
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: N2Z+reAVJOCVFlEYBpLgszJkpt7qUObsCgpPqye2ASc=
Subject key identifier: C7:41:C6:9D:11:82:08:47:78:9C:76:1F:02:B7:B9:63:9B:5E:9D:D7
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: E4
Signing time: Fri 05 Jun 2026 06:54:50 +0000
Manifest this update: Fri 05 Jun 2026 06:54:49 +0000
Manifest next update: Fri 12 Jun 2026 06:54:49 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: 48UD6r/x9jUuMQSortzqCd0DEIGHmwCRSYFJhwEzLPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: Jun 5 06:54:49 2026 GMT
Not After : Jun 12 06:54:49 2026 GMT
Subject: CN=6a2272b9-d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:59:39:6e:7a:f6:61:67:1e:3e:be:c9:b8:
08:f5:e3:c8:ad:b8:fd:df:7e:5c:f0:42:71:0b:f2:
5c:59:48:47:11:3b:3c:13:54:39:d5:ea:53:35:e1:
22:f0:17:2a:79:a5:e2:af:03:36:07:77:48:37:9c:
32:67:6b:23:1e:de:7c:be:27:53:0f:6e:24:b8:ee:
8c:5a:b2:4b:fc:96:1b:c9:2e:02:ee:fe:77:0d:dd:
3e:82:ae:a4:3f:b7:b7:c4:34:95:4c:be:f8:9a:e2:
51:ef:4f:7b:b8:ce:7c:a4:63:1e:a9:ae:b3:92:a5:
18:86:0a:8a:56:75:96:35:0e:66:8f:cb:76:43:cd:
a3:1d:a3:f0:7b:2a:f1:8c:6f:16:d2:0d:cb:72:68:
0c:e6:46:f1:3d:1e:aa:8c:f6:41:7e:03:db:ec:47:
af:95:a7:19:b1:63:42:ac:45:6a:70:b0:4f:34:8c:
a1:79:df:0a:8d:55:0b:ee:2f:14:97:21:46:92:56:
4f:b8:1b:75:46:bf:51:28:78:e3:0d:0c:30:a5:9f:
76:be:6f:ea:60:18:69:d4:b3:bf:53:e5:75:8f:16:
b1:cc:77:6d:82:df:5d:92:8d:fb:0e:29:e7:c3:4b:
bc:ed:31:5c:0b:42:a3:49:f8:e6:b1:37:1e:5a:23:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:C6:9D:11:82:08:47:78:9C:76:1F:02:B7:B9:63:9B:5E:9D:D7
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f0:a1:c7:54:72:4c:da:77:76:b1:d7:61:87:80:88:df:8f:
c8:41:47:7a:06:57:7c:2a:7c:82:6e:15:e3:93:cd:46:1d:ff:
09:46:90:67:31:93:80:07:44:01:ce:8d:a8:37:cf:a5:2e:81:
c4:b9:33:dd:58:3d:08:48:b3:e0:b4:ad:b3:12:d6:6a:45:6b:
c4:d3:a7:f9:78:81:10:78:d3:7c:89:25:fd:ba:97:a9:2d:88:
e2:ab:ed:80:9a:98:08:07:1b:90:f2:80:1d:87:b7:5f:02:73:
e5:92:6a:99:81:76:26:f4:06:f4:97:98:20:fd:d2:f2:02:e1:
ea:0b:15:a2:0c:5d:c3:a9:8f:a9:ea:3d:a8:3d:cb:22:23:2f:
47:4b:20:5c:46:83:84:b4:21:72:50:0b:bb:d1:35:e2:e7:0f:
b4:6d:40:a5:ab:76:2d:e6:87:fe:c6:13:5c:c8:01:cd:71:6d:
32:ce:d2:51:34:94:92:6c:0a:72:35:3b:6b:ed:a1:cc:f5:88:
78:d7:8d:d0:48:90:2c:05:3c:01:f4:20:74:a1:44:d3:c6:a4:
09:93:99:77:72:e0:d5:29:bc:df:44:c7:dd:fe:98:ef:cc:79:
23:1e:40:03:35:87:3e:0a:9b:70:ec:a3:e0:71:6d:a6:c7:c1:
6a:53:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:27 2026 by rpki-client