
$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier: 1pM9gwShYEFsj/IYGsGslfch4KP8koE0Zp9xKwiwsPM=
Subject key identifier: B7:B3:15:D2:AF:96:1D:4B:3B:0A:79:9D:87:3F:B2:67:14:EE:43:DD
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number: 06D2
Signing time: Wed 20 May 2026 22:19:49 +0000
Manifest this update: Wed 20 May 2026 22:19:48 +0000
Manifest next update: Wed 27 May 2026 22:19:48 +0000
Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: j6ivvm72c4fyy0QWZHHrIDB+Pbsah7IjKan0HAI/54w=)
2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Validity
Not Before: May 20 22:19:48 2026 GMT
Not After : May 27 22:19:48 2026 GMT
Subject: CN=6a0e3384-db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:df:75:bd:ab:91:89:55:7b:b6:3b:fa:7a:
2a:06:c2:72:17:ce:b7:fd:9f:92:49:14:6d:b8:36:
cf:f3:93:8a:19:73:05:cc:6f:f0:cc:63:7b:98:07:
17:e5:d3:71:9e:72:03:cd:69:de:dd:8f:ee:4d:a4:
59:e6:a0:0d:79:af:5f:c1:4d:a5:d1:bb:56:98:44:
76:e5:c2:a8:99:41:d5:4a:00:10:ca:2b:42:91:bf:
a5:53:bc:13:3e:f7:97:11:70:ad:a2:fd:0f:da:ed:
53:32:bf:36:b3:6e:6e:90:0c:81:cc:49:ad:42:20:
20:7a:2b:8c:7e:f9:57:25:b8:fe:10:aa:5a:47:1d:
8f:5f:fd:ce:a6:c9:53:3b:d1:49:4a:bf:d6:02:d0:
b2:36:8d:f9:d2:ac:3e:1f:59:57:d4:a6:e6:18:ca:
c9:39:29:a7:1a:2e:57:e4:58:03:60:fa:35:93:11:
e8:9a:28:57:1b:da:14:32:2c:79:38:b2:10:c1:47:
f5:f4:88:86:c2:e2:c0:1c:d4:2f:50:2d:a2:22:63:
80:9e:02:1c:c4:08:9e:02:dd:d2:f6:37:84:c4:a4:
9c:f5:4a:b9:1c:a5:a7:61:15:a1:7e:09:2b:5a:84:
30:f0:fa:12:c7:74:42:12:4d:4a:83:b8:44:33:28:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:15:D2:AF:96:1D:4B:3B:0A:79:9D:87:3F:B2:67:14:EE:43:DD
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:41:32:93:d5:70:9a:7a:86:01:15:58:13:d5:8a:d7:25:
37:8a:a4:49:d9:9c:5e:bb:d4:bc:93:a3:51:b1:1d:5f:05:93:
9f:64:ec:a1:5b:22:58:12:6a:30:3b:c3:99:80:1c:2a:d9:fe:
2f:54:4c:bb:c9:e3:6e:0e:70:a2:77:b7:ef:73:90:27:45:57:
76:c8:99:3e:e3:3a:9a:06:9f:74:d0:4c:6e:b7:e4:65:bf:ce:
3f:e5:60:45:41:0d:08:21:44:cb:73:67:39:5c:56:c9:27:84:
73:33:72:27:27:69:6f:1d:d2:28:8b:16:6f:fb:37:2c:53:d7:
4a:cf:53:71:df:00:13:9a:d9:f4:1a:e5:a1:89:85:d8:40:a9:
db:2d:dc:22:ef:d2:ee:70:58:29:72:4d:01:f0:ef:3a:0f:d1:
3c:7a:e6:ca:9c:4b:8c:0d:b7:ce:0f:bb:64:24:0a:ba:18:5c:
fc:82:8d:5c:af:a5:18:af:7a:98:38:63:39:33:cd:75:79:02:
81:6a:81:d5:e4:2b:dd:62:5a:b2:59:2d:81:29:08:c8:0f:1f:
8a:b6:43:de:b9:2e:71:ac:19:20:f4:2e:42:46:03:9f:71:d6:
65:0f:ed:09:01:93:1c:f3:cc:7c:0e:a9:b3:1e:a7:b7:23:27:
c2:a6:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:34 2026 by rpki-client