
$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json)
Hash identifier: ZxNayOkX0ZCe5FvCk/D402ccfCwI1UxmnYZ+SmsNI70=
Subject key identifier: ED:CD:33:DA:81:FE:26:46:1D:49:11:CB:3A:E2:A3:FB:5D:68:F4:46
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 353F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
Manifest number: 352D
Signing time: Sat 28 Feb 2026 14:24:41 +0000
Manifest this update: Sat 28 Feb 2026 14:24:40 +0000
Manifest next update: Sat 07 Mar 2026 14:24:40 +0000
Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: WengQb30fh9NAXVSzhW1pC6JsSkkemThCQ0JIVB+gqc=)
2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: TsmW3wUGCspNY1UcKJcNnUuuDH7qDphY3UYVmmAdbDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13631 (0x353f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Feb 28 14:24:40 2026 GMT
Not After : Mar 7 14:24:40 2026 GMT
Subject: CN=69a2faa9-97ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:e2:4f:01:00:dd:1c:7e:43:43:bc:64:1a:
08:e2:be:69:7f:cb:e5:d3:c4:a2:6a:a4:a5:e8:5b:
7f:13:db:6d:38:0a:a2:3c:f8:b4:f0:b5:61:6b:34:
d5:e8:21:e7:26:14:c9:8f:dc:76:38:0c:ff:6c:27:
f5:a4:a0:fe:d0:01:ac:6c:e2:94:1b:00:b0:80:0a:
22:e2:00:49:c7:a2:c7:24:8b:6f:6f:a6:f4:b4:53:
a1:26:b1:f2:88:a0:a2:74:a4:2d:84:fe:37:4f:99:
42:d9:09:c4:e8:db:a3:e9:90:09:23:b0:6d:2f:5c:
27:48:5b:dd:ce:ba:06:30:bb:ea:ee:75:f4:1d:12:
a4:d3:53:d5:1c:89:98:ea:3b:bc:3b:f3:e1:c9:5c:
d0:a6:a3:1b:ee:74:ee:01:68:4a:66:22:fa:22:cc:
70:50:5d:c9:48:bf:ec:e6:48:ec:07:eb:a6:a5:29:
c7:ac:6c:12:13:a3:c7:d8:ff:80:60:d4:c9:63:53:
1b:0b:c1:01:68:4d:ef:45:12:1a:d9:36:3e:c5:93:
e2:3b:64:b6:51:7e:2e:e4:a2:49:16:98:a5:91:31:
cd:50:ca:6b:43:4a:28:28:44:cc:35:f3:de:6b:f1:
7a:1d:a1:36:64:45:35:fc:b7:71:37:3a:f9:fb:91:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:33:DA:81:FE:26:46:1D:49:11:CB:3A:E2:A3:FB:5D:68:F4:46
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:7d:ea:4c:c7:92:50:4d:2c:e9:95:ee:24:53:63:0c:1e:08:
52:f9:a6:e3:03:53:94:09:49:d3:ec:a5:a9:0a:32:63:14:05:
f0:55:15:df:81:fc:5b:4b:30:90:1b:63:48:5c:21:c0:94:91:
07:de:4d:7a:cb:0e:51:8c:ba:f0:81:2c:ba:bb:0f:61:b7:16:
ec:50:64:88:fa:ca:23:0e:76:12:05:7c:22:67:fa:33:22:7e:
0d:9f:36:93:c1:0e:d9:05:b1:10:3f:41:cf:cf:13:7e:18:c1:
8b:d7:b5:53:67:e4:01:a8:00:19:79:92:a4:4b:0f:5c:5e:1f:
d9:01:0c:6a:85:50:9b:9f:70:b4:86:03:85:70:4f:f6:83:5a:
cc:97:2c:ed:58:8f:df:3e:6a:81:af:ef:be:c2:9b:9c:f7:b0:
1a:aa:89:81:73:9c:31:c1:5b:84:17:19:c5:8d:62:a8:08:02:
43:4f:9e:5f:60:e4:e5:25:a8:7c:41:65:85:6c:a8:77:de:21:
ec:f8:02:c8:ab:48:64:a7:f2:1b:d8:36:d1:40:4f:c0:ff:ab:
0a:da:53:d1:8a:0d:7b:b4:a0:43:05:6e:ff:d8:ba:1a:90:db:
94:37:be:0f:0c:c6:24:73:26:41:29:42:93:e7:90:4b:86:26:
94:44:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:46 2026 by rpki-client