
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: 5BThPfSHbtFbXYdo4OUmZkDzTB7a5+3HSpv1ljyMSO4=
Subject key identifier: 52:53:63:E9:29:6A:96:45:1B:EE:AC:C7:CC:56:31:D0:BF:AD:C4:D2
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: B7
Signing time: Sat 07 Mar 2026 06:21:59 +0000
Manifest this update: Sat 07 Mar 2026 06:21:59 +0000
Manifest next update: Sat 14 Mar 2026 06:21:59 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: SRT2IinEOjvhREhpPMN/eLZ5FXWmsFd1wY+n1DNppC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: Mar 7 06:21:59 2026 GMT
Not After : Mar 14 06:21:59 2026 GMT
Subject: CN=69abc407-35f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:44:40:e3:da:8f:a5:e3:ea:96:4f:0a:ec:
57:6d:6e:bc:dc:be:db:6b:af:8e:c2:8f:7c:b2:46:
9e:b2:73:5e:87:31:18:2c:21:dd:14:85:2a:12:3e:
9e:17:2d:3a:ac:95:f4:80:7c:fe:e7:b5:5d:5d:2c:
36:69:36:fa:79:81:a6:55:64:9b:e6:a8:02:20:1d:
31:6b:b0:2d:dc:f3:fe:c2:40:08:ce:21:d3:91:a5:
18:2c:29:2b:cb:ad:c9:e3:3b:d4:6f:59:64:ba:03:
9b:ee:f5:cf:f0:f0:8f:21:43:c4:53:90:66:38:c1:
75:43:60:da:21:80:be:2e:74:99:0a:d4:7a:05:15:
3d:d9:6b:60:f6:8d:38:da:fb:09:b0:81:86:14:60:
62:0f:59:fa:f2:63:f7:57:7f:4c:b6:e8:81:18:89:
41:2e:3d:13:d5:22:66:b1:af:b9:f3:7c:f4:af:e4:
cc:64:a3:72:45:72:19:60:eb:02:ef:d1:2d:32:2a:
a7:fe:e2:d5:2c:f1:a7:2f:3f:28:3f:08:ea:68:a9:
4c:97:8a:d5:51:a3:88:02:1a:39:2f:96:d2:6e:fd:
91:8f:ad:f4:f0:7d:3a:07:dd:05:50:92:87:1c:95:
fa:46:89:5b:1f:48:bd:c3:2c:7c:87:15:91:83:0a:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:63:E9:29:6A:96:45:1B:EE:AC:C7:CC:56:31:D0:BF:AD:C4:D2
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:da:64:f5:86:6d:18:f7:cb:17:f8:6f:87:5b:e5:0d:2e:02:
7d:a3:c1:1a:b5:04:36:7b:88:2b:2e:ec:ee:64:31:fa:8d:b6:
ca:a9:d5:96:8c:fb:0b:bc:be:e2:38:dc:ec:67:7e:62:77:2a:
fe:3c:f8:7b:db:69:89:58:d2:c1:d5:e0:96:d9:5d:85:61:37:
0a:e3:ef:fa:6a:3a:a4:ea:71:28:83:66:96:af:3e:86:bf:27:
e4:f7:15:7a:37:45:ea:a8:81:3d:8b:e1:de:89:d1:e5:55:4b:
b1:40:ac:07:ab:65:d8:ec:84:c9:24:49:12:4a:78:0e:a8:ad:
9a:44:84:83:95:10:04:bd:a0:69:7b:30:d3:58:77:45:33:66:
85:b8:15:6c:b3:ef:3f:4a:71:44:63:22:3d:45:dc:63:4c:6a:
21:7e:96:56:c7:a1:65:f0:42:a2:20:1a:ba:d6:b0:c1:63:ca:
86:9a:a7:ab:10:c0:d6:37:a0:e5:76:12:be:cf:fd:9c:b7:b7:
cc:13:e1:72:0a:6e:32:cc:f3:8c:3a:d5:17:b0:8d:76:56:60:
e4:c8:de:50:51:59:0a:a6:c6:0b:ac:c3:80:d9:34:2d:98:ea:
bf:30:e8:4f:c9:96:66:c7:da:08:c5:42:9d:4b:8d:10:a3:33:
27:cc:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:38:36 2026 by rpki-client