
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier: 9r+c/XRYxxuY66CXn/EeTT73d/cTCqLNFMEBpvPJDJo=
Subject key identifier: C5:A3:27:62:CC:F4:51:CD:F0:2E:22:94:EA:D1:91:54:42:B4:F6:F6
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number: 01CD
Signing time: Tue 21 Jul 2026 05:06:18 +0000
Manifest this update: Tue 21 Jul 2026 05:06:17 +0000
Manifest next update: Tue 28 Jul 2026 05:06:17 +0000
Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: GrmngBwpmxHG+3F7FD7Djobe0edE1b421zEZQdHl8+c=)
2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: lo4efARTvEcP2ve6/ixSUWQB1NQ99xWjC1uzkkmYqbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Validity
Not Before: Jul 21 05:06:17 2026 GMT
Not After : Jul 28 05:06:17 2026 GMT
Subject: CN=6a5efe4a-68e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:dd:fc:32:d5:a7:a8:21:3c:42:87:5f:11:
e8:6b:03:c3:65:49:85:5c:be:c8:4d:ac:f2:98:40:
3e:2f:91:28:fc:82:52:c0:31:34:e5:84:0f:5e:4c:
bd:1a:be:27:d6:ae:61:72:e9:09:ee:86:fd:83:d0:
1c:59:5d:89:15:49:0e:e6:f2:c1:14:16:a7:44:bb:
08:43:31:09:43:e3:70:15:6d:2e:24:24:92:11:31:
8e:ee:ec:4a:eb:fe:5e:a3:d0:89:77:ab:e7:f5:d1:
99:02:1d:78:11:98:83:a7:90:bb:25:a6:84:5a:d4:
08:6d:92:16:91:89:ba:77:19:a5:ec:8d:a0:bd:34:
7e:e6:c1:28:f7:66:72:d0:11:ad:42:54:d4:2f:f2:
92:49:f9:db:99:58:b9:61:b8:c6:31:0f:11:e8:22:
88:12:66:94:2a:f7:c4:58:2c:cc:be:10:ae:b6:f2:
f4:a4:71:d4:26:ad:b5:8f:9f:ab:7f:7b:25:51:8f:
57:0a:75:3d:6a:d0:6f:6a:31:90:55:50:2b:ff:ab:
0d:4b:51:2c:d2:f9:b4:b5:96:73:d1:da:97:92:3f:
c1:ca:43:53:68:f8:f7:2c:ab:b3:b6:7b:fe:eb:40:
d4:20:c4:c4:b4:f9:4f:8c:fc:45:86:4b:ed:a7:e0:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:27:62:CC:F4:51:CD:F0:2E:22:94:EA:D1:91:54:42:B4:F6:F6
X509v3 Authority Key Identifier:
keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:04:a3:2f:aa:1c:34:d6:aa:e0:a6:21:02:b3:f1:3b:35:
a2:9b:be:3e:f8:31:c6:42:ec:fc:68:fd:a7:a2:81:e8:a7:24:
3d:aa:03:45:52:e2:67:47:f2:d0:ce:f8:77:a6:f8:33:21:5e:
ef:6a:32:77:cc:f5:32:6c:84:29:63:f0:60:9c:c3:53:68:95:
7c:c3:0d:20:fb:9a:87:03:14:57:0d:77:0a:ab:62:1b:17:c4:
48:0a:c7:e8:3d:a9:44:20:14:3c:8e:62:cf:1d:75:60:58:fa:
5c:9f:72:c6:7d:b2:07:f4:92:38:e1:ed:58:6b:86:26:1a:9a:
44:f4:98:6a:51:7d:dd:0e:fc:37:00:7e:a7:e9:6c:10:2a:de:
42:2e:2d:ae:4f:75:29:6a:af:9f:51:3a:fc:91:7d:60:56:b5:
a7:3e:51:00:ec:ee:85:ac:60:6a:bf:05:63:9b:d8:5d:db:e0:
6f:6a:75:94:e6:3e:a5:a4:e9:07:65:c5:22:08:61:96:52:9a:
6c:79:21:ac:65:b3:ca:33:5c:20:f0:ca:46:50:de:bd:46:d1:
57:fd:22:28:ec:38:3d:27:31:6c:92:6b:e6:49:21:33:59:4b:
e1:78:89:0b:88:a3:4c:1e:bd:d0:15:cf:94:01:93:7f:ed:2d:
70:29:77:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5
MjNBQTc1QzcwHhcNMjYwNzIxMDUwNjE3WhcNMjYwNzI4MDUwNjE3WjAYMRYwFAYD
VQQDEw02YTVlZmU0YS02OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZ7d/DLVp6ghPEKHXxHoawPDZUmFXL7ITazymEA+L5Eo/IJSwDE05YQPXky9
Gr4n1q5hcukJ7ob9g9AcWV2JFUkO5vLBFBanRLsIQzEJQ+NwFW0uJCSSETGO7uxK
6/5eo9CJd6vn9dGZAh14EZiDp5C7JaaEWtQIbZIWkYm6dxml7I2gvTR+5sEo92Zy
0BGtQlTUL/KSSfnbmVi5YbjGMQ8R6CKIEmaUKvfEWCzMvhCutvL0pHHUJq21j5+r
f3slUY9XCnU9atBvajGQVVAr/6sNS1Es0vm0tZZz0dqXkj/BykNTaPj3LKuztnv+
60DUIMTEtPlPjPxFhkvtp+CRIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWjJ2LM
9FHN8C4ilOrRkVRCtPb2MB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1
NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6
ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIeoEoy+qHDTWquCmIQKz8Ts1opu+PvgxxkLs/Gj9p6KB6KckPaoDRVLiZ0fy
0M74d6b4MyFe72oyd8z1MmyEKWPwYJzDU2iVfMMNIPuahwMUVw13CqtiGxfESArH
6D2pRCAUPI5izx11YFj6XJ9yxn2yB/SSOOHtWGuGJhqaRPSYalF93Q78NwB+p+ls
ECreQi4trk91KWqvn1E6/JF9YFa1pz5RAOzuhaxgar8FY5vYXdvgb2p1lOY+paTp
B2XFIghhllKabHkhrGWzyjNcIPDKRlDevUbRV/0iKOw4PScxbJJr5kkhM1lL4XiJ
C4ijTB690BXPlAGTf+0tcCl3fA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:54 2026 by rpki-client