
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier: jg1adENjLs95arqPxsw0poqy8KrFFtO1iz4txh6YZys=
Subject key identifier: 9A:36:E7:34:50:98:45:BF:99:B7:33:61:33:71:0B:9E:C8:14:DD:D3
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial: 064B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number: 0642
Signing time: Sat 18 Apr 2026 22:37:29 +0000
Manifest this update: Sat 18 Apr 2026 22:37:28 +0000
Manifest next update: Sat 25 Apr 2026 22:37:28 +0000
Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: QgK+JXhb3Q3vbbAhP8WT477v7adnCMHNe7IiabSJqMo=)
2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: 0NaFUot0pXR7DvCrYe8iswpOneCs4skyX98hr8n2MVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1611 (0x64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Validity
Not Before: Apr 18 22:37:28 2026 GMT
Not After : Apr 25 22:37:28 2026 GMT
Subject: CN=69e407a9-3d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:05:33:d7:6d:0d:42:63:ec:f2:63:01:4c:
70:ed:46:24:a3:c0:3d:c9:79:02:62:cd:ca:ee:24:
78:b1:c3:33:31:61:c3:f6:36:36:5d:2e:84:3a:e4:
a3:ee:74:87:fe:a0:1d:5c:70:2f:4b:a1:08:71:33:
f5:3f:d8:51:f1:10:b9:0b:5b:05:6d:65:cb:0a:fb:
2e:41:8e:25:b1:6a:ee:b6:d4:a4:ee:f4:87:d7:7c:
4d:ad:a0:e8:04:cc:13:57:01:99:7a:0b:4f:61:5d:
45:c0:bd:bc:fd:11:48:e5:bd:a5:b2:2e:04:64:c1:
36:9d:64:03:1e:2e:a5:07:3e:a6:19:28:9b:8a:54:
c1:14:8a:75:9e:b6:f1:51:a9:d9:eb:39:dd:07:aa:
9b:b7:71:af:50:fe:62:18:68:09:d6:9b:8f:53:21:
93:09:5f:18:ec:21:2c:15:13:b1:77:ee:7c:00:39:
1c:f7:07:f8:85:86:75:14:26:3e:c6:6d:6d:b8:62:
cc:d5:ab:19:3b:37:ec:00:6d:a8:38:82:dc:25:21:
ac:ca:ce:85:37:d7:04:b9:93:8b:a1:29:0e:2c:d8:
23:7e:47:02:7a:df:7b:95:33:01:98:62:1f:d2:f3:
ea:dc:cc:7f:db:44:3b:b2:9f:b7:cc:d3:0a:bc:64:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:E7:34:50:98:45:BF:99:B7:33:61:33:71:0B:9E:C8:14:DD:D3
X509v3 Authority Key Identifier:
keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:09:33:be:58:23:09:ff:53:66:6c:20:9b:42:ed:2c:26:
81:f1:6c:2c:01:24:61:47:2a:ee:6e:e7:1d:45:0a:cb:58:ad:
48:24:99:aa:8f:53:ed:f7:43:ed:04:26:41:0e:07:85:5f:e2:
f5:6f:ca:ae:9c:d5:59:56:bd:ee:ba:fd:36:34:2d:36:f6:bd:
dd:94:84:3f:0c:71:91:d9:3e:03:62:b0:28:95:f2:7d:f1:f2:
72:12:06:e0:63:71:b9:d3:c6:d5:b6:5c:fd:25:d3:0f:21:d3:
e7:b6:54:f0:0c:46:4d:47:3a:fa:a8:f7:c3:3c:a2:16:7b:03:
86:53:36:8e:aa:02:f3:00:a0:15:bf:51:86:32:59:3c:03:76:
ce:cd:ec:0c:45:70:a0:b7:f9:b4:97:43:1d:5d:32:5b:d4:70:
b4:9c:6f:07:16:26:42:8a:f6:34:a7:a9:40:a4:1f:45:d8:a4:
5b:23:49:27:b2:0c:25:3c:7c:33:06:ba:96:93:66:5a:44:5f:
ec:0d:1a:96:69:08:1d:af:7c:72:90:5d:04:7b:5d:ea:4a:97:
8b:97:1e:f5:dd:c5:31:d5:61:fa:ad:7d:02:85:67:e4:8c:c9:
d1:fe:1b:57:63:c4:53:71:50:ff:75:48:8c:df:35:83:b6:66:
98:ba:6d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:03 2026 by rpki-client