
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier: MwDxUaXvZDPyg3pPJMjapZcYMe8c1Q2BFBn7nJis3do=
Subject key identifier: 16:CC:A5:B2:0B:BD:80:68:50:D1:B4:34:70:C1:88:F8:A3:31:EA:4E
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number: A8
Signing time: Fri 17 Jul 2026 08:23:27 +0000
Manifest this update: Fri 17 Jul 2026 08:23:27 +0000
Manifest next update: Fri 24 Jul 2026 08:23:27 +0000
Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: UCSB+fMH/sXha8COU6ptpanJhbX6Uf9VgGHK3ENdLXw=)
2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: BOcoiAspHCwkr5azVOhAvR+BAnY8G++2Bq7+nnR+vDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Validity
Not Before: Jul 17 08:23:27 2026 GMT
Not After : Jul 24 08:23:27 2026 GMT
Subject: CN=6a59e67f-30cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:5d:32:95:cc:0e:53:8d:5a:cb:25:50:c1:
bf:f0:03:cb:ca:65:f1:a4:19:15:4c:77:b8:b5:38:
c8:7e:a8:ac:66:6b:9b:90:c1:b0:45:46:f8:9c:fe:
37:db:86:73:72:9e:b8:fd:f7:a4:72:f4:a0:e9:3d:
27:3e:b8:ff:ae:75:af:bc:94:5a:96:7b:9f:ea:17:
d0:5e:9a:33:d8:6e:aa:f2:72:52:97:f2:4e:b5:db:
62:c7:6d:45:a2:57:65:cd:d5:d7:44:df:c3:f9:13:
18:7d:df:f5:4e:9f:ee:d6:06:5c:d4:ab:21:a8:39:
ff:bd:b5:75:2b:ee:80:d7:c4:2b:00:d1:0c:5d:c4:
b3:11:43:6e:48:af:54:72:f3:17:44:f1:cd:d6:42:
a9:bb:05:46:ca:68:84:77:1e:57:26:0e:72:93:8e:
3e:6f:19:89:dc:3e:4c:11:e8:ba:28:1e:6b:a6:a6:
b8:46:1b:9d:0c:c6:4c:29:d8:8e:5e:06:7e:a5:16:
61:28:29:13:a7:07:df:d8:49:a2:43:14:dd:99:b8:
e5:07:ef:86:64:b6:b1:b5:42:a7:01:38:b2:8d:43:
62:16:e8:0c:d4:d5:4f:ef:fe:df:76:1b:18:2f:bd:
3f:51:cd:f9:41:06:f5:69:99:06:ec:f5:d0:89:aa:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:A5:B2:0B:BD:80:68:50:D1:B4:34:70:C1:88:F8:A3:31:EA:4E
X509v3 Authority Key Identifier:
keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ad:f2:6a:b8:d8:b2:f2:94:45:02:6d:85:41:81:6d:34:ec:
f3:92:4a:e3:80:93:0b:b9:09:06:09:fe:03:02:da:0c:49:21:
c0:ed:51:94:e3:21:e4:ff:54:a5:ab:eb:3d:ed:67:f3:23:7e:
8b:a6:b8:98:8e:ff:59:43:33:54:48:62:3d:0c:42:97:21:7c:
ff:41:aa:53:5e:3f:db:26:a8:2e:77:c7:50:b4:31:09:b1:82:
05:51:63:8f:40:fa:89:c2:0e:7f:f5:25:1b:f2:83:39:79:1c:
95:cc:10:46:b5:1d:b5:35:a1:5e:61:2b:1a:49:68:f1:b3:97:
9a:7f:64:82:6f:ed:4d:cf:53:4d:a8:fa:b2:69:4b:cd:ea:65:
ec:ec:c5:de:70:96:65:65:18:bd:17:51:7a:cb:d6:34:cf:1e:
db:22:c9:85:0e:63:72:fa:d2:fa:57:b0:f6:9b:c0:19:ca:ff:
64:d8:42:c2:e4:28:6c:61:02:da:14:d5:f4:22:c3:bd:cd:ba:
f9:7f:9e:a7:e7:ef:1d:b7:47:da:6f:74:09:ea:5b:d0:19:dd:
73:27:2c:47:a3:a8:23:80:e0:1d:2a:18:bf:b3:61:d1:5f:d8:
3a:a2:7f:f7:ff:1d:2b:eb:94:b4:a8:04:4c:44:ea:14:44:32:
49:e0:02:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3NjAxMTAvBgNVBAUTKEZFNDlDRjMzRkJFNDI0N0IyQkExRUU5QTU0ODRBNzQw
QUQzQjZFMEUwHhcNMjYwNzE3MDgyMzI3WhcNMjYwNzI0MDgyMzI3WjAYMRYwFAYD
VQQDEw02YTU5ZTY3Zi0zMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr31dMpXMDlONWsslUMG/8APLymXxpBkVTHe4tTjIfqisZmubkMGwRUb4nP43
24Zzcp64/fekcvSg6T0nPrj/rnWvvJRalnuf6hfQXpoz2G6q8nJSl/JOtdtix21F
oldlzdXXRN/D+RMYfd/1Tp/u1gZc1KshqDn/vbV1K+6A18QrANEMXcSzEUNuSK9U
cvMXRPHN1kKpuwVGymiEdx5XJg5yk44+bxmJ3D5MEei6KB5rpqa4RhudDMZMKdiO
XgZ+pRZhKCkTpwff2EmiQxTdmbjlB++GZLaxtUKnATiyjUNiFugM1NVP7/7fdhsY
L70/Uc35QQb1aZkG7PXQiarqJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbMpbIL
vYBoUNG0NHDBiPijMepOMB8GA1UdIwQYMBaAFP5JzzP75CR7K6HumlSEp0CtO24O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzc2MC83RDUzMTQyMDdF
M0YxMUYwQUIwODlCMUVDNEY5QUUwMi9fa25QTV92a0pIc3JvZTZhVklTblFLMDdi
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2JnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzc2MC83RDUzMTQyMDdFM0YxMUYwQUIwODlCMUVDNEY5QUUwMi9fa25QTV92a0pI
c3JvZTZhVklTblFLMDdiZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT63yarjYsvKURQJthUGBbTTs85JK44CTC7kJBgn+AwLaDEkhwO1RlOMh5P9U
pavrPe1n8yN+i6a4mI7/WUMzVEhiPQxClyF8/0GqU14/2yaoLnfHULQxCbGCBVFj
j0D6icIOf/UlG/KDOXkclcwQRrUdtTWhXmErGklo8bOXmn9kgm/tTc9TTaj6smlL
zepl7OzF3nCWZWUYvRdResvWNM8e2yLJhQ5jcvrS+lew9pvAGcr/ZNhCwuQobGEC
2hTV9CLDvc26+X+ep+fvHbdH2m90Cepb0BndcycsR6OoI4DgHSoYv7Nh0V/YOqJ/
9/8dK+uUtKgETETqFEQySeACkw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 09:20:39 2026 by rpki-client