
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier: HL8ArtW2MBcI6pwJQB9ZPh+bSTBm8x+iN5UxDRXdxgQ=
Subject key identifier: 34:D1:50:64:2D:60:93:4F:8E:8E:00:A9:44:A4:B9:76:4E:EA:9A:3A
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 074C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number: 0723
Signing time: Sat 10 Oct 2026 22:09:36 +0000
Manifest this update: Sat 10 Oct 2026 22:09:36 +0000
Manifest next update: Sat 17 Oct 2026 22:09:36 +0000
Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: MqgBgbzc47etfxDPtQfrX8zLYIz1y3JwqWvTpEmmuMc=)
2: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: ztA1AuZ4BQqgfUQti87Mu8/rVRVBv0z6I/y7sZMhknQ=)
3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: VfrfnykE97GgaY0zRE1Dz7s8bBRf2eI3Tb8yh05ip+M=)
4: 68219776A41311EBBF911855C4F9AE02.roa (hash: fKg8ntxQpUWIysk2hR9+QrUacflT95hyt+BE5Ct5DAI=)
5: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: WXVlUOyzkeWPzzhrZIomqjgaV1ZguxykDFw7LzZvm8o=)
6: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: DhlpMOxeerbam0Ebreh2cRbDaMP2SQsnadCF8Us5sL4=)
7: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: 8pde81MDcdkJU9eGQjEY56q793Xs+y72zgiO1W6XgWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Oct 10 22:09:36 2026 GMT
Not After : Oct 17 22:09:36 2026 GMT
Subject: CN=6acab7a0-e167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:c1:99:50:ea:81:d7:2a:9c:fc:31:ce:28:
63:5c:c3:53:f1:95:92:6f:db:26:d7:b0:88:11:3a:
e3:3f:ba:e8:a1:4b:f7:91:21:b8:01:e4:2e:f6:5f:
ed:37:d2:2c:1e:d2:d7:d6:44:cf:05:43:98:a6:12:
11:5d:ad:76:3e:19:b6:a0:2f:fe:de:6d:a3:31:37:
c1:47:04:de:6f:21:c8:33:a9:db:bb:4e:e8:3f:9a:
79:61:5e:f9:2a:4b:78:01:8d:92:cf:f6:9c:b0:59:
22:5d:aa:24:b0:45:e1:ec:86:67:cb:b5:e7:8f:da:
9d:e4:7c:e3:c2:0f:7e:97:76:09:a7:93:3e:63:db:
45:82:cc:e1:28:b9:ee:3c:4b:3e:25:54:34:be:09:
bd:02:48:c8:d4:e7:e5:f5:2f:e3:b1:fe:4c:ab:8b:
4c:28:3a:4a:e7:c8:d5:55:36:1f:57:1a:48:f2:0a:
2e:69:45:f1:91:77:ef:ec:99:41:24:3e:6c:6f:18:
3d:41:80:70:3e:8b:41:5b:fa:55:01:ef:ef:bc:ac:
94:86:88:2b:84:de:59:ce:1c:22:94:ca:8f:25:a2:
18:62:c5:c7:79:7b:34:79:8b:b7:6f:ff:cd:72:15:
79:48:89:a3:2d:73:a0:73:46:38:06:08:6f:d4:04:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:50:64:2D:60:93:4F:8E:8E:00:A9:44:A4:B9:76:4E:EA:9A:3A
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:02:b3:75:5d:47:6e:fc:37:8a:b9:20:43:a9:95:c1:ef:89:
9e:29:ac:bc:2c:4e:bf:b6:68:15:1a:27:c1:d9:1f:28:75:a8:
8b:24:e9:cf:f4:88:ea:82:43:a8:3d:51:b1:cf:b5:4f:45:5e:
57:61:c3:f8:aa:c0:2c:b2:8a:81:33:2f:af:09:90:aa:3a:a7:
38:5a:a4:e4:7d:41:6a:35:8d:ad:ed:4c:43:ef:13:0e:59:ba:
bc:42:7e:a4:12:da:b3:86:b5:84:f4:fe:87:5b:69:72:68:bc:
7a:ed:b9:00:6f:f5:d7:1d:9e:8b:4e:81:e2:e9:51:1f:fb:1a:
dd:1d:31:f8:45:9e:0f:40:ba:54:fb:b9:40:5f:b3:e3:d2:41:
8f:5e:bd:ba:6b:0a:bb:29:e1:a7:b3:92:b6:d9:db:ab:15:b7:
a7:c1:7f:ff:71:02:10:96:76:a3:0a:93:ef:8a:e1:74:8b:94:
69:1b:cc:fe:23:8b:6c:91:e4:14:f2:5b:f9:5d:19:ba:2b:3f:
1f:cf:2e:88:b6:6f:0e:ac:f3:a3:af:9c:ff:f6:43:b9:ff:2c:
13:1d:f1:59:57:df:ae:47:21:da:79:9a:f6:db:90:8b:d6:29:
af:28:44:e4:43:1a:11:05:09:79:ab:01:b6:c0:a5:20:66:75:
a1:03:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:09:45 2026 by rpki-client