
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: x52DZ87XIw8D47wQ4LDm7tWWORm0kR1ae1GQCjJRL/I=
Subject key identifier: 84:CE:76:82:14:55:EF:DA:7B:16:06:6C:78:59:75:D4:9C:F7:47:BB
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: 012D
Signing time: Wed 21 Oct 2026 06:18:24 +0000
Manifest this update: Wed 21 Oct 2026 06:18:24 +0000
Manifest next update: Wed 28 Oct 2026 06:18:24 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: LgvVpQFrzrY1cPX3BqJVQLKQhdmnkwAaJrQNH+m3oEs=)
2: 42E7EDE6C93A11F18802D7E24611F970.roa (hash: /LaJdtQYnupzFd3z1jx3kfKstG7+CxRlSayeqWuptYk=)
3: 546E5FDCC93A11F18A8AAAF84611F970.roa (hash: sPFa46t5S3x6Q3DbJXNo6KSuEl+O3lBAkoFSSZIGGcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: Oct 21 06:18:24 2026 GMT
Not After : Oct 28 06:18:24 2026 GMT
Subject: CN=6ad85930-2677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:51:d5:f1:33:63:8b:8c:d8:f3:05:42:8a:
4a:dc:e2:f3:ed:b8:3d:2f:f0:5e:a2:ae:ac:22:b0:
17:ea:5d:1b:24:3e:23:00:06:43:39:b1:37:06:81:
1a:d6:7c:ee:b7:b1:c6:66:52:41:4c:a9:00:ba:f2:
8e:ab:d8:f9:f6:cd:0e:04:79:b9:23:56:9b:d3:ff:
c5:d4:aa:a8:75:a1:d7:92:4b:a3:a9:80:2a:14:6e:
46:9e:e3:46:23:9d:3e:88:ee:e8:9e:0b:a4:89:6f:
df:d2:a4:26:9a:9a:29:fb:15:f1:c9:65:b7:87:41:
47:2c:6d:cc:a1:f3:a3:20:7f:52:a0:ef:50:1e:5e:
5b:70:a4:73:ff:c2:5b:25:12:54:54:55:b1:7f:61:
97:05:06:c7:25:c3:8e:ab:14:5b:95:a4:db:88:4b:
62:3a:f4:cd:a9:4a:19:b2:f7:26:b3:57:04:fa:0e:
94:eb:90:d4:07:89:23:98:09:58:b1:10:8e:47:5a:
f8:a7:3c:c4:a8:cf:e4:b8:20:2c:7e:11:af:0f:00:
b1:44:30:c8:77:5b:47:42:6b:15:1a:29:4f:3c:98:
76:0e:26:85:85:46:da:5e:ab:d4:67:8a:90:a2:98:
6c:57:a9:40:75:ae:b0:ed:97:7b:58:17:9a:ee:9e:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:76:82:14:55:EF:DA:7B:16:06:6C:78:59:75:D4:9C:F7:47:BB
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:95:42:b3:60:fb:c3:35:07:b3:1f:07:57:cb:dc:31:cd:9b:
d9:4a:b7:97:d7:fd:50:23:51:9b:3d:a7:6a:e9:3d:21:4c:82:
ab:01:36:aa:c0:30:4a:3d:a6:5e:50:4a:7b:28:fa:80:de:d7:
da:35:c3:40:43:e7:9c:84:37:4d:5e:ee:8b:b9:6c:bb:35:51:
3d:56:0c:a8:40:59:f2:7a:ec:39:f3:04:fe:01:3e:88:50:0c:
1e:45:17:f7:c8:36:e0:93:44:1d:ff:46:19:aa:05:d2:cb:e0:
68:05:28:97:ce:06:86:15:11:e0:b9:dd:3c:fb:bd:9a:f8:38:
f6:71:cd:11:f7:48:c9:08:bb:b4:19:6c:e0:86:74:3a:a7:1e:
8d:a1:d8:34:f4:b2:74:01:6a:63:ff:22:de:a4:cf:04:25:16:
8e:91:7b:fb:c9:9f:33:cb:03:f7:c3:ef:8c:1e:61:0e:7d:26:
a9:be:bc:49:4a:ed:12:1a:9c:1b:54:2d:c4:bf:06:61:52:7a:
16:aa:9c:29:6b:a7:c6:33:07:69:05:53:21:db:9c:a9:76:74:
d1:c8:b6:5a:8b:aa:30:02:f4:ca:a6:e7:e5:69:93:bc:7c:5e:
1f:b6:40:2f:39:05:70:bb:a3:b2:a8:d1:21:e8:b3:00:a1:0a:
2e:99:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 01:27:55 2026 by rpki-client