
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier: GEl/LINIsPErDN/fqFbMXWsSrb/OsKfHjLED+Xpfaec=
Subject key identifier: 49:89:F8:31:56:3A:41:6F:F7:E3:3D:EE:58:1D:75:1C:DD:6C:C4:59
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number: D4
Signing time: Sat 03 Oct 2026 07:23:08 +0000
Manifest this update: Sat 03 Oct 2026 07:23:07 +0000
Manifest next update: Sat 10 Oct 2026 07:23:07 +0000
Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: wyBheokauIDhfpJPBfNaW+X5mIuPxO7NkYbPGxYKyLA=)
2: PYKheHolcObXv56oVaEsjKBkEwY.asa (hash: CjdTHSeU100/DOFlvWSJyA0VjWKaT/NuHuDVW9WZsH0=)
3: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: okHYiY+i6MMTwV1Ep1eaV172yLMQeGvbCo4Bg+Bacec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Validity
Not Before: Oct 3 07:23:07 2026 GMT
Not After : Oct 10 07:23:07 2026 GMT
Subject: CN=6ac0ad5c-dd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:32:18:d4:dd:40:a2:b2:72:84:3b:a9:a9:fc:
7f:26:7b:fd:6c:5c:af:bf:c2:5d:1b:f2:c7:12:c0:
86:65:2d:d8:c3:29:2b:ce:0e:d0:5e:23:82:c2:07:
ef:8f:5c:b4:5a:7a:bc:a2:a8:64:66:8f:6f:f5:b4:
e4:88:57:27:7d:e3:31:fb:c8:28:46:f8:6b:bd:45:
94:a5:5a:31:42:fb:ca:61:48:e4:f4:79:f9:c1:bc:
73:27:a4:5b:b3:b2:c9:d1:08:8e:26:37:0e:03:83:
7c:50:68:63:ca:4b:34:5b:b0:69:41:9b:21:68:dc:
12:46:23:6c:eb:57:68:0e:ec:67:42:f8:78:ff:0d:
7b:48:36:bb:39:08:ee:9c:ef:37:b8:89:0f:41:8e:
fb:7b:a5:c2:68:de:f4:c2:31:20:e9:e5:b6:98:de:
d0:c7:c9:42:4e:28:4b:7c:a6:e1:fd:56:b7:d1:f6:
6f:2d:37:22:df:64:59:39:fd:a7:f3:98:4e:2d:cd:
4c:f7:0b:f7:0a:46:c2:b7:d6:fc:3e:1d:5b:f7:0f:
3a:f7:b1:58:22:a4:70:a8:28:7e:14:41:aa:6d:1c:
ea:3f:b6:f5:7d:9d:88:b9:52:18:a2:15:3d:aa:c4:
45:95:06:cc:eb:55:98:eb:ea:db:b5:ea:0f:f2:7c:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:F8:31:56:3A:41:6F:F7:E3:3D:EE:58:1D:75:1C:DD:6C:C4:59
X509v3 Authority Key Identifier:
keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d3:d2:0c:77:62:c0:08:86:12:5c:bd:7d:1a:98:bb:cf:96:
be:1d:69:9c:f2:8a:db:79:48:e2:fe:41:76:4d:9f:a8:f5:95:
da:fc:32:6e:5d:b0:8b:a4:9e:cb:39:b2:f0:22:39:e2:fb:20:
28:51:5a:4c:14:7d:96:96:09:c1:53:fc:21:38:f6:a7:89:d3:
a0:0f:70:3a:9d:c8:cb:67:b9:33:64:13:db:51:fc:ef:6f:57:
b9:0c:28:cf:e1:c4:75:8e:43:a6:8a:51:53:f0:6f:c7:6e:b3:
b8:32:6b:55:64:bb:c1:55:a6:a0:29:91:a9:24:67:81:97:8a:
3b:f8:21:e5:0d:ec:f3:ef:b6:43:be:82:6b:e0:48:5a:1a:52:
90:55:cc:71:d6:8b:d8:7a:03:e1:f5:93:4b:3d:50:be:8d:cb:
4e:8d:89:b6:a2:b2:ff:f4:86:be:e9:38:cb:f1:2c:28:79:4d:
3a:be:63:6f:75:b8:94:96:72:d1:58:42:0f:85:4e:10:48:49:
59:de:2a:ab:e9:2a:f5:66:8a:e4:20:aa:6f:04:0b:30:84:24:
5e:d4:53:45:f3:18:50:94:ea:4e:39:07:90:6d:73:1b:1e:c9:
43:34:5b:6a:ae:d3:58:fa:a4:67:53:fb:64:ae:72:36:ab:ef:
46:d5:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:52:21 2026 by rpki-client