
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
File: knWZPcnEM_JdNYCsd-OV0GaWSD0.mft (raw, json)
Hash identifier: BKbudXyPMxEiL0A4A80PU40j4yc3eQFk4K4DpVbC/NY=
Subject key identifier: A6:AA:F2:BA:7B:C8:AC:30:D4:C7:17:06:47:BB:80:AA:C5:20:E9:11
Authority key identifier: 92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D
Certificate issuer: /CN=A91276A3/serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
Certificate serial: 07ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
Manifest number: 07E1
Signing time: Tue 06 Oct 2026 21:26:56 +0000
Manifest this update: Tue 06 Oct 2026 21:26:56 +0000
Manifest next update: Tue 13 Oct 2026 21:26:56 +0000
Files and hashes: 1: knWZPcnEM_JdNYCsd-OV0GaWSD0.crl (hash: 6wlgyi/sSv63wv21WSGGkoQ86U2n+VGBBFo8r9eEDsY=)
2: 57BAE77C517D11EB8949D438C4F9AE02.roa (hash: aBoUkT3XfOno4ZFpM1LCowGFp8BTgYEHGaCNCAbFWpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl
rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276A3, serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
Validity
Not Before: Oct 6 21:26:56 2026 GMT
Not After : Oct 13 21:26:56 2026 GMT
Subject: CN=6ac567a0-0fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:7d:0c:a0:1d:26:61:61:2d:73:7c:28:95:
dc:87:65:64:f9:ea:8d:88:0d:73:d6:4d:fa:a5:db:
5f:d8:c6:49:e8:df:d5:b3:4f:ac:fb:e1:82:5c:5f:
71:52:68:ce:62:1c:f0:9c:23:17:e8:e6:11:54:b7:
23:bd:88:c6:9c:92:07:96:82:ca:56:e9:3a:35:7f:
1f:27:7c:bd:12:bf:64:08:68:5c:b9:60:d3:33:6e:
6c:0b:18:ee:a9:36:a0:88:6d:59:ab:ec:37:05:2b:
e5:88:3d:c4:87:c3:2f:b5:28:94:97:1f:76:30:ce:
57:ce:5b:b1:4c:a3:c0:a6:04:f1:71:64:69:37:dc:
93:79:a9:8e:39:43:b4:7b:b1:4c:8d:9e:ae:3f:c8:
89:00:8f:44:ac:ad:ff:ca:ff:1e:c1:29:fb:08:c9:
2c:13:8a:c2:71:a6:89:51:b3:69:4d:6f:d1:bb:0e:
1c:6c:3b:98:5b:43:a4:80:7d:da:1a:7e:2b:b2:31:
f6:72:b5:b0:ba:29:0a:1c:3f:44:cf:1e:44:aa:da:
8f:eb:1e:e8:20:55:95:fe:bc:fe:c4:e7:58:78:1e:
d7:fe:06:5f:37:c7:3b:df:06:92:c5:d8:c0:41:5d:
58:98:be:f3:8c:ee:5e:2c:bd:a0:0d:20:a6:60:08:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:F2:BA:7B:C8:AC:30:D4:C7:17:06:47:BB:80:AA:C5:20:E9:11
X509v3 Authority Key Identifier:
keyid:92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:41:12:89:96:cb:16:51:de:4f:75:a4:a4:c3:1a:58:27:3e:
7d:60:4a:7b:ea:d8:20:a3:bd:bb:bf:66:3d:a6:84:5e:50:65:
19:68:89:5f:72:bd:8a:88:37:3d:81:e4:15:37:ac:18:3b:43:
00:50:18:d7:43:10:1f:16:f0:0e:45:7f:8a:b8:c1:e1:34:6c:
76:a8:e3:56:cf:49:89:de:f0:b1:5a:9b:91:6f:98:62:1b:3e:
b1:34:bc:0d:48:76:21:2a:25:3c:91:2d:02:bf:5f:a2:6e:97:
9e:f3:b1:48:7e:71:35:06:b9:1a:05:f9:14:0e:57:4c:df:fc:
6b:e1:68:2a:42:6c:85:4a:d6:8c:f5:2f:e8:86:69:02:13:ca:
24:2e:9e:b2:7c:b5:08:5c:8c:9b:00:97:76:71:e7:4d:1b:a3:
11:e0:43:71:2a:71:66:26:e1:ab:f4:f3:c7:41:82:a5:12:cf:
62:e0:20:c8:82:8f:0f:01:f0:d0:14:91:ba:66:83:6a:95:82:
54:ed:41:dc:41:a6:33:92:44:15:37:13:15:e3:c5:d2:1a:84:
d3:bc:40:7a:17:1b:e5:0d:1b:ae:32:6d:27:fc:d1:51:be:48:
e0:a9:40:46:8b:ae:26:6b:48:1b:81:51:32:c1:64:9b:b4:6a:
82:e4:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:15:20 2026 by rpki-client