
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier: tmjO9NeV4scf6Tu8y1dQtBDcnLV4sRAf0nD840OogVo=
Subject key identifier: E2:30:F7:C9:B5:86:2D:47:8D:DA:4F:D8:E8:E3:7D:3F:23:A4:F7:BC
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial: 0BB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number: 0BAE
Signing time: Sat 18 Apr 2026 18:55:39 +0000
Manifest this update: Sat 18 Apr 2026 18:55:39 +0000
Manifest next update: Sat 25 Apr 2026 18:55:39 +0000
Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: U622/u3s1I5wxr8jFPO5c7EdIeceRD7L4tww/IuRdqs=)
2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: BflaMKPNzYcw7RJZL8ZElH/1dQPWbz3sqv57VUU34cI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Validity
Not Before: Apr 18 18:55:39 2026 GMT
Not After : Apr 25 18:55:39 2026 GMT
Subject: CN=69e3d3ab-8f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:79:e3:79:3c:68:d4:e0:20:15:5c:88:42:
ee:53:f1:3b:f1:f6:c5:28:8a:77:26:49:98:9a:cc:
77:a1:13:9e:75:b0:6e:12:59:58:02:c4:e3:0f:f7:
ae:7f:ac:86:25:31:93:73:81:5a:fe:d0:fb:37:53:
b6:4b:c6:df:be:f4:7f:57:c2:81:c2:e3:a3:e4:83:
56:30:56:e1:c6:dd:9a:a3:00:48:27:5a:e6:46:dc:
68:37:1c:ff:8a:51:52:27:7a:36:06:20:d0:39:0e:
47:76:44:24:6a:3c:31:18:11:d5:11:d0:62:97:76:
d9:e5:c2:2c:ee:6f:8c:30:45:10:6e:a0:1c:ff:a0:
39:d1:2f:59:a6:30:c7:22:ac:13:99:55:4b:16:bc:
14:28:20:b5:b5:25:05:90:a4:36:66:79:ca:26:5c:
eb:c9:cf:c1:b6:33:de:8b:c5:4d:a3:0f:b0:91:5f:
2f:f1:36:66:cf:e6:89:af:49:0d:ed:cd:a1:7f:65:
c9:bd:e0:86:bd:e9:53:13:31:7e:6b:5c:33:89:93:
98:35:fd:4a:3d:13:4f:a6:56:18:4e:d9:1d:33:83:
9d:5a:d6:30:81:c8:9b:72:50:d9:0e:e5:a6:1e:37:
1c:f7:64:b2:1a:31:61:f9:5a:8f:02:55:2e:91:f6:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:30:F7:C9:B5:86:2D:47:8D:DA:4F:D8:E8:E3:7D:3F:23:A4:F7:BC
X509v3 Authority Key Identifier:
keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:14:7a:25:e6:f9:72:bd:bb:0c:68:b4:6a:68:7f:04:85:6e:
73:56:f1:32:2e:ee:5b:01:ac:b2:af:26:2a:68:7c:e0:67:f9:
92:ce:15:2b:1b:70:ee:97:23:32:0a:5e:5c:89:e7:22:db:04:
6a:76:ff:10:31:1d:2b:48:fb:9d:a1:a7:90:2a:60:00:9f:59:
06:2b:97:2b:f7:ca:5a:30:f8:c9:e3:f6:fb:74:24:19:16:ae:
48:8f:51:8b:ed:fc:59:8b:2a:2c:46:3a:27:3f:c7:9d:3c:7e:
65:e2:af:81:32:30:d3:72:06:b9:5b:2e:d1:85:83:fe:07:8d:
4f:dc:6f:9d:9f:cb:19:9c:ec:a6:d1:43:e3:e0:f4:87:4d:6e:
82:33:27:d1:77:5f:2f:e9:f3:6d:83:99:4e:35:b5:1a:52:e2:
8a:f0:80:f9:9d:be:04:cc:c9:6a:7a:4f:39:ce:a7:8b:ab:f4:
0b:10:16:d9:7f:92:c0:9c:94:e3:41:16:f5:1a:85:9e:6d:6c:
71:d1:d1:60:0f:33:bf:1d:ff:5b:1f:63:06:77:5f:04:e6:d8:
0c:c0:4f:8a:45:f5:df:f7:bd:74:b4:da:c2:bd:95:2e:08:94:
de:00:0d:86:93:ff:58:7b:76:c8:19:9a:a9:63:b3:06:e9:56:
2e:90:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:37 2026 by rpki-client