
$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json)
Hash identifier: t1wzJkHsYA44BiKbgX3wkVktU5Kmh0HxDdHZGZMJpJQ=
Subject key identifier: A9:77:00:29:C0:DE:40:82:A5:79:32:15:17:B0:A6:FE:DB:30:E3:69
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 3578
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
Manifest number: 3564
Signing time: Fri 12 Jun 2026 14:23:57 +0000
Manifest this update: Fri 12 Jun 2026 14:23:56 +0000
Manifest next update: Fri 19 Jun 2026 14:23:56 +0000
Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: wiqaHhIlLptyT2o/z8YwLEBZE7zfEmqCacymoDiCTDQ=)
2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: 3W4AiNrrj2kArnRpgqwuIaUDi20UJ9Jgfp+kFDwU8cQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13688 (0x3578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Jun 12 14:23:56 2026 GMT
Not After : Jun 19 14:23:56 2026 GMT
Subject: CN=6a2c167c-0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:b7:94:23:a2:3d:71:df:23:11:ae:bc:0d:
8c:38:04:29:cf:2d:a9:25:a2:ba:2d:da:28:a8:ce:
b5:87:14:94:23:d6:79:41:0b:b2:65:ca:0f:e0:f4:
e0:f6:fa:d6:57:48:aa:df:ce:a1:da:d6:5a:be:3f:
3b:28:22:b5:34:73:4d:d6:f8:27:a3:fc:ad:cb:8f:
1f:87:93:79:4b:46:fa:bb:15:45:c0:e5:97:e9:86:
50:c0:82:57:f5:a1:a4:bf:52:99:fc:56:77:e9:b0:
3a:f4:74:1d:92:77:40:1b:2c:9d:54:f2:de:e7:5e:
73:fc:32:fe:0c:e4:0c:3c:fb:f7:cc:90:e0:f8:c4:
27:9a:77:c4:0b:94:a0:50:c8:72:92:06:c6:3f:a7:
ac:7e:f8:d2:72:cd:8c:2d:49:7c:30:1c:76:46:62:
8a:ca:87:97:d6:b5:fd:72:61:d9:97:94:ce:28:62:
5c:a2:57:90:be:b7:61:41:f7:aa:bc:53:0a:e9:f7:
35:8a:23:10:2e:7a:e9:1c:c8:c1:58:b5:87:7c:ff:
27:41:8b:0d:f4:fd:ab:dd:57:b0:34:d7:69:50:1e:
73:dc:18:f9:cb:5b:b3:a6:f3:3e:e3:cb:ea:7d:4e:
2e:9f:5d:4e:55:32:83:10:b5:59:ac:04:76:d0:c0:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:00:29:C0:DE:40:82:A5:79:32:15:17:B0:A6:FE:DB:30:E3:69
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:78:34:c6:bb:d4:f8:47:39:be:d2:8b:f9:d4:44:62:66:dc:
94:f1:fa:78:a8:94:73:45:33:77:9c:b1:35:97:32:8a:69:38:
56:09:98:07:44:44:5a:ff:97:b1:ae:26:c4:25:af:5c:d5:91:
7f:55:82:cf:f0:51:a3:18:60:79:ea:26:cb:91:b7:87:7c:dd:
28:a2:72:71:48:2e:dc:f2:28:cc:58:db:82:e5:05:ca:b3:76:
39:06:09:24:49:59:de:36:38:a8:78:32:9c:59:ea:1e:20:de:
f3:d6:cb:30:7c:f7:40:dc:04:49:57:23:45:8a:02:3c:56:35:
cd:98:88:e6:6c:35:b2:c6:23:80:9c:97:ff:d3:91:50:0a:0a:
7f:94:d6:9b:07:ae:46:54:ef:f6:88:84:63:b3:d3:b7:12:f6:
d9:6b:b3:75:24:82:f1:dc:68:a2:6d:9f:aa:d5:ab:90:35:89:
18:e1:2b:2f:3a:a6:87:1e:d3:f2:c3:0e:72:4e:ec:03:5e:92:
79:27:8a:f4:b6:df:0e:fa:d8:9e:ef:65:89:f6:32:0e:af:4a:
5f:22:d7:28:fc:81:ae:8f:88:ae:90:93:0b:06:22:cc:50:58:
b6:1e:a2:72:6b:d3:6e:42:01:ae:37:bd:f1:85:fe:c3:f6:ef:
9b:fd:25:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIyNUQxMTAvBgNVBAUTKEZGRTJBMDM3MjlGMzJEMzIyMjdBOTlDOTI1MTU4Qzgy
Q0E1NEI5NTcwHhcNMjYwNjEyMTQyMzU2WhcNMjYwNjE5MTQyMzU2WjAYMRYwFAYD
VQQDEw02YTJjMTY3Yy0wNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5q3lCOiPXHfIxGuvA2MOAQpzy2pJaK6LdooqM61hxSUI9Z5QQuyZcoP4PTg
9vrWV0iq386h2tZavj87KCK1NHNN1vgno/yty48fh5N5S0b6uxVFwOWX6YZQwIJX
9aGkv1KZ/FZ36bA69HQdkndAGyydVPLe515z/DL+DOQMPPv3zJDg+MQnmnfEC5Sg
UMhykgbGP6esfvjScs2MLUl8MBx2RmKKyoeX1rX9cmHZl5TOKGJcoleQvrdhQfeq
vFMK6fc1iiMQLnrpHMjBWLWHfP8nQYsN9P2r3VewNNdpUB5z3Bj5y1uzpvM+48vq
fU4un11OVTKDELVZrAR20MCsdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKl3ACnA
3kCCpXkyFRewpv7bMONpMB8GA1UdIwQYMBaAFP/ioDcp8y0yInqZySUVjILKVLlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjI1RC8xRjU1MDgzMDFE
ODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxUSWllcG5KSlJXTWdzcFV1
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18tS2dOeW56TFRJaWVwbkpKUldNZ3NwVXVWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjI1RC8xRjU1MDgzMDFEODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxU
SWllcG5KSlJXTWdzcFV1VmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS3g0xrvU+Ec5vtKL+dREYmbclPH6eKiUc0Uzd5yxNZcyimk4VgmYB0REWv+X
sa4mxCWvXNWRf1WCz/BRoxhgeeomy5G3h3zdKKJycUgu3PIozFjbguUFyrN2OQYJ
JElZ3jY4qHgynFnqHiDe89bLMHz3QNwESVcjRYoCPFY1zZiI5mw1ssYjgJyX/9OR
UAoKf5TWmweuRlTv9oiEY7PTtxL22WuzdSSC8dxoom2fqtWrkDWJGOErLzqmhx7T
8sMOck7sA16SeSeK9LbfDvrYnu9lifYyDq9KXyLXKPyBro+IrpCTCwYizFBYth6i
cmvTbkIBrje98YX+w/bvm/0l8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:14:40 2026 by rpki-client