
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File: KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier: DhWAOdplrz02/U307B7CTxQ0hPRRuDK53byLiwaWlgo=
Subject key identifier: 64:7A:D9:33:CC:CC:7A:12:60:D5:75:D3:23:D2:74:F4:7E:F3:A6:36
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer: /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number: BB
Signing time: Fri 17 Apr 2026 06:46:07 +0000
Manifest this update: Fri 17 Apr 2026 06:46:07 +0000
Manifest next update: Fri 24 Apr 2026 06:46:07 +0000
Files and hashes: 1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: wVIgzvxYapv4ZjOW6MPpVPNiw4fLAxNpLb1sg3oy6Uk=)
2: FAA72960259911F0953E0023C4F9AE02.roa (hash: O09UdOIvOj1qcl3/WTrZg9iUeXJv//L0a5ehI9CYUR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Validity
Not Before: Apr 17 06:46:07 2026 GMT
Not After : Apr 24 06:46:07 2026 GMT
Subject: CN=69e1d72f-b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:fc:36:63:68:16:22:7f:59:35:cb:23:e6:
cd:47:0e:14:5e:09:5e:99:30:c5:82:f3:3b:13:98:
21:1e:fa:1f:ef:7e:56:93:6a:15:f1:75:24:df:b8:
12:fe:9e:6b:bd:03:07:d6:92:dc:91:99:e5:2b:a1:
04:05:6a:0d:07:7b:e8:53:7b:8f:a0:51:1f:73:5d:
34:4a:e8:49:0c:fe:02:b8:62:68:e0:2e:58:c1:f1:
ff:2c:42:fe:88:ba:2c:4c:51:d5:17:d4:80:ef:b2:
c1:fd:20:30:8d:df:f1:02:f9:44:5e:cb:63:98:9c:
11:e2:8e:e1:45:3f:fd:51:63:92:a6:38:77:ac:e9:
f2:f1:45:95:7f:1d:b8:8b:b2:6a:4e:8e:47:47:d8:
60:a8:f9:47:45:13:f3:e9:d8:01:ce:ff:18:4d:77:
8d:da:e8:28:cc:9e:1a:f2:d4:e3:24:0a:a8:0b:12:
a4:a2:5f:ce:a7:09:6a:f4:6c:b2:90:3e:3b:da:6c:
1d:ee:36:60:2b:37:48:97:9e:ff:c5:95:4f:50:59:
d2:2d:4c:12:6f:27:3a:c9:d3:70:6f:e0:6a:64:24:
25:e0:60:ff:6f:68:ba:f7:84:31:1b:ad:e4:63:20:
62:ed:9d:0a:0a:b3:41:f5:29:c1:f8:49:25:b7:e6:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:D9:33:CC:CC:7A:12:60:D5:75:D3:23:D2:74:F4:7E:F3:A6:36
X509v3 Authority Key Identifier:
keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:cc:28:ca:71:5a:e9:8c:cd:3c:f1:b6:a0:4c:71:3b:ec:91:
02:b6:3e:de:b5:d6:53:37:a7:71:1d:32:9b:6b:62:5d:7e:d2:
0b:d3:5e:8f:1e:c5:8c:ba:ab:cd:77:9b:4e:67:53:72:32:c7:
b6:6e:d0:94:f0:25:96:02:de:c2:a7:93:eb:48:ce:90:39:f9:
34:4d:e5:9f:9e:59:ea:cd:eb:87:dd:8a:10:c4:47:29:5b:f6:
fd:ae:2c:47:4f:6c:b8:e2:9c:19:5b:db:94:36:42:84:01:61:
43:81:09:12:18:2e:e7:4d:b6:ea:7e:b7:25:f4:0e:e3:25:9c:
0f:83:89:2e:8a:3c:9d:1e:9a:85:11:4e:ba:d2:5e:41:37:d4:
0a:8b:b9:ee:e0:17:63:26:04:ea:d2:ba:b6:85:4a:7d:79:be:
27:8f:e3:74:e2:f5:d7:87:d7:88:52:3d:0c:bb:13:d8:e7:5c:
37:9f:56:9b:b6:85:18:5e:96:29:9f:76:a4:da:8b:23:60:65:
3c:60:34:85:cd:74:92:05:9d:30:25:d4:e4:73:c9:1b:00:9d:
80:9e:d4:0b:63:a7:ab:5a:d7:1d:e3:6b:ca:91:e8:63:c5:93:
90:04:e5:22:45:6f:10:33:5a:bb:1f:9b:10:52:af:72:fa:4b:
3f:07:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:29 2026 by rpki-client