
$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json)
Hash identifier: zCHo2kObtGMR8EyspHeuDFzJ9EFt99kfobC8qitSgTE=
Subject key identifier: E5:13:F5:16:31:37:DF:19:98:DC:D8:63:27:D5:4C:F9:7E:3A:2E:67
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 355B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
Manifest number: 3547
Signing time: Thu 16 Apr 2026 14:23:49 +0000
Manifest this update: Thu 16 Apr 2026 14:23:48 +0000
Manifest next update: Thu 23 Apr 2026 14:23:48 +0000
Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: jIbJCFCuzVK6Hq1x6qTiUk7QxzBKtCszVL1Iko8zuFY=)
2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: 3W4AiNrrj2kArnRpgqwuIaUDi20UJ9Jgfp+kFDwU8cQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13659 (0x355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Apr 16 14:23:48 2026 GMT
Not After : Apr 23 14:23:48 2026 GMT
Subject: CN=69e0f0f5-68f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:bf:e3:c7:58:5c:b7:d1:8c:e9:58:7b:51:
71:b3:96:d0:9b:b7:be:28:4f:aa:a5:ee:1a:1b:44:
8a:6d:4a:8f:f9:6c:c7:9e:43:95:e3:4a:e5:b0:4a:
dc:ca:7c:bf:cd:fb:50:9e:5b:f1:2f:8a:0b:1d:d1:
00:80:af:07:0c:db:7f:cc:7f:0b:ef:b4:01:12:8e:
d6:c8:09:9d:24:3d:76:7a:90:14:93:9d:0e:96:f6:
2b:02:7f:a4:e5:49:ed:45:fc:62:d7:7a:fc:94:7e:
4f:5a:92:dd:a9:14:56:4a:e8:66:e5:fb:fd:f3:7a:
7f:27:ed:57:6c:2e:02:a2:6f:af:e1:2b:b3:67:d6:
fc:c6:39:67:4b:7a:91:56:3a:10:49:fb:c1:cd:3c:
84:f0:fe:30:6d:ac:70:53:28:85:99:e6:15:98:a5:
bb:25:84:b3:1b:b9:d1:5b:37:25:08:36:2e:d1:6d:
98:7d:f7:42:4a:ef:7f:64:fd:66:8f:14:78:42:9a:
70:8a:41:dd:8c:7b:8b:aa:d9:cd:a8:94:d5:2d:43:
65:de:11:9b:2c:65:6b:42:f2:f2:2e:e8:8c:33:d4:
f4:fc:c2:d9:df:a0:45:94:ff:92:12:0e:58:c0:cd:
dd:28:07:9a:fc:a1:53:10:ef:ed:07:fa:3b:f1:d2:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:F5:16:31:37:DF:19:98:DC:D8:63:27:D5:4C:F9:7E:3A:2E:67
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:c9:5c:9e:d7:1e:2b:ea:1e:47:dd:14:61:19:d7:9e:08:
ea:92:96:dc:15:9e:4c:62:95:82:3b:08:50:c2:d1:46:c8:84:
41:ec:1f:5a:30:48:9a:e7:e7:0e:20:6d:c3:e5:ea:49:75:f0:
aa:8b:fa:2b:7a:d3:77:2d:4f:6e:62:54:ca:e9:d7:43:63:0f:
62:ad:f1:de:6d:08:d0:ac:52:2c:62:88:29:62:04:19:dc:cb:
e8:4b:40:35:59:73:3b:ac:f4:f7:c4:0a:4a:bb:9e:e4:53:31:
9b:95:80:56:51:62:57:8e:3d:ab:ef:ce:11:d2:89:b9:7b:68:
fb:7b:f5:71:63:73:f4:59:2b:89:80:11:0b:23:47:71:e7:a5:
14:6f:70:24:b0:2d:be:e6:c3:af:a4:28:63:3d:b5:8d:d0:4d:
8e:7f:e6:fe:e1:0f:c0:44:3e:c7:60:fe:85:7e:38:cc:14:df:
eb:b7:02:b8:29:35:f7:3a:22:56:0e:46:d2:f2:ca:c2:01:99:
5b:0d:fa:00:28:ce:20:58:16:74:ab:f1:88:cb:d0:4f:c2:ff:
75:c5:78:30:3c:e0:ca:61:37:2b:c6:8a:4f:c9:91:2a:70:94:
1a:da:86:68:28:cc:43:5f:e2:82:ac:e4:37:9a:06:3b:d7:41:
be:96:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:28:28 2026 by rpki-client