
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File: KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier: KVPSf5IqHK/+jCUyoDrkjQbGqvan3scnkq0mCXplLY8=
Subject key identifier: EC:6E:4F:11:C8:AE:C8:59:31:C5:B1:6B:7D:D9:D3:FA:8D:66:89:5E
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer: /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number: A3
Signing time: Sun 01 Mar 2026 08:37:24 +0000
Manifest this update: Sun 01 Mar 2026 08:37:24 +0000
Manifest next update: Sun 08 Mar 2026 08:37:24 +0000
Files and hashes: 1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: SNGB8b2w7jg9cCLo8bGamZ+BKWyvsay4d6HVKcadHiU=)
2: FAA72960259911F0953E0023C4F9AE02.roa (hash: O09UdOIvOj1qcl3/WTrZg9iUeXJv//L0a5ehI9CYUR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Validity
Not Before: Mar 1 08:37:24 2026 GMT
Not After : Mar 8 08:37:24 2026 GMT
Subject: CN=69a3fac4-40a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:cb:2d:ca:77:01:a0:bd:de:ef:5d:35:f3:
57:3c:48:f0:01:2b:6f:fd:51:3f:10:99:04:c7:82:
75:74:53:6e:0a:e9:c4:95:9d:72:74:e8:8a:c3:a2:
39:f6:1c:f5:e0:6c:7a:28:a2:f1:d3:94:54:7b:76:
31:9c:93:94:ea:95:12:96:54:94:d2:70:53:61:00:
af:e4:f1:01:12:0e:01:3c:35:63:4e:a7:fb:10:5b:
a3:03:92:af:c8:7c:90:c6:2b:2f:90:82:84:90:e8:
08:29:22:74:3d:5e:8d:e3:ce:19:bb:9c:9f:db:5d:
b0:82:11:63:d1:cb:9d:ff:3e:e3:59:93:d3:d9:14:
f0:9b:b1:6f:df:f4:64:f5:19:10:32:fb:0a:88:8c:
c3:48:17:95:94:04:ad:2e:9d:07:87:91:a6:0a:bb:
79:a9:49:b0:9e:31:38:27:d6:1c:4d:46:14:b9:25:
95:83:06:b6:a0:f9:1a:c6:0c:73:f2:b2:c3:79:39:
63:23:ad:f7:aa:59:9f:78:b2:ad:84:ba:75:dd:80:
0c:d2:fa:bd:ac:49:25:79:b4:e2:81:ca:84:d0:41:
8e:68:1f:ea:c1:64:54:64:f7:02:fa:42:36:68:97:
65:66:d4:10:ea:91:1a:3d:03:55:7d:67:6c:09:17:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:4F:11:C8:AE:C8:59:31:C5:B1:6B:7D:D9:D3:FA:8D:66:89:5E
X509v3 Authority Key Identifier:
keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:5f:37:b9:4d:60:79:cf:da:7b:6e:96:6b:f4:09:80:61:77:
5b:3d:38:ab:23:1c:d6:11:e4:80:fc:f7:01:30:26:fc:ef:2e:
cc:73:75:13:d8:c5:5b:ee:7b:0e:1c:18:c8:42:af:16:31:fc:
a3:40:4f:fb:66:e1:f8:44:58:b0:7f:a0:25:6a:6a:d0:30:63:
08:66:8e:27:97:44:3c:53:1e:e3:b5:cb:17:09:8b:90:21:ff:
c2:21:52:e6:5f:d1:60:5a:b5:10:6b:bd:38:e9:a1:ff:1b:ae:
34:f2:f2:0c:7b:08:d7:ce:84:94:08:59:05:06:cc:3e:78:9b:
68:c9:24:23:69:cf:50:c6:2e:75:6d:d7:61:35:dc:82:25:1e:
8f:43:e6:9a:ae:2a:8b:fd:96:a2:90:8f:1a:00:82:2d:bf:98:
eb:ab:72:da:6e:40:a7:0a:63:bd:8c:69:22:eb:ad:25:39:e9:
6f:86:d0:d5:45:24:23:b9:4d:f1:4c:af:a5:b2:7b:d1:95:1d:
f1:8e:42:12:2c:e4:47:c1:6e:65:26:a1:79:88:3d:b5:e1:fe:
3e:32:bc:aa:81:62:67:fe:96:b7:8a:3d:a2:0b:d1:6e:99:cd:
98:44:3d:b6:2f:1f:bc:e7:2c:f2:4d:03:14:a2:3e:c2:01:44:
b0:5d:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:40 2026 by rpki-client