
$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier: UcyE7vDl3Zfo09UB1bQOG1j6nWGgR70yRUrYIz4xRU4=
Subject key identifier: 11:B1:53:54:A1:98:E8:22:7F:B8:D4:17:E1:77:65:25:7A:E9:75:70
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial: 05E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number: 05DB
Signing time: Thu 16 Apr 2026 22:54:34 +0000
Manifest this update: Thu 16 Apr 2026 22:54:34 +0000
Manifest next update: Thu 23 Apr 2026 22:54:34 +0000
Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: 8xejwt1K0s4i++P6IfEz/Vh4TJ8Y/YK7IbrbCTUT39U=)
2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: 5KIGpWZKTRHwQtms3xYKU2Snxu8ukES0vK87z+NnMlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Validity
Not Before: Apr 16 22:54:34 2026 GMT
Not After : Apr 23 22:54:34 2026 GMT
Subject: CN=69e168aa-6d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:12:f2:4e:82:2e:79:0a:fa:b2:81:ed:eb:
53:af:88:73:d2:93:67:12:2b:9c:49:e7:22:05:9f:
6a:a3:ee:89:b6:5f:1d:f4:83:54:6c:20:f4:50:15:
6f:7b:89:73:b1:27:2e:de:e2:81:30:3a:2f:67:37:
d7:f1:21:8c:36:e9:fe:10:4a:5a:73:31:19:ed:d2:
65:c1:1d:bd:e7:a3:b4:a3:ff:25:3c:8f:7c:70:aa:
0f:2a:0f:05:98:f9:c8:bc:fc:8e:29:a6:3a:f0:5c:
23:5b:7e:14:7a:79:28:d3:13:8b:2d:d7:45:44:7f:
a5:35:1e:d8:93:7c:8f:13:87:39:b2:14:27:0e:7e:
9b:a9:22:1c:ac:8c:cf:21:4a:9a:5c:e4:06:47:52:
2c:3f:39:54:47:94:8c:4a:9f:9c:20:fa:f9:98:15:
e5:76:2f:c4:74:c2:4c:fb:3c:14:60:07:58:73:7b:
32:db:96:ba:32:e3:bb:31:95:c0:b4:31:fa:22:3e:
99:0a:4f:08:4d:88:d1:7e:f7:6d:1f:eb:85:9f:a9:
bd:26:14:69:32:9e:44:c9:c2:05:9e:dd:38:65:c0:
3e:86:d9:aa:54:c1:76:c8:bc:68:72:5c:ba:a0:e8:
02:8f:41:1a:be:bc:83:aa:4f:7f:a4:a7:86:33:40:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:53:54:A1:98:E8:22:7F:B8:D4:17:E1:77:65:25:7A:E9:75:70
X509v3 Authority Key Identifier:
keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:c5:05:10:87:48:0f:de:74:0d:ea:24:65:96:b3:1a:7f:f9:
2c:82:3d:73:7d:82:3e:48:a2:81:0f:8c:79:46:49:22:c7:06:
f7:8a:06:b4:88:73:c5:0f:03:3d:e2:b0:4b:ff:7c:71:75:3c:
36:78:ce:7e:45:9f:ea:25:6d:b2:0d:2b:9d:46:b3:6d:a2:ed:
ba:89:b1:59:d7:96:81:8f:b7:5c:da:08:06:05:50:06:f8:09:
4a:0a:d3:46:cb:b7:48:4c:5f:70:ef:a2:db:34:1f:3c:fe:c4:
12:35:e7:f3:0d:34:e1:fc:7e:46:ad:2a:1f:a8:0f:19:1c:47:
31:72:94:89:13:b0:14:ec:e1:76:8c:eb:b5:12:1a:3b:4b:68:
39:28:86:0b:a0:3e:ce:6b:d2:78:63:c1:21:1c:99:b2:c9:d8:
96:a8:c5:e0:b8:9e:2d:c5:71:73:f5:cb:52:32:fd:60:5d:3f:
a9:c7:a9:75:17:09:a0:9a:cb:23:58:d1:85:6b:71:42:e9:d9:
64:50:61:18:95:13:a9:d5:db:7c:b3:1b:65:59:be:2c:d8:35:
16:82:db:b5:76:fe:62:47:5d:6a:c2:f5:2a:ca:ef:c5:62:e8:
b5:6b:7c:c0:0c:48:d4:e3:ea:93:ba:78:6c:2e:ae:c1:ed:6d:
10:56:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:42 2026 by rpki-client