
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
File: KUr5pNDtlrY5KVxYc9z-KJ8no20.mft (raw, json)
Hash identifier: 0vN7hu3SjJDlZynKP/6MVG5fqfnwqQa27MJQkLIiloE=
Subject key identifier: 75:1F:22:47:58:FC:33:16:31:79:7C:7D:2B:96:0B:D1:03:0B:13:7A
Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
Certificate issuer: /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
Manifest number: 5A
Signing time: Sun 11 Oct 2026 08:47:53 +0000
Manifest this update: Sun 11 Oct 2026 08:47:53 +0000
Manifest next update: Sun 18 Oct 2026 08:47:53 +0000
Files and hashes: 1: KUr5pNDtlrY5KVxYc9z-KJ8no20.crl (hash: hJHEEyVqoEnRPvJOQNbe84wfJDoYbju+jwL0UAi70l4=)
2: 80748E243E2C11F19772AA47B7833773.roa (hash: dDD9Ne2VF73KrNd/l166hkPzmv6wE6K5s6s/cWNJHfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 07:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Validity
Not Before: Oct 11 08:47:53 2026 GMT
Not After : Oct 18 08:47:53 2026 GMT
Subject: CN=6acb4d39-3666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:b2:36:71:2f:90:47:22:1e:c1:0d:ec:94:
aa:c1:4b:03:31:41:fe:35:24:f2:39:10:17:9a:d5:
7a:55:4c:21:c9:b7:5a:e1:2c:c7:a5:91:17:6c:92:
f1:db:c0:bb:0a:7a:1f:1f:a4:7a:fd:21:19:69:7e:
91:99:f3:5b:bf:a6:b5:50:b0:27:9e:87:6a:33:d3:
18:2f:e1:21:3a:1b:07:a4:ac:35:f3:d3:43:46:69:
e4:d3:85:ff:44:c8:ca:34:e9:56:24:8a:5a:57:c6:
c2:45:ff:29:32:c0:fd:9d:7a:c2:e8:fa:ac:36:de:
98:05:b0:ad:e5:23:ba:d9:a6:25:67:6e:a8:a8:f2:
1e:5c:97:8c:22:14:d0:ca:a4:41:f0:a6:e0:67:81:
e6:64:a1:bc:43:ac:2e:6d:59:49:1b:99:ab:eb:31:
dc:cb:51:1d:8a:70:91:32:16:55:fc:73:34:53:f2:
ff:d4:e2:3d:c5:be:30:ce:68:08:b0:f2:9b:5d:96:
f1:b3:f8:39:58:62:23:86:f5:80:60:ef:b2:3e:10:
2c:32:d3:84:67:22:33:43:a0:2f:f3:27:68:dc:88:
8c:b4:ef:3b:b9:23:6f:c0:2e:2f:d3:62:c3:fa:b2:
f7:81:24:fa:83:a3:9d:0e:e0:31:79:ff:77:4b:00:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:22:47:58:FC:33:16:31:79:7C:7D:2B:96:0B:D1:03:0B:13:7A
X509v3 Authority Key Identifier:
keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d3:04:ca:2f:9a:83:7d:29:08:71:27:6e:8b:b3:e8:9b:d9:
a5:eb:4b:a7:48:2f:8f:98:8f:fe:86:80:62:6f:39:1d:70:3c:
ac:bc:45:8d:c4:88:3f:bd:f9:7d:f0:f3:e4:6a:b4:f2:d7:07:
43:68:f3:da:70:fe:43:ef:5a:39:15:b8:8d:69:97:3b:b9:cf:
31:7d:6e:3f:4f:5b:f1:30:9f:a3:67:94:3c:25:44:27:0c:bd:
b9:af:df:ed:54:4c:25:f3:a7:d3:98:30:fe:3a:a3:7e:1f:02:
20:c4:0e:37:6d:9d:88:7c:d3:bf:55:28:b1:d2:15:28:79:d1:
1c:df:66:38:34:71:83:be:54:51:31:45:23:df:a4:57:22:a7:
f7:65:0d:42:b9:aa:06:84:ef:80:00:82:a2:0a:75:46:f0:d2:
f1:ce:a3:27:ce:fa:4d:19:32:32:fa:b2:1f:ba:9f:f3:ec:67:
2f:41:a8:ab:60:66:8b:40:03:88:11:98:74:43:ea:da:28:21:
59:a1:14:06:03:17:59:81:4d:d8:13:91:50:f6:4c:9e:9b:41:
5b:d4:78:83:81:3f:6b:4d:18:b0:8e:a6:58:eb:d7:02:69:df:
74:42:8c:06:19:1c:a1:92:a5:7d:07:9c:6c:e7:34:2c:b1:52:
b2:e5:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:49:52 2026 by rpki-client