
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier: uh5xNSvS2SfRDMX7MYYeLU9AA6AvggLHqNRxTDtQvFY=
Subject key identifier: 1B:CE:88:FE:5E:87:00:C4:E5:BA:63:84:DE:0A:50:8F:36:8E:A5:F8
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number: 0137
Signing time: Sun 05 Apr 2026 04:58:00 +0000
Manifest this update: Sun 05 Apr 2026 04:57:59 +0000
Manifest next update: Sun 12 Apr 2026 04:57:59 +0000
Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: 7qd2F5p21B1PAmPZGqrY/dMGvXDYnU2UeC6DntIsrmw=)
2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Validity
Not Before: Apr 5 04:57:59 2026 GMT
Not After : Apr 12 04:57:59 2026 GMT
Subject: CN=69d1ebd7-c427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:0b:37:2d:2f:47:cf:9b:58:96:9b:4a:d3:
76:dd:a0:08:17:99:ad:22:6f:65:ee:ac:0d:21:28:
b0:e3:23:15:9b:c0:13:f4:d5:da:22:09:48:64:98:
22:ff:ac:72:88:54:c1:7e:6c:31:61:06:ab:de:7f:
6d:22:d0:c7:28:39:b2:d7:96:89:c8:3e:2c:6a:e4:
65:d6:c0:e9:bc:b0:10:43:ed:a9:91:2f:b4:7f:11:
db:13:70:12:63:45:a1:80:0e:7c:e1:f6:63:8a:1c:
ca:34:e4:2c:13:f3:e8:75:55:f7:b1:f6:74:b3:6c:
2e:0b:3d:f9:35:ba:10:77:ea:be:94:f5:98:10:cb:
01:1f:22:1c:65:78:91:35:c5:b2:ac:4b:69:2a:72:
0e:46:db:6c:1c:72:85:3e:8a:51:c2:1d:97:00:de:
60:e3:14:04:54:2f:01:a5:65:80:c6:a5:67:dd:a4:
1d:56:13:a3:1b:15:fe:8e:78:b9:0c:29:85:ff:d2:
46:15:5e:a2:e8:12:00:d4:08:5e:4f:14:42:b2:98:
9e:c1:1b:2d:e5:33:78:92:dd:8b:50:39:49:91:88:
d2:7b:57:23:7f:94:f5:42:0e:84:7c:6d:60:88:81:
65:b0:fb:59:61:6d:f0:c6:1d:14:2b:b2:4e:e8:c9:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:88:FE:5E:87:00:C4:E5:BA:63:84:DE:0A:50:8F:36:8E:A5:F8
X509v3 Authority Key Identifier:
keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ee:02:d0:6e:0e:d5:48:a5:7e:f0:71:19:a2:02:79:6c:2f:
9d:7b:57:26:46:83:da:03:53:04:10:5c:7c:b8:de:53:30:6a:
70:a3:57:ad:3e:f6:49:5c:b0:7d:7c:a6:c0:1e:f9:09:58:02:
5f:82:d9:7c:db:cb:64:38:20:13:cf:f9:5c:41:71:fe:8e:ad:
1e:cc:40:6f:94:0f:27:6f:c1:67:66:e3:cd:21:7b:ce:c5:fa:
14:c7:45:77:32:c5:ce:2e:1c:6b:24:16:87:79:32:11:42:8a:
4a:91:b3:6c:79:f5:f7:00:2f:73:f8:ff:32:27:95:2d:0f:2b:
e9:c2:7c:97:3d:55:cb:1b:0a:b5:82:67:e4:3c:af:43:32:32:
8f:da:bc:5a:65:89:cd:a9:35:b6:82:41:76:c3:94:27:15:01:
3b:c2:2b:6f:17:c2:26:61:2e:eb:72:e7:9d:e0:15:8e:9b:bb:
cf:c4:dc:2a:90:74:81:08:ec:f4:29:e6:31:33:23:d2:8a:2e:
dd:96:4b:fa:9a:18:e9:7a:62:47:c4:da:e3:29:77:5c:1e:b9:
67:0b:fa:86:f5:cf:63:44:c1:26:3c:9d:bb:73:7f:2f:7a:39:
2a:c9:29:50:ac:85:cb:79:45:fb:a0:4b:c7:f7:34:9e:50:17:
ba:35:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:02 2026 by rpki-client