
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json)
Hash identifier: dXq3TQDwTfxVU4L94PYCvqQrsbL30QjaxZ8lHv2PtpE=
Subject key identifier: CE:D8:59:DF:E8:45:E5:1A:15:21:2C:AD:D6:EF:E6:0A:E6:F0:09:BF
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial: 0620
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
Manifest number: 060A
Signing time: Thu 16 Jul 2026 23:23:50 +0000
Manifest this update: Thu 16 Jul 2026 23:23:49 +0000
Manifest next update: Thu 23 Jul 2026 23:23:49 +0000
Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: nJj17e1ZYSCChccSJgzBnxi3dY4uCNS0xY0Y6gysoH0=)
2: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: dU7VVF3QG8CRfa6WG2OEmnhKj0juHLcrGojTpDvzWz4=)
3: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: rObNodnl4kiW2HwSgTl4V+2eGCn624eHu1NbbTBXI6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Validity
Not Before: Jul 16 23:23:49 2026 GMT
Not After : Jul 23 23:23:49 2026 GMT
Subject: CN=6a596805-6f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:1e:59:32:be:3c:ab:73:1e:83:f1:3d:c5:
72:a3:00:9e:3a:a9:8c:24:49:17:d8:f7:df:65:59:
c4:c0:ba:ca:15:10:1d:c6:fd:03:48:32:a1:4a:1f:
ca:a9:9a:49:77:bd:d5:7b:c5:40:3c:e9:86:6a:e6:
ce:ab:62:6e:28:ae:0a:73:b1:e5:27:f7:78:b1:78:
f4:dd:b5:c2:29:3c:5f:c6:39:3f:c1:1c:5e:f2:da:
7d:3c:2e:40:fd:51:d9:03:3f:4a:e0:95:90:e8:72:
c7:d0:d6:e3:b9:60:f6:73:5d:0c:24:5b:0f:23:ba:
00:88:4d:ac:76:1b:48:09:8f:55:b4:8b:74:21:fd:
92:52:da:2a:a1:26:ab:48:a7:48:0f:3a:03:cc:93:
4b:46:e5:ba:1b:1c:32:35:6d:80:50:e1:26:93:d2:
4d:b0:37:08:64:b5:cf:57:f9:7b:dc:a4:54:b0:d2:
06:1d:1a:e0:84:e3:92:d0:7e:86:fd:d5:8b:26:d3:
27:ed:1b:d1:f3:55:73:8b:35:67:ae:47:2a:9c:55:
d5:53:7f:07:2c:2e:32:9d:69:db:6b:93:70:4e:b2:
7c:98:7b:76:f9:8c:59:e2:e3:36:a7:ee:29:c6:2f:
9a:89:79:23:58:c2:4b:e7:0c:39:38:54:e8:b8:f3:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:59:DF:E8:45:E5:1A:15:21:2C:AD:D6:EF:E6:0A:E6:F0:09:BF
X509v3 Authority Key Identifier:
keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:0a:ac:d1:53:79:69:e1:c4:72:53:b4:22:b7:ed:5e:f3:81:
a7:a9:9e:25:6e:e5:41:71:da:36:ef:68:ec:56:a6:24:70:1d:
4f:5b:44:f3:99:bc:1c:a4:f3:f9:43:59:3a:2c:97:e9:66:4a:
5d:f3:65:7b:f2:4c:a6:3d:65:d3:ee:1c:43:92:da:de:f4:43:
38:2b:ed:1d:03:95:f0:21:46:61:d8:d1:23:74:9d:d9:17:1d:
82:78:82:65:e3:a8:38:b3:00:d1:e1:ac:a1:65:0b:b0:9e:00:
35:24:54:fd:72:71:df:40:b5:70:a4:90:be:25:27:71:92:b1:
6c:c5:ae:c9:97:d0:0c:73:6b:de:6c:28:1b:f0:62:84:a4:bb:
69:cb:8e:cf:ef:59:7d:e7:3d:39:02:93:96:d0:66:ad:0c:be:
62:59:3e:9e:6f:e5:0d:a1:db:6f:16:c4:1b:e5:06:89:4f:70:
f9:b9:6a:6e:d1:95:d2:f5:42:1f:8d:22:d7:32:38:44:d8:5d:
82:32:1e:9c:fd:56:d4:80:ac:12:65:72:8e:2b:cc:ef:0d:4e:
f3:8d:66:17:40:36:ed:cf:3b:ee:51:2a:77:42:16:58:82:35:
3c:6d:62:8b:13:3a:7d:c9:5b:8f:24:eb:f0:8c:1c:2d:f8:d9:
ee:0d:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:20:29 2026 by rpki-client