
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json)
Hash identifier: fqQLbfwBOcTIfOfSmXAcyqPr0dBiUtqvZhd00fdbzHs=
Subject key identifier: FF:BB:A4:F9:1B:04:54:24:2A:E2:4E:BB:47:3A:55:8C:0C:9D:4B:18
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial: 0A6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
Manifest number: 0A65
Signing time: Mon 02 Mar 2026 19:30:08 +0000
Manifest this update: Mon 02 Mar 2026 19:30:08 +0000
Manifest next update: Mon 09 Mar 2026 19:30:08 +0000
Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: QniLAWkLFEKlAjd83oLMo+Tjv/+OVfE2SEPTTA/5m3Y=)
2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: pLFtJM8YCayRSQjnW3sFmWo+oKdAsNVRNoN1xNfin+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2669 (0xa6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Validity
Not Before: Mar 2 19:30:08 2026 GMT
Not After : Mar 9 19:30:08 2026 GMT
Subject: CN=69a5e540-dabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:4b:02:e2:c0:0a:5e:21:aa:e3:e6:a3:d1:
71:00:d9:7c:ec:ae:a7:24:fb:70:6f:8d:74:35:3f:
b8:c9:12:fe:96:36:25:52:93:3f:5f:b6:eb:fe:b0:
5b:05:3a:02:27:0e:8f:4c:3a:60:c7:7b:57:6c:17:
49:bd:e0:23:ff:ab:ff:c4:b8:a6:8e:62:04:b1:55:
c0:4d:30:52:68:8c:86:31:d9:9d:1a:08:a1:96:6e:
df:b9:15:e6:fe:b9:9c:47:8f:ad:47:8a:73:02:a9:
a0:8d:29:96:11:38:58:15:e8:6f:26:b6:1b:02:48:
55:c0:09:3a:a1:3e:b8:49:03:49:ba:3c:f8:c8:3e:
ba:3f:4f:33:94:3c:44:9e:fe:b1:18:7e:20:f6:7b:
53:59:1b:b2:66:4b:01:09:36:f9:98:0f:f3:26:23:
3e:4f:a5:5a:20:54:30:91:47:34:10:e4:69:4b:a9:
a2:20:ae:d7:05:b4:1c:b4:32:05:23:c1:30:5c:3d:
8c:28:97:e9:c7:d6:cf:13:49:63:65:0c:df:07:2e:
60:9e:43:3e:dc:53:0a:04:6b:65:6f:a2:68:55:1e:
93:13:22:c2:0b:48:5f:2e:8b:8d:71:99:f1:9a:95:
7b:e7:55:08:1d:16:78:00:da:6d:a5:eb:1d:6d:ba:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:A4:F9:1B:04:54:24:2A:E2:4E:BB:47:3A:55:8C:0C:9D:4B:18
X509v3 Authority Key Identifier:
keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:1d:47:65:18:2b:ea:8a:3f:77:cb:88:01:49:53:2a:b8:
d8:77:28:dd:6b:c9:83:87:6c:c9:88:a2:d3:1b:41:66:9c:81:
e8:56:07:85:23:c1:10:de:99:f9:77:a0:48:b8:62:50:cb:64:
5a:0f:be:8b:f3:db:13:2d:11:d7:22:a3:59:86:a2:01:21:68:
02:dd:06:cf:03:b9:13:5c:1f:db:d2:4f:b6:0d:51:c7:d5:1c:
2d:c6:41:33:86:14:bd:2e:2b:a6:5b:e0:72:4c:1e:3c:d3:fc:
3e:fe:69:1f:48:6f:b6:07:68:4f:df:9d:8d:ec:ad:01:e6:9b:
27:df:3d:58:94:c6:11:bf:88:77:7e:9c:6a:94:0f:3a:21:ab:
a3:9a:c0:e2:96:1e:b1:ac:1d:a1:fd:cb:2d:0b:3b:06:7e:0e:
6e:b0:b9:63:8d:b7:0f:c9:8e:9d:08:88:56:94:a1:b7:f3:92:
3d:1e:aa:f8:e9:74:a2:a0:b4:e5:23:ff:53:d5:74:b0:b9:9f:
0d:67:86:e5:62:7c:43:87:34:a0:c1:9e:4d:39:bd:29:7e:a1:
92:76:a4:a4:23:07:05:3b:84:5a:83:43:20:82:83:50:cf:9d:
b0:31:d6:d0:1d:e0:c6:38:5e:b6:fd:0d:94:57:82:bf:93:90:
97:f0:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:36:32 2026 by rpki-client