
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json)
Hash identifier: ScY7W0EM9O09dZ/JpNeummHYDB7mjg/tQhAbstpr3EM=
Subject key identifier: 7B:A0:6C:FC:25:F2:D9:2D:EB:53:F1:71:01:E3:C8:07:8A:CE:90:11
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial: 0EBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
Manifest number: 0EB4
Signing time: Sat 04 Apr 2026 17:33:50 +0000
Manifest this update: Sat 04 Apr 2026 17:33:49 +0000
Manifest next update: Sat 11 Apr 2026 17:33:49 +0000
Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: YPczHbKEWpGOuGNP/jzi85pl7s4XlDIG6Xv5Ma2OSrY=)
2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NuBjYFXj77aFswBTlKejqdXl3N0GVz1YYukL9sl8zI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3774 (0xebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Validity
Not Before: Apr 4 17:33:49 2026 GMT
Not After : Apr 11 17:33:49 2026 GMT
Subject: CN=69d14b7d-db6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:b4:14:f2:48:32:06:fd:cc:b0:ac:a9:42:
d7:9a:ec:56:0b:1a:e0:34:7b:1a:ab:19:9b:bd:eb:
71:31:ea:f5:60:bc:70:c1:20:d5:bb:d6:3c:a8:f4:
85:a6:91:f9:57:6b:19:73:bd:b6:a9:9b:a7:f9:bf:
57:a3:0a:f3:66:1b:7f:59:84:bd:b4:8c:41:67:d9:
95:cc:cb:43:60:57:ab:b2:08:bd:b5:e4:e9:4b:98:
65:70:b5:03:4c:23:08:07:86:ed:8d:fd:63:b3:a9:
ae:d8:01:e4:2f:ff:5e:73:85:f0:1a:03:66:94:fb:
e7:f8:d9:52:7d:b0:5c:ac:20:5d:e6:df:03:18:75:
fc:ed:f6:10:01:bd:66:df:09:2f:23:8f:05:3d:cc:
49:83:86:46:65:94:5b:8b:37:de:1b:61:9a:eb:f5:
43:69:ba:db:cc:a3:1a:fd:14:fc:fa:67:1a:ce:32:
34:cd:80:af:71:28:b2:aa:bf:c2:86:a5:cb:f3:55:
3d:60:83:ed:80:d5:79:f3:eb:52:70:05:2b:a8:bf:
69:bf:c8:4a:5c:0a:e9:16:53:90:41:39:a6:8c:28:
ff:38:f8:5c:83:26:0b:65:80:84:70:dd:29:12:40:
f4:30:66:cd:82:60:83:0f:b0:e3:a5:4b:e2:c6:1c:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A0:6C:FC:25:F2:D9:2D:EB:53:F1:71:01:E3:C8:07:8A:CE:90:11
X509v3 Authority Key Identifier:
keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:85:89:07:19:2e:98:1a:01:dc:e4:39:25:58:77:cb:ea:7a:
ed:3f:6d:fe:3e:37:48:e6:ae:79:c2:f8:bf:96:7b:2f:aa:a5:
9a:fc:84:3d:7d:c5:49:fe:db:f3:28:d4:bf:f2:3f:62:71:c2:
06:18:8b:dc:fd:7b:52:93:21:79:7a:d0:1d:4f:66:d8:96:04:
d1:b0:94:dd:40:87:50:df:4e:5b:d8:1c:7a:3b:9a:d3:b3:5c:
04:a4:a3:25:5d:5e:64:e5:4e:90:4f:6f:39:42:b8:25:5a:3d:
e0:67:e4:e6:18:32:88:52:ad:23:23:7c:30:3b:34:c4:2a:cf:
a7:ae:0a:ef:a2:19:7b:78:ae:f3:44:87:17:97:c0:c3:c5:d5:
09:91:42:1d:7b:41:66:e0:88:19:60:9c:41:59:7e:d7:c7:75:
22:f5:2a:ec:ee:b2:23:76:46:18:4f:49:fa:99:b5:5b:14:e8:
c3:8b:ce:57:76:95:fb:46:cc:c2:2b:b2:de:a6:a5:1b:9c:b1:
3f:d0:ee:fa:f1:ba:00:2b:7f:1d:6d:aa:95:fb:a6:d6:a4:9c:
85:64:69:35:c0:89:49:1d:34:ab:cf:88:2c:d6:db:80:aa:3d:
21:a9:ab:fd:cc:14:5e:26:06:59:2f:3b:76:bc:4e:06:e7:47:
de:dd:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:18 2026 by rpki-client