
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier: 3E+gNWm7f4jvZ/zFynkzCH45b9Hf7Tr3t0C+IXcJg5k=
Subject key identifier: DE:3E:78:D0:AD:D3:C7:30:4F:8C:60:64:A4:85:0F:58:30:E2:72:76
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number: 012E
Signing time: Mon 27 Jul 2026 07:37:08 +0000
Manifest this update: Mon 27 Jul 2026 07:37:07 +0000
Manifest next update: Mon 03 Aug 2026 07:37:07 +0000
Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: N5Knr7MIjqf+lOgw5FeWrqBVoQmtyCzSvHFF6Ue79hU=)
2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: fMdXJV+1ucniyu3k/11VAI6qy/FxoiJSc5x07sN7B60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Validity
Not Before: Jul 27 07:37:07 2026 GMT
Not After : Aug 3 07:37:07 2026 GMT
Subject: CN=6a670aa3-ff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9f:2b:18:d7:a9:77:f0:3e:a9:9e:f7:25:49:
e3:74:bf:3e:3b:d9:ad:e0:23:5d:e4:7e:01:3d:9d:
fd:6d:98:de:88:d9:08:ea:d3:e5:07:81:66:4e:db:
a0:40:44:87:62:4e:d6:66:e3:44:ff:7b:1e:6a:9d:
ad:53:d4:26:43:c1:97:f0:a1:51:4e:13:83:40:dc:
a7:a9:dd:59:0a:4f:01:3b:c8:f3:86:a1:60:c0:a6:
ee:ff:50:95:4c:34:f1:21:1b:d8:bc:42:93:a2:83:
cf:18:e0:c7:03:c6:0f:ac:f8:6f:d9:36:2d:06:37:
cc:1f:2c:3f:3c:57:f5:ab:6f:75:2a:bc:b4:5c:2b:
13:71:23:9a:34:c5:4f:66:38:fd:6d:ce:df:c1:5e:
53:9b:04:ba:b1:fa:e2:43:5b:48:a9:d6:1d:89:bf:
a4:11:a1:16:45:f1:68:fd:d4:54:ec:bb:94:a7:2b:
6c:a3:99:e6:4a:86:80:d6:36:09:e9:e0:ef:94:50:
06:30:22:cd:42:c6:27:3e:f7:a3:32:83:77:e8:ac:
7d:46:76:a1:80:5d:8a:97:c0:61:3b:62:d3:04:d8:
63:11:b9:d5:d2:04:5d:a0:ba:86:a8:1e:48:9b:28:
72:4f:d1:67:d3:7a:1a:d6:94:2e:3c:fd:09:14:4d:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3E:78:D0:AD:D3:C7:30:4F:8C:60:64:A4:85:0F:58:30:E2:72:76
X509v3 Authority Key Identifier:
keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:bc:c0:ed:b5:0a:c3:0a:43:98:8c:6f:42:16:ad:67:25:
dc:59:1b:3e:c8:c3:1a:41:fb:1c:a3:eb:66:57:cf:96:d8:5f:
ab:f6:b1:84:fc:df:36:bf:b9:86:b5:64:54:d9:77:2f:23:00:
79:08:59:2c:fb:2f:6a:ad:ac:25:c3:1d:11:72:f7:c8:f1:76:
46:a6:34:60:cd:ea:7e:65:6c:78:70:08:bd:83:a6:90:f9:9a:
95:92:dd:88:fe:b9:e8:03:84:d7:01:71:9b:38:07:11:2e:f1:
69:d3:19:09:ec:cb:6e:3d:3a:d1:93:c2:bb:ca:7e:00:5b:dc:
b4:e5:b8:55:d5:67:1a:86:78:da:af:78:f3:2c:aa:53:1b:b2:
31:51:f8:15:38:e0:3a:ae:55:80:35:cf:dc:7e:ca:6f:7e:a0:
5b:29:1d:56:72:18:a6:9a:a9:04:0e:3a:6f:3f:f4:72:e8:08:
78:90:c7:eb:94:01:8e:7f:b7:c7:cc:2c:f0:5c:0c:c5:d2:d6:
c9:b6:23:30:c8:a1:43:87:80:7b:63:ad:f3:61:39:a9:da:eb:
57:8c:bc:70:47:a7:05:7a:1c:d8:48:f1:02:3b:ca:1b:62:41:
1d:7f:0d:9d:62:f9:a6:70:4b:4c:85:a3:55:0a:5b:29:ac:af:
54:0e:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:50 2026 by rpki-client