
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier: dwYCLRd5LnDVQl9KFabRFcBlyYAfuoA0oYhiBkeXZpQ=
Subject key identifier: 0B:64:E9:0C:2A:DF:74:D2:6E:5A:0C:92:9D:B4:27:E9:75:21:52:C6
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 0722
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number: 0719
Signing time: Tue 06 Oct 2026 22:13:44 +0000
Manifest this update: Tue 06 Oct 2026 22:13:44 +0000
Manifest next update: Tue 13 Oct 2026 22:13:44 +0000
Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: 1VAE7jU2Vgcjc6JJhF33hbYzMrd6mV9senaHNVsamcc=)
2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Validity
Not Before: Oct 6 22:13:44 2026 GMT
Not After : Oct 13 22:13:44 2026 GMT
Subject: CN=6ac57298-bc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:81:ed:31:bd:fd:5e:e7:6e:dc:fd:e8:71:
0c:03:6a:a6:0e:9e:a2:5f:7e:a5:62:8f:10:85:51:
77:94:3d:d7:d5:0f:39:d2:01:75:2b:32:32:6c:1c:
93:fa:ed:44:11:21:f3:d8:3a:4d:dd:13:ee:c1:26:
d4:57:b2:59:ba:a4:0c:56:33:94:75:4d:b1:a0:f9:
49:9e:d9:54:34:b1:70:b2:28:32:91:f7:03:fc:fb:
50:1e:33:2e:42:70:d2:2d:e5:3e:e5:2e:7f:25:82:
66:b9:de:6f:77:da:35:d2:39:33:d4:2e:90:80:72:
c7:7f:c1:0b:8b:a4:d3:e3:49:53:0d:12:82:a0:66:
69:0b:40:5d:c2:06:64:a1:06:9c:7c:47:52:f8:3b:
d4:9f:e7:ca:36:26:f6:c3:bf:7c:21:75:6f:16:40:
ac:0e:21:01:f5:94:d2:0b:82:9e:76:76:61:b2:46:
a5:52:dc:5f:91:c8:ff:26:f8:9f:23:2b:35:c9:70:
ac:f6:e1:87:3e:25:b9:32:f3:6d:a8:50:66:2b:fc:
78:00:16:d1:41:58:d7:be:32:1a:8e:6a:b3:4a:ce:
1f:cf:71:f0:51:26:44:d3:97:2c:96:cf:d7:b2:eb:
02:7a:20:37:1e:fb:8b:08:bf:80:e2:fd:ee:08:13:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:E9:0C:2A:DF:74:D2:6E:5A:0C:92:9D:B4:27:E9:75:21:52:C6
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:04:71:d9:95:e7:78:be:15:cc:34:7c:98:f6:bc:01:c7:f7:
0d:6b:78:d6:4f:af:04:42:06:7a:db:3b:d5:0d:6d:cb:cb:1a:
7a:a9:1c:95:63:a4:1f:62:3d:c9:bb:8a:5b:58:cb:30:91:93:
eb:08:82:95:07:3c:54:00:23:bc:77:02:cb:a5:39:da:26:e7:
e9:7f:98:13:08:42:43:e5:7f:8e:20:9b:09:d6:ea:e1:80:fd:
08:9a:0c:a2:c5:36:65:29:ee:bb:68:a8:55:fb:73:65:0d:c5:
5d:f7:68:64:cc:a4:5c:87:46:05:f3:9d:46:7b:f3:c0:d3:fd:
f3:1e:95:71:4d:66:27:c8:fd:6e:d5:8f:9d:5f:74:77:61:ed:
dd:80:8b:6d:ce:e1:23:7f:2c:d3:d5:da:9d:cf:81:7b:2d:1a:
03:c0:e3:af:bb:9d:1a:f7:6a:85:07:26:df:5c:8c:e6:8a:6f:
78:f0:fe:de:9f:97:88:49:f0:bd:7a:8b:c5:af:c7:64:50:1b:
ac:a2:5a:a6:37:38:7f:0d:d0:72:56:05:00:f3:69:78:f9:48:
2c:53:8f:da:c3:e8:34:9b:d5:f7:23:86:93:ff:68:98:82:eb:
89:3c:c8:1d:fe:90:d7:a7:47:c2:b0:8a:0a:f0:c1:e7:05:c1:
cb:c5:eb:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw
MTIzNkIyN0MwHhcNMjYxMDA2MjIxMzQ0WhcNMjYxMDEzMjIxMzQ0WjAYMRYwFAYD
VQQDEw02YWM1NzI5OC1iYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp36B7TG9/V7nbtz96HEMA2qmDp6iX36lYo8QhVF3lD3X1Q850gF1KzIybByT
+u1EESHz2DpN3RPuwSbUV7JZuqQMVjOUdU2xoPlJntlUNLFwsigykfcD/PtQHjMu
QnDSLeU+5S5/JYJmud5vd9o10jkz1C6QgHLHf8ELi6TT40lTDRKCoGZpC0BdwgZk
oQacfEdS+DvUn+fKNib2w798IXVvFkCsDiEB9ZTSC4KednZhskalUtxfkcj/Jvif
Iys1yXCs9uGHPiW5MvNtqFBmK/x4ABbRQVjXvjIajmqzSs4fz3HwUSZE05csls/X
susCeiA3HvuLCL+A4v3uCBMWgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAtk6Qwq
33TSbloMkp20J+l1IVLGMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw
NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs
aE9Rck5ETk04WElCSTJzbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAwRx2ZXneL4VzDR8mPa8Acf3DWt41k+vBEIGets71Q1ty8saeqkclWOkH2I9
ybuKW1jLMJGT6wiClQc8VAAjvHcCy6U52ibn6X+YEwhCQ+V/jiCbCdbq4YD9CJoM
osU2ZSnuu2ioVftzZQ3FXfdoZMykXIdGBfOdRnvzwNP98x6VcU1mJ8j9btWPnV90
d2Ht3YCLbc7hI38s09Xanc+Bey0aA8Djr7udGvdqhQcm31yM5opvePD+3p+XiEnw
vXqLxa/HZFAbrKJapjc4fw3QclYFAPNpePlILFOP2sPoNJvV9yOGk/9omILriTzI
Hf6Q16dHwrCKCvDB5wXBy8Xr3Q==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:08:21 2026 by rpki-client