
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json)
Hash identifier: x2ef7kubC0d9ru1XBvDeApuH/QhMs3cCffFQd01I0fc=
Subject key identifier: 4B:45:E9:56:23:9E:44:09:9C:BF:1E:52:66:F1:30:03:79:5B:20:64
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial: 04AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
Manifest number: 04A8
Signing time: Wed 29 Jul 2026 00:37:52 +0000
Manifest this update: Wed 29 Jul 2026 00:37:52 +0000
Manifest next update: Wed 05 Aug 2026 00:37:52 +0000
Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: nTzojELS0rvKghzP2O/VfylUubboR87mUfg5/RNF9jA=)
2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: 9GkSsGabC4YIge7KqJ4TFMFRkrykr6bw7a+2s3Vjy28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Validity
Not Before: Jul 29 00:37:52 2026 GMT
Not After : Aug 5 00:37:52 2026 GMT
Subject: CN=6a694b60-390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:a6:8d:0c:d3:6c:22:e0:e0:4d:44:c9:ec:
e8:85:fe:d7:06:24:12:9d:14:1f:24:7c:ff:dd:9e:
74:b2:a2:f9:a5:30:23:8e:e9:ee:10:b7:87:3e:33:
b1:d8:ce:fa:25:1d:3b:61:d8:92:e5:d4:8c:0d:78:
8e:95:11:b3:6e:29:5e:54:98:3f:c9:a5:d6:41:ff:
37:70:1b:d0:c0:f1:fd:ac:d0:79:f6:b5:6e:7a:ae:
e3:cf:28:f7:36:dd:18:83:c6:38:01:ac:91:2e:72:
b1:94:c3:65:b2:60:7f:85:35:4c:98:a7:30:ea:23:
3d:2e:3d:71:4b:c0:26:98:be:30:e8:ff:a7:17:f6:
c0:bd:3a:08:41:c4:47:a7:31:81:a0:23:a6:c8:de:
21:6b:56:8b:ab:e5:31:e6:12:f0:85:96:37:85:1d:
b2:83:ee:f0:13:82:34:57:7c:48:11:36:d4:f8:a7:
59:aa:4f:f0:a3:a6:b0:2d:a2:b8:85:90:c5:49:30:
05:58:4d:0c:54:b4:a4:e8:1f:f4:af:a5:49:e7:9e:
34:be:b7:ec:df:1f:62:05:5d:49:57:38:a3:a6:de:
de:18:a0:b1:8d:7a:68:b0:35:de:71:4e:9d:88:08:
95:cf:d3:df:bc:ae:e7:53:3d:6a:90:3b:60:97:ed:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:45:E9:56:23:9E:44:09:9C:BF:1E:52:66:F1:30:03:79:5B:20:64
X509v3 Authority Key Identifier:
keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:31:08:03:1c:0a:4d:45:82:32:d2:c6:10:ba:c5:8b:ee:32:
e6:a2:e5:08:f6:a2:3e:82:f2:31:56:ce:ad:d0:27:72:e1:84:
64:0f:27:80:6e:9e:10:55:57:e5:47:c2:99:39:fb:f0:ef:27:
e0:76:b7:3e:c0:16:ed:0e:24:9e:0a:6d:4f:64:c1:07:27:72:
b3:68:23:5c:28:e0:c6:50:f9:d0:02:64:f9:d9:0d:f2:8d:9b:
bb:16:8a:c3:8b:49:3b:75:28:d7:df:0f:26:1a:1b:93:4e:8e:
75:70:73:2d:60:b4:85:95:e8:85:ae:6b:70:5b:65:dc:97:e2:
b0:8a:ae:ca:97:92:a7:30:c9:d6:f2:a8:98:9a:b3:6f:84:7b:
1a:98:06:63:cf:7c:18:fa:e0:02:aa:ac:b2:cf:d5:c9:e8:44:
f7:91:1d:02:04:89:b1:92:25:a7:1f:fd:cb:fc:9c:b4:ca:8a:
16:c7:17:9c:5f:63:b7:69:64:01:92:9d:85:f4:f1:62:d8:33:
ce:41:57:cf:14:b8:52:63:6c:a4:e1:c3:4e:25:85:9d:21:a9:
6d:98:6b:9e:79:a1:af:83:ff:c0:de:04:b1:90:56:3f:c2:94:
59:63:b3:68:86:41:fc:17:b8:b1:14:3a:ca:5c:76:ad:c4:29:
cb:a3:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:48 2026 by rpki-client