:8A:F4:B5:81:D4:9A:DF:39:C8:FA:09:1E:15:33:73
Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33
Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
Manifest number: 0103
Signing time: Sun 11 Oct 2026 06:54:48 +0000
Manifest this update: Sun 11 Oct 2026 06:54:48 +0000
Manifest next update: Sun 18 Oct 2026 06:54:48 +0000
Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: yzfJe6hX3uCD3Ne9MZv37ovJcVK5CBE/8KYEWfs679g=)
2: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=)
3: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl
rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933
Validity
Not Before: Oct 11 06:54:48 2026 GMT
Not After : Oct 18 06:54:48 2026 GMT
Subject: CN=6acb32b8-9999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:37:cf:94:b6:9f:31:de:c6:8e:5e:f4:36:
11:0e:47:9f:0b:3f:fc:83:13:8a:8b:94:65:e3:be:
6d:19:78:c6:65:20:cb:15:a4:a2:65:b3:04:bd:19:
5c:ef:6d:c9:d7:fb:a7:8d:8d:9e:3f:94:04:36:c1:
23:3f:95:7d:38:54:1a:a3:63:d6:83:38:b7:3e:d0:
1f:ca:19:c6:50:b2:8f:fd:10:54:b8:43:7e:ef:0b:
8a:4e:61:e8:62:de:c6:a1:30:6c:10:c7:ab:6f:17:
dd:37:7f:6a:67:50:6a:fa:a1:e1:07:dc:41:e5:05:
30:e7:1b:77:bc:6a:58:a2:e8:fe:57:3a:fb:57:e9:
bd:12:74:08:5c:e7:b1:b2:ab:0a:09:c7:8f:ac:4b:
7b:28:65:7e:f1:38:a4:50:19:ab:e7:0f:7d:12:ca:
b8:f7:74:51:a6:1d:33:a7:63:22:82:de:2e:ad:07:
0b:ee:8c:d6:8a:66:48:75:1f:2a:51:46:72:52:87:
13:ff:47:2f:65:aa:3e:26:d2:de:d0:29:70:5c:8a:
a6:d5:b6:4a:b7:e1:c0:c8:63:6a:df:cc:da:56:75:
18:69:15:c9:c1:84:da:56:76:85:64:e7:50:5e:cc:
fb:6e:27:f3:17:0e:f3:9b:f3:b3:c6:87:db:e4:31:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:67:25:EC:8A:F4:B5:81:D4:9A:DF:39:C8:FA:09:1E:15:33:73
X509v3 Authority Key Identifier:
keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:3b:61:fe:d5:00:8b:40:66:eb:bb:7c:b5:fa:2a:ed:d8:
32:82:22:ed:51:a8:2b:7e:a0:a9:e3:f8:6c:00:4c:fb:86:2e:
4c:e9:d6:78:34:d0:a3:ae:f1:52:b6:79:d2:e0:3f:e6:b8:a3:
20:3a:55:aa:84:77:b4:15:5f:91:05:70:56:21:1f:3c:42:f9:
b3:d1:65:e3:4e:52:a8:7c:9b:8e:ef:a8:e8:9d:8f:6e:80:c0:
93:44:a2:85:64:f9:ac:21:f1:8e:69:1c:45:a1:3e:23:16:23:
c6:d0:39:94:cd:7b:21:c9:79:4a:9a:28:19:25:22:0f:f3:40:
af:16:28:5e:17:fa:74:47:31:7c:6c:36:3a:b7:a1:45:3e:eb:
04:c9:e3:60:51:d1:9e:a3:79:01:ab:8c:97:ab:78:04:6b:49:
a6:81:1a:a5:45:90:a1:c4:83:33:8b:51:ad:ab:5f:54:59:6a:
86:ae:b0:32:37:6f:ad:5d:15:23:49:76:8d:61:71:d9:9b:8f:
3b:36:8b:ed:f8:96:2d:2b:e3:7a:e2:ab:8b:5b:ab:84:3d:ae:
a0:77:c8:bd:cb:e2:90:41:43:10:09:05:ac:50:01:02:89:cd:
d1:fe:ba:d0:13:f6:6c:fb:fb:e8:b9:ba:f8:a4:af:6c:f3:8c:
a7:fa:12:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx
NzZFQUU5MzMwHhcNMjYxMDExMDY1NDQ4WhcNMjYxMDE4MDY1NDQ4WjAYMRYwFAYD
VQQDEw02YWNiMzJiOC05OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzoA3z5S2nzHexo5e9DYRDkefCz/8gxOKi5Rl475tGXjGZSDLFaSiZbMEvRlc
723J1/unjY2eP5QENsEjP5V9OFQao2PWgzi3PtAfyhnGULKP/RBUuEN+7wuKTmHo
Yt7GoTBsEMerbxfdN39qZ1Bq+qHhB9xB5QUw5xt3vGpYouj+Vzr7V+m9EnQIXOex
sqsKCcePrEt7KGV+8TikUBmr5w99Esq493RRph0zp2Migt4urQcL7ozWimZIdR8q
UUZyUocT/0cvZao+JtLe0ClwXIqm1bZKt+HAyGNq38zaVnUYaRXJwYTaVnaFZOdQ
Xsz7bifzFw7zm/Ozxofb5DGawQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJaZyXs
ivS1gdSa3znI+gkeFTNzMB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx
NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB
LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF/I7Yf7VAItAZuu7fLX6Ku3YMoIi7VGoK36gqeP4bABM+4YuTOnWeDTQo67x
UrZ50uA/5rijIDpVqoR3tBVfkQVwViEfPEL5s9Fl405SqHybju+o6J2PboDAk0Si
hWT5rCHxjmkcRaE+IxYjxtA5lM17Icl5SpooGSUiD/NArxYoXhf6dEcxfGw2Oreh
RT7rBMnjYFHRnqN5AauMl6t4BGtJpoEapUWQocSDM4tRratfVFlqhq6wMjdvrV0V
I0l2jWFx2ZuPOzaL7fiWLSvjeuKri1urhD2uoHfIvcvikEFDEAkFrFABAonN0f66
0BP2bPv76Lm6+KSvbPOMp/oSZg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:40:04 2026 by rpki-client