
$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json)
Hash identifier: dtp+vbmdJmzlE1/BNhnOtdnTMPcrNRgMR4kCrbiONMA=
Subject key identifier: 30:D7:9F:A7:6E:A4:85:38:B0:3F:DD:98:2C:99:A1:0E:8F:4C:6F:00
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
Manifest number: 015E
Signing time: Fri 17 Apr 2026 04:38:12 +0000
Manifest this update: Fri 17 Apr 2026 04:38:11 +0000
Manifest next update: Fri 24 Apr 2026 04:38:11 +0000
Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: E6EpOkhLPnV316H8O9gH6SI9OsciVq16o5+1Zw4h6zA=)
2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: m9PVqT0U37yXO4ZBkmsSwAW86j+V8m+FgHiO1R6bfj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Validity
Not Before: Apr 17 04:38:11 2026 GMT
Not After : Apr 24 04:38:11 2026 GMT
Subject: CN=69e1b934-5892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0e:34:ef:f6:28:00:e3:94:8b:3d:8c:50:08:
35:89:b0:0b:cf:d0:df:3a:cb:e9:43:f6:50:9f:60:
02:d1:a9:50:f2:85:19:42:84:4b:5d:9f:28:45:f4:
05:a1:eb:bf:3b:fd:49:57:c8:48:1b:46:4e:39:e0:
80:e3:b5:99:9e:69:f3:29:0e:54:2d:fe:ed:b7:67:
5f:f1:fd:dc:9d:0f:79:94:f6:53:2b:0d:61:92:a9:
c7:da:9d:df:d3:3f:9a:af:bc:e8:fd:4f:62:91:a8:
4e:35:2e:d7:ad:e4:dc:77:8b:d6:a7:44:95:2f:a1:
37:25:87:d6:55:76:82:f8:ec:2f:4f:1c:11:17:9f:
b2:2d:95:55:a8:e1:fb:c2:96:79:35:f1:1f:88:ce:
8a:ea:09:98:39:91:0a:a3:a4:bb:dd:0c:88:dd:ea:
3a:5c:83:2b:d5:bd:a4:57:8b:e4:d6:e7:3f:b9:51:
29:ff:58:4a:9d:f7:2e:ba:1c:4d:e1:3e:29:b3:65:
0a:94:3a:23:10:0a:3e:8f:5c:ae:ce:93:d6:9c:7f:
7e:84:7a:42:64:66:0f:a4:da:09:26:80:09:28:5f:
35:12:e3:8b:81:ef:bf:97:11:88:c2:13:4d:aa:fd:
fb:94:67:b7:dd:2e:36:ff:c9:1c:65:96:00:72:e4:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:9F:A7:6E:A4:85:38:B0:3F:DD:98:2C:99:A1:0E:8F:4C:6F:00
X509v3 Authority Key Identifier:
keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:7f:db:45:aa:78:a4:bb:41:33:65:75:a4:ca:93:b6:77:
61:42:33:8b:82:69:61:7d:58:10:15:39:a5:3b:cd:7b:ac:7d:
7c:64:df:f3:f6:3e:10:e5:04:7e:88:bd:25:76:db:61:e6:c6:
69:df:25:2d:5c:b2:a4:63:29:70:70:d7:0f:d3:31:33:e1:06:
b1:6b:ca:8a:90:aa:d0:b9:c0:d8:cb:6f:33:2b:d8:ff:a9:0a:
f7:fb:65:ee:46:24:b5:ae:8f:3c:89:bc:c9:3f:ec:cc:e3:33:
13:e2:d9:2c:d3:d6:fd:9b:8b:e5:a7:9a:bf:00:8a:fa:37:ac:
ee:e8:11:c0:c8:54:3c:70:45:c1:fc:99:19:93:b4:09:f9:bb:
3a:b1:29:ea:4e:0e:1c:67:68:dd:12:35:53:9f:5f:48:a5:09:
8c:eb:0d:89:93:d8:d9:2b:4e:6b:dc:4c:fb:d9:5a:f9:51:9f:
29:22:b8:5e:52:d7:cc:71:02:cc:d7:4d:34:6e:04:aa:85:e0:
87:89:7a:6b:08:60:ad:39:cb:01:31:7f:42:f3:11:46:a8:9e:
c5:77:fd:38:9d:b9:7e:c3:a8:ef:a1:35:bd:3e:cb:3a:02:ca:
d6:d8:33:19:86:c8:f7:9a:31:8e:3c:3a:24:6e:84:eb:aa:f8:
48:0c:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:23 2026 by rpki-client