
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File: KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier: FNmiStfxsH8azfVkYq1PnpnQSD/jxD/A1jRfyy9N0Jg=
Subject key identifier: 3E:BD:81:CF:81:11:45:E7:78:9F:C1:94:D3:ED:27:C5:9F:64:1B:77
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number: 0475
Signing time: Mon 27 Jul 2026 01:25:24 +0000
Manifest this update: Mon 27 Jul 2026 01:25:24 +0000
Manifest next update: Mon 03 Aug 2026 01:25:24 +0000
Files and hashes: 1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: W8v41oT/CHFNLvXOwYqgn48ASUjw62Ya9WOnmaV02ys=)
2: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=)
3: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=)
4: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=)
5: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=)
6: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=)
7: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=)
8: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=)
9: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=)
10: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=)
11: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=)
12: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=)
13: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=)
14: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=)
15: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=)
16: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=)
17: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Jul 27 01:25:24 2026 GMT
Not After : Aug 3 01:25:24 2026 GMT
Subject: CN=6a66b384-3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:df:42:6c:6b:ac:28:6f:b8:0c:69:00:5c:
b7:b9:60:16:c0:48:b8:52:6c:bb:14:0f:22:03:e4:
1d:ef:62:0d:5c:29:5e:f1:15:cc:09:af:8d:f6:55:
8d:96:14:dd:81:3a:3f:9e:e6:f4:c2:23:6a:9d:37:
4d:52:e7:98:20:b9:7a:67:63:89:ea:50:cc:0c:14:
84:c7:84:6d:08:3d:d5:f9:e2:2f:f7:65:a3:46:a7:
79:22:86:ac:78:02:80:a8:3c:61:78:52:ea:0e:23:
0b:aa:0c:1d:2a:d3:71:07:08:c2:0e:44:c4:f6:92:
93:4f:16:a0:8b:0c:82:b0:25:ce:bb:e7:5a:29:32:
24:eb:5a:d3:cc:14:22:47:bb:f7:98:df:29:9e:45:
47:e3:ab:fb:da:a7:1e:cf:c7:4c:16:2a:60:0d:ee:
55:30:cc:8a:b4:fe:73:ee:7a:ac:c8:b0:f9:60:a2:
b8:21:b2:57:c3:e3:e4:1b:43:5e:c3:e9:60:df:cd:
7c:6e:40:f1:9e:fe:10:e5:ae:22:4e:7a:0b:2e:ee:
03:93:01:66:24:45:52:a3:53:82:d7:e3:7f:7c:07:
68:67:25:27:c2:7b:58:a2:b3:79:3a:6f:49:b4:27:
6a:d6:13:1b:6f:10:84:be:ec:af:c6:97:4d:6d:1e:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BD:81:CF:81:11:45:E7:78:9F:C1:94:D3:ED:27:C5:9F:64:1B:77
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:34:08:31:4a:1e:bd:91:81:fd:46:92:1f:39:72:43:85:
9a:3e:89:65:77:ee:bd:7e:40:2c:c3:08:e9:5c:2d:5c:a1:fd:
63:a8:b7:49:af:bc:50:40:ec:f6:e1:94:8b:58:0b:bb:fb:09:
21:26:c5:45:8d:b0:3c:1c:aa:63:12:ce:c1:e0:96:24:19:cd:
a3:17:77:0a:67:99:c1:d6:71:59:66:cd:6f:02:84:b5:78:36:
84:09:3c:8f:33:e3:96:c0:d9:66:5c:2e:82:5c:8a:57:89:9a:
f2:e4:1c:11:7b:78:09:fb:f0:c7:94:95:90:66:69:32:7c:cb:
12:96:07:f9:d9:c1:59:ab:49:50:a4:a3:e8:27:ce:09:a2:7d:
f9:df:70:9d:aa:fd:86:86:48:b4:16:48:43:35:95:60:76:f9:
8d:13:c3:ea:24:48:0a:92:14:62:9f:85:9f:a6:65:2b:33:5f:
b7:0b:32:4b:48:77:4a:79:47:e1:4a:78:3b:bd:db:c3:2f:20:
7f:43:84:83:ee:93:7e:5a:00:e5:62:cf:fc:52:9d:a4:1c:e5:
d4:ab:09:f6:36:21:89:04:1f:20:f8:2b:06:e7:7f:46:4d:b2:
41:d8:01:83:0c:24:36:93:ad:df:02:fd:32:a1:11:28:74:6b:
d8:19:8b:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjYwNzI3MDEyNTI0WhcNMjYwODAzMDEyNTI0WjAYMRYwFAYD
VQQDEw02YTY2YjM4NC0zNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmzDfQmxrrChvuAxpAFy3uWAWwEi4Umy7FA8iA+Qd72INXCle8RXMCa+N9lWN
lhTdgTo/nub0wiNqnTdNUueYILl6Z2OJ6lDMDBSEx4RtCD3V+eIv92WjRqd5Ioas
eAKAqDxheFLqDiMLqgwdKtNxBwjCDkTE9pKTTxagiwyCsCXOu+daKTIk61rTzBQi
R7v3mN8pnkVH46v72qcez8dMFipgDe5VMMyKtP5z7nqsyLD5YKK4IbJXw+PkG0Ne
w+lg3818bkDxnv4Q5a4iTnoLLu4DkwFmJEVSo1OC1+N/fAdoZyUnwntYorN5Om9J
tCdq1hMbbxCEvuyvxpdNbR6ZowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD69gc+B
EUXneJ/BlNPtJ8WfZBt3MB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU3Qi84REE3MjY0MEMxRkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVda
cUV3d2xURU9hYl9TWUtxWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASGA0CDFKHr2Rgf1Gkh85ckOFmj6JZXfuvX5ALMMI6VwtXKH9Y6i3Sa+8UEDs
9uGUi1gLu/sJISbFRY2wPByqYxLOweCWJBnNoxd3CmeZwdZxWWbNbwKEtXg2hAk8
jzPjlsDZZlwuglyKV4ma8uQcEXt4Cfvwx5SVkGZpMnzLEpYH+dnBWatJUKSj6CfO
CaJ9+d9wnar9hoZItBZIQzWVYHb5jRPD6iRICpIUYp+Fn6ZlKzNftwsyS0h3SnlH
4Up4O73bwy8gf0OEg+6TfloA5WLP/FKdpBzl1KsJ9jYhiQQfIPgrBud/Rk2yQdgB
gwwkNpOt3wL9MqERKHRr2BmL7A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:14:57 2026 by rpki-client