
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
File: 1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json)
Hash identifier: BjVl8j+3toAKvvYTd9MK+Hwyyv0+oCWjEJz0iHm+qa4=
Subject key identifier: C3:36:54:B1:B1:79:AF:7E:11:05:C7:D7:34:B0:BE:81:E2:D5:E6:4A
Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
Manifest number: 66
Signing time: Sun 05 Apr 2026 07:19:56 +0000
Manifest this update: Sun 05 Apr 2026 07:19:55 +0000
Manifest next update: Sun 12 Apr 2026 07:19:55 +0000
Files and hashes: 1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: I33Bn3HdPi79oPvYcvJqmNR1Zkfs3EekbCSQKSbuHU8=)
2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Pc2Gm0El6C7yNRFdvtcnQRtp9swqk0Qn5OUm8Fjkbqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Validity
Not Before: Apr 5 07:19:55 2026 GMT
Not After : Apr 12 07:19:55 2026 GMT
Subject: CN=69d20d1c-0ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:9c:92:3e:24:55:09:c9:3e:20:e2:d2:ca:
66:ce:b4:da:fd:e2:9d:e0:65:9c:cc:3c:81:31:5a:
2e:5b:64:7e:13:a0:c7:65:37:9a:22:39:38:4b:4c:
18:7b:a7:2d:dc:cc:30:8d:4a:42:ad:75:86:e9:b9:
4e:32:b1:f1:55:64:a6:2c:81:ea:a4:63:18:a8:a8:
fa:6e:f3:5b:47:b0:d4:ca:62:e1:42:58:e5:d2:f9:
a3:88:23:eb:fb:34:46:81:7c:28:52:a7:70:34:8e:
0e:99:ed:8b:4b:62:7f:a5:81:a6:7f:c0:c9:a1:1a:
8e:82:75:90:fa:78:f8:eb:93:83:7e:6f:51:34:bc:
37:43:aa:73:46:0e:97:2f:87:1e:dd:68:40:c9:03:
8b:7d:43:03:81:5e:dc:eb:d0:cc:f8:af:41:75:d6:
18:de:7e:16:c3:cc:d7:f5:bd:9c:1a:aa:5a:b2:c9:
12:20:54:12:3b:c4:ba:c9:47:6f:46:0f:5f:cb:d2:
c1:83:83:4c:56:38:d7:93:3c:64:12:5a:d8:e8:c4:
f2:80:9c:d7:12:e7:23:2a:cd:b5:f6:85:64:08:98:
61:ce:17:67:89:e2:46:f1:d5:13:53:1d:b1:5f:f0:
1b:7e:90:7d:3b:b0:2c:0a:ed:bc:2e:77:f7:30:cf:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:54:B1:B1:79:AF:7E:11:05:C7:D7:34:B0:BE:81:E2:D5:E6:4A
X509v3 Authority Key Identifier:
keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:ef:b0:9e:50:d0:52:40:2c:a0:12:de:2c:23:87:93:f6:
0b:b8:46:b8:7a:3f:dc:a9:b4:da:fb:02:0c:f6:a3:8a:36:0b:
d1:8d:62:0d:35:d1:91:1c:06:48:10:a3:f7:b6:58:99:de:a6:
66:bc:3f:13:46:2e:67:51:62:c5:19:ee:c7:f1:c3:b6:c7:08:
ba:1b:fa:95:7d:c8:ad:7e:69:7c:23:e1:fe:0d:13:26:71:60:
dc:8d:19:ec:f0:4a:da:8a:36:24:8b:00:a8:2a:f8:1d:73:03:
fa:80:93:aa:11:62:e9:2f:58:b9:97:60:e2:56:19:34:70:6e:
17:57:bd:c4:11:b3:3b:84:bc:c0:1b:1c:e1:1f:23:d9:58:e3:
6d:82:5d:68:d9:9c:0f:2e:94:ab:cd:e7:8d:e2:b4:e3:1f:20:
06:0b:8c:9a:df:98:10:f0:00:02:5d:be:7d:66:72:4b:f0:39:
68:ec:76:5c:44:a7:b6:83:3c:18:76:f1:02:44:d7:77:40:0a:
66:6b:3c:6a:ce:4f:87:c0:71:a8:d9:26:ef:1a:c2:3c:4a:91:
ac:c5:5d:79:ae:19:c5:dc:50:0e:a1:9f:43:73:f9:bd:6c:f1:
8b:4d:4a:be:72:2b:27:10:ee:c8:0a:3c:aa:38:e4:46:93:68:
d4:a6:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:07 2026 by rpki-client