
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier: kv6NyvFKWQC4ss5OnSlWA++IkTyZV/hltF6vCCLm1vA=
Subject key identifier: 16:E8:3C:6A:D4:BF:EA:A8:14:D2:20:13:67:EB:D9:3B:50:F3:53:56
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number: E2
Signing time: Sun 01 Mar 2026 07:38:35 +0000
Manifest this update: Sun 01 Mar 2026 07:38:35 +0000
Manifest next update: Sun 08 Mar 2026 07:38:35 +0000
Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: f1b6SZfFlrgidf9oC4rAYpvxUNkqKordALPZLpgbdz0=)
2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: jqm9AvgV4FxQG5X3y3xKe8muOycM02nLSK2i0VaGmmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Validity
Not Before: Mar 1 07:38:35 2026 GMT
Not After : Mar 8 07:38:35 2026 GMT
Subject: CN=69a3ecfb-e1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:10:2a:30:de:aa:1f:c4:c6:b0:8c:95:d3:
8a:72:5f:2c:06:49:ee:ed:26:1b:0f:7c:8e:2c:02:
9a:92:71:3c:57:6f:87:f6:ee:56:3b:e5:fb:03:e6:
4d:bf:a0:93:10:f8:56:5f:68:3b:64:fa:9a:6a:51:
e9:18:a7:26:f3:43:2d:7a:a7:aa:5e:16:e4:d1:96:
23:cb:fe:fc:f6:3a:16:2b:94:99:79:2b:b0:da:93:
24:d6:cd:b7:3e:2c:c9:b4:4e:8e:e1:d6:d2:40:50:
55:47:44:d2:90:30:44:2c:66:7f:63:2b:70:6c:f3:
45:2a:7d:f1:c9:64:bb:61:5c:0d:26:f8:22:57:df:
de:08:9c:38:ac:ed:71:46:fa:00:f9:3b:6b:05:0e:
de:65:32:e0:83:13:98:1b:98:8c:1a:f3:10:99:8a:
c2:ae:b8:08:6d:40:ac:93:7b:eb:5e:4a:54:83:5c:
ad:db:52:99:9a:44:01:f2:9e:bb:8f:a4:8b:a3:2e:
51:6e:f3:01:7c:54:74:9b:cc:9b:07:84:94:cf:16:
39:b4:a7:c4:0e:c6:8e:f0:45:3d:bb:d9:5d:e4:61:
1f:0d:dd:b5:01:28:25:e7:dd:c0:3a:0c:32:c7:b0:
92:a1:82:87:66:6a:7d:13:36:4a:c0:5f:fb:2a:a4:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:3C:6A:D4:BF:EA:A8:14:D2:20:13:67:EB:D9:3B:50:F3:53:56
X509v3 Authority Key Identifier:
keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:e9:39:6e:4d:87:53:31:c9:6e:e3:d5:ad:87:31:15:95:
4b:cd:2e:7d:4d:45:22:8b:e1:43:52:cb:b1:b9:9f:3b:dd:9a:
02:f1:f8:d0:72:cd:bf:18:59:e8:1f:f8:66:b5:44:7d:73:13:
db:1f:a2:ec:c9:3d:bd:53:c6:d4:9e:03:42:db:03:a4:df:7e:
0b:b1:ce:b6:8b:20:ac:81:2d:ba:40:c4:f7:32:1d:78:e9:ed:
b2:df:6d:47:c6:e5:ce:6d:53:34:e4:2e:10:1d:94:05:40:d4:
cf:d2:cf:ea:18:bb:18:14:a3:08:97:2c:61:1a:5d:a5:fb:ba:
31:cb:99:a4:36:ac:1a:bf:c4:9e:cf:2a:e7:de:26:1e:c2:96:
70:9e:9e:ce:33:6f:63:69:eb:14:b1:a6:f4:4b:4c:3d:2b:43:
5e:cf:85:91:1d:ba:82:8d:69:ca:1d:d5:7c:15:f6:33:8e:d6:
51:3c:ea:44:8e:a0:26:1b:75:e5:43:5f:90:f0:a8:4d:95:3b:
6b:87:34:ca:95:02:21:69:82:ab:07:1a:f6:25:6a:aa:6a:81:
dd:9e:06:08:d1:d6:af:55:d8:22:16:a3:fd:11:66:92:40:8a:
7c:bf:a4:ed:18:d4:0b:49:58:fd:f0:05:7f:a3:31:b5:d9:af:
81:3c:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:45 2026 by rpki-client