
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
File: Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json)
Hash identifier: 3G2gk5KwuKLTSm5oGrov1fwC8FCwzSekrF8eSNddcns=
Subject key identifier: 4C:D2:EA:A1:B0:18:8E:09:C5:F7:8A:97:AF:A6:E7:A6:43:0E:5E:08
Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
Manifest number: 017C
Signing time: Sat 03 Oct 2026 05:25:12 +0000
Manifest this update: Sat 03 Oct 2026 05:25:11 +0000
Manifest next update: Sat 10 Oct 2026 05:25:11 +0000
Files and hashes: 1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: GBTXR2AA55drY+U5kjZT0wUTFqIs4H3xQKur8rMzx7M=)
2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: MRSyunFuZV1S3WfmC+o5wAwU5vJtDQmtS6IHzeBNXmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Validity
Not Before: Oct 3 05:25:11 2026 GMT
Not After : Oct 10 05:25:11 2026 GMT
Subject: CN=6ac091b7-7bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:de:ce:7f:05:a8:cc:5a:d4:04:b2:b3:01:
6b:80:92:0d:5d:af:a2:e2:bf:64:5c:8e:1c:1a:3b:
f1:67:76:fb:9c:6a:0e:cc:c2:92:9a:08:cb:c9:86:
9c:af:f8:94:bf:af:e5:07:91:4f:3f:80:ea:b3:bd:
86:29:80:34:b0:bc:0a:1e:c1:80:9c:78:a4:ea:da:
2f:b7:a9:6f:82:90:9e:95:83:34:50:73:2f:3b:56:
61:6a:dc:1d:18:03:90:4a:18:1f:5d:2e:88:cf:0d:
7f:71:7a:94:86:bf:28:62:4d:c7:68:c1:a8:2e:d2:
62:60:1a:7f:b1:0d:91:5f:74:fd:fc:22:f1:34:99:
ac:a3:78:9b:8b:a6:90:92:66:3f:a7:e7:65:83:69:
d9:65:32:b1:74:c7:12:57:0c:13:37:f2:ad:3e:5c:
75:dc:16:81:46:56:b2:e4:5b:46:52:78:8c:65:ea:
58:46:24:4b:c7:2b:0f:0b:73:f3:d2:10:45:0b:fb:
50:a8:dc:b6:96:85:a1:7b:69:c3:c2:de:77:01:5e:
a6:23:25:c5:b0:62:db:b6:10:94:f7:bb:d5:a4:7f:
7f:3c:a8:00:6f:fb:7a:77:2c:e9:21:77:37:94:71:
34:63:62:79:91:2c:89:b6:58:85:67:14:4b:ac:ca:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:EA:A1:B0:18:8E:09:C5:F7:8A:97:AF:A6:E7:A6:43:0E:5E:08
X509v3 Authority Key Identifier:
keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:2c:2e:9c:b1:9e:fd:5e:74:f8:1f:e9:0f:e9:94:7a:6b:
fe:37:32:81:62:19:94:78:33:1f:0f:05:1f:8c:cf:17:42:bc:
9f:dd:01:2a:ed:3f:45:f6:91:f2:f9:8a:0e:2c:98:60:62:71:
a5:46:fd:1c:09:7e:2b:6f:c9:24:99:e0:bc:a3:ba:ef:9d:87:
6d:0b:00:86:78:d8:db:55:90:6e:86:9e:06:51:63:24:75:5f:
82:c5:52:7f:13:5a:09:26:86:46:68:e4:40:49:02:e4:36:f3:
e9:f8:37:18:b1:03:f9:6f:5c:b7:9b:ae:b8:9c:83:10:ea:c8:
b7:0e:76:f7:dc:fc:a8:05:5b:a9:13:cd:39:63:9b:bd:d5:6f:
2c:27:e8:15:15:58:11:c5:69:70:33:a6:8a:0e:4e:52:d5:f7:
ca:02:2c:dc:02:c8:ff:6d:ac:33:1f:d8:3f:53:3d:7e:41:28:
19:5f:46:e5:d8:68:56:c9:90:2c:bb:a9:69:14:83:2d:73:0c:
f3:3e:f4:da:71:07:b9:e7:ab:33:4d:4b:28:39:3f:de:72:87:
d0:c1:c6:41:f9:b9:b5:8e:1b:ef:16:18:c9:8c:a7:2c:1e:1e:
e7:f7:f7:3a:51:13:12:bb:81:9e:a6:31:96:d3:d7:e1:b1:a1:
06:fd:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:21:37 2026 by rpki-client