
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
File: kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json)
Hash identifier: DZavQx/xIRgmah/Q1GQulvQrNDfZA39pMvZ6iGHOF/I=
Subject key identifier: 8C:AE:49:EE:B0:A8:6D:B9:C5:6D:87:EF:17:0A:B6:D0:0D:6D:0E:B1
Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
Certificate issuer: /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
Manifest number: 018E
Signing time: Tue 21 Jul 2026 05:52:10 +0000
Manifest this update: Tue 21 Jul 2026 05:52:10 +0000
Manifest next update: Tue 28 Jul 2026 05:52:10 +0000
Files and hashes: 1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: hE6Au3wmBQTKMf1+DYpcYMzXoDuUI652MAEu4jSM/Lo=)
2: CCAF2918109411F186362BB2353D8C67.roa (hash: Upvyy2jPvhhD/OdsNESStZNIXsW/r3KlLDVUrD02B1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 05:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Validity
Not Before: Jul 21 05:52:10 2026 GMT
Not After : Jul 28 05:52:10 2026 GMT
Subject: CN=6a5f090a-9311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:b7:70:0f:40:4b:dd:78:fe:bc:6d:e6:39:
3b:f5:c7:fb:99:a0:23:79:dd:8c:c5:78:bc:fd:14:
78:2f:c1:bb:e0:30:96:93:8d:c9:84:05:4d:23:ca:
bc:63:4d:7d:ba:76:68:8a:d8:af:1f:16:d4:be:15:
3d:c5:17:6f:47:d3:ce:7d:29:24:32:97:85:e1:11:
e7:ac:6c:bb:92:35:f5:8a:ed:d8:6b:16:08:7c:69:
8d:bc:fb:e2:d3:db:e1:80:90:38:6c:c3:28:6a:9a:
37:fd:fc:65:5a:ad:7b:a4:22:ac:b6:dd:d4:f3:c0:
2e:b0:6f:9d:04:4d:cc:50:99:a2:a0:8d:6c:b7:6e:
0d:ca:ef:26:53:67:78:38:ad:8f:c5:83:76:4d:44:
f5:86:fc:a5:11:ce:6a:45:0a:bb:5f:bf:29:8a:0f:
f3:e8:6c:05:22:62:12:d2:82:32:fa:6b:d9:be:f3:
ee:f2:cf:d2:d9:aa:27:dd:7d:3c:f4:9e:13:2b:bd:
58:62:93:3f:2b:2c:52:d1:48:7b:22:76:71:8a:0e:
bd:88:a8:6b:cd:b7:3f:ab:e9:7c:20:6a:56:ae:69:
a1:be:81:d8:82:6b:19:fa:1d:e9:69:33:2f:0e:ab:
dc:ce:04:d4:fb:e4:2b:0b:69:5e:82:52:c3:f8:e7:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:49:EE:B0:A8:6D:B9:C5:6D:87:EF:17:0A:B6:D0:0D:6D:0E:B1
X509v3 Authority Key Identifier:
keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:e5:a8:d9:ef:34:77:f3:51:20:a8:89:5c:20:75:e1:4b:
6b:6d:19:23:05:c1:3a:1f:6f:89:ef:cb:49:4c:bf:c6:e9:6f:
81:ca:17:dd:80:37:2f:2f:2d:a7:79:f1:ad:0e:5e:77:29:5b:
ba:a8:2d:f1:55:57:3e:8a:a3:7e:a2:3a:9d:2d:e8:83:9d:37:
bc:05:9d:d7:20:d1:d7:05:8e:dd:bb:a2:3c:f0:88:bf:df:67:
cf:1b:fc:21:d5:11:de:a4:f1:8d:4e:2c:9e:06:f2:00:8f:19:
03:ae:d2:41:aa:56:e7:e6:16:77:85:99:3e:44:e5:b9:a0:be:
92:e1:5f:6b:21:76:70:35:a5:fb:27:fb:c8:08:c1:66:58:be:
25:e9:ed:73:66:55:5f:ef:7f:be:bd:22:8b:a6:d0:c0:d3:b6:
fd:d3:cb:79:b7:06:a0:20:81:cf:dc:d5:9d:3d:59:34:23:e5:
60:a4:1f:5e:11:cd:72:16:dc:e4:5a:a8:74:50:68:77:a1:67:
d0:cc:72:77:72:05:dd:66:98:80:7d:c0:c1:d7:e6:6e:4a:79:
18:81:9e:39:f9:85:09:47:7a:44:67:4d:8f:be:e8:50:b6:1e:
5d:3c:bb:28:e9:64:c0:f8:f3:99:1b:38:61:f6:2e:1d:9a:4c:
a3:fd:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:17:13 2026 by rpki-client