
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
File: kzxM1thDXA-L4vUjRybWYQ9-2jo.mft (raw, json)
Hash identifier: ODkHRT05Idg0YrRAcEP8HF27M+40+XQsRJFiQeVxwV4=
Subject key identifier: 88:F2:94:38:17:13:2C:4F:85:B0:97:AD:DD:E6:BE:00:7A:C8:40:D6
Authority key identifier: 93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A
Certificate issuer: /CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
Certificate serial: 0D08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
Manifest number: 0CF7
Signing time: Sat 26 Sep 2026 18:30:57 +0000
Manifest this update: Sat 26 Sep 2026 18:30:56 +0000
Manifest next update: Sat 03 Oct 2026 18:30:56 +0000
Files and hashes: 1: kzxM1thDXA-L4vUjRybWYQ9-2jo.crl (hash: 7flDdpzZ8ZInM9i457I9nFX6rgd47Ls9D3Xm+g/H22E=)
2: 38FFAC50884411EDA212BC24C4F9AE02.roa (hash: 8Kzq8ge3wSUVu+VYpnFOyTT3NcPx0P4ByioHfNwqHSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl
rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0DE, serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
Validity
Not Before: Sep 26 18:30:56 2026 GMT
Not After : Oct 3 18:30:56 2026 GMT
Subject: CN=6ab80f60-09b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:59:cb:33:a6:08:d3:c0:b9:de:55:40:86:
cb:c1:83:45:0d:7b:fb:4e:de:21:da:15:aa:9f:2d:
92:2d:5e:0e:1e:0b:27:59:5b:92:fa:a5:b2:50:86:
e2:9d:dc:9d:a0:c7:b7:56:19:71:3b:1b:c5:7b:b4:
b1:b5:ab:3c:4a:1a:d9:ef:0c:eb:18:85:5d:af:e7:
66:70:2f:ab:60:10:d6:66:a0:6f:7a:64:ff:03:4d:
b6:07:24:54:63:93:a6:69:71:b0:50:9d:cf:a5:d8:
21:17:29:11:a1:63:bc:24:68:0f:6f:e9:33:25:04:
38:d2:d0:73:23:5e:e1:df:59:a7:89:23:79:9e:da:
28:9d:a3:61:5e:a2:c9:22:4d:eb:63:98:09:52:02:
8b:73:6f:bb:49:3a:9b:f7:32:6e:8c:ed:87:8e:69:
01:f3:1d:60:bc:f0:5b:a4:22:c9:2a:44:cb:a1:5d:
ec:fc:8f:a5:4f:de:4e:ac:cc:75:fa:81:ab:0f:7c:
2f:9e:38:e1:2b:ba:d7:59:bc:61:92:35:fb:05:2e:
20:5e:35:01:c4:3f:d7:c0:7e:a6:44:cb:df:5c:04:
37:ea:da:61:7b:b9:0e:7c:8d:38:d7:a5:74:6c:3d:
d7:3b:8d:b0:d8:d0:b3:4e:12:d6:ce:6f:ee:e9:f7:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F2:94:38:17:13:2C:4F:85:B0:97:AD:DD:E6:BE:00:7A:C8:40:D6
X509v3 Authority Key Identifier:
keyid:93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:88:d2:3d:88:f4:fe:5e:92:90:9f:77:b1:e5:2e:e2:58:
fc:2c:4c:01:fc:f8:65:59:05:9f:b5:51:a6:07:c8:0d:48:e8:
2b:dd:05:47:e2:a7:2b:dd:f6:d5:43:be:5d:a5:14:2d:93:9e:
ff:cb:5f:27:22:ca:56:a0:32:ef:ff:8a:64:a9:4f:55:81:8d:
ae:00:18:9f:24:d3:b4:85:10:b1:67:ed:8f:2b:59:14:3c:05:
ba:ba:bf:b4:28:d6:17:f1:dc:d9:a5:b9:7e:5b:cd:08:c1:9f:
33:fd:8c:c2:f1:18:8b:af:d6:97:1d:51:8f:af:05:a2:92:a2:
cc:73:b7:0f:cb:32:38:9d:2a:48:54:6a:e8:f0:7d:90:91:c8:
29:29:3b:9b:7a:9b:49:05:bf:49:5d:61:fe:a4:26:c4:5c:e0:
4c:88:87:6d:d3:1a:16:7f:6c:99:ca:fb:12:e3:21:67:f5:41:
b9:19:58:5a:d3:c2:a5:d6:6a:69:21:ff:d6:1f:fc:97:ff:a4:
7f:37:32:41:a8:43:bc:03:16:c0:c6:e1:6c:3f:5f:aa:a6:9b:
68:ee:95:77:c2:08:4f:00:53:59:63:cb:f0:65:bc:95:fc:89:
81:e7:d6:60:2f:f1:2c:2c:e5:5a:5f:7c:d8:54:ab:45:45:37:
bd:01:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:08:06 2026 by rpki-client