
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json)
Hash identifier: Wk0So3q5Kwcf/luVRHikDA36A8YzXKR7981Lel364CE=
Subject key identifier: 2F:FE:5A:B3:05:4D:50:33:25:92:50:EE:C9:35:AA:76:D4:44:F9:D1
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial: 0F29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
Manifest number: 0F1E
Signing time: Mon 26 Oct 2026 17:36:21 +0000
Manifest this update: Mon 26 Oct 2026 17:36:20 +0000
Manifest next update: Mon 02 Nov 2026 17:36:20 +0000
Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: wyAta8bxN+S5Mn+L8JbBANV+X1Vs7nqww978z8RF0+c=)
2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: I3a+AQK6qVCuGM8BlFl5ofUbKIxiO2UA8EiuLaXOEkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3881 (0xf29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Validity
Not Before: Oct 26 17:36:20 2026 GMT
Not After : Nov 2 17:36:20 2026 GMT
Subject: CN=6adf8f95-910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:81:b2:89:93:f5:e1:56:99:69:5a:36:6e:
4d:c6:0f:b9:2e:ed:b4:58:a7:9f:e4:52:06:41:62:
92:e6:03:ce:37:e9:e6:bc:a0:7f:0f:d6:40:b3:4a:
35:d4:04:fb:8d:b7:cb:87:2b:3e:2b:97:ff:8c:82:
d1:91:d0:c8:00:9f:1d:30:b0:e0:d8:c3:7a:c9:c2:
35:58:50:64:7e:d1:9b:b6:9a:16:14:94:42:d1:98:
81:ac:55:44:98:57:a1:cb:3d:4c:48:25:24:ef:a0:
bf:20:64:a7:dc:4d:dd:a7:c9:19:fd:ff:80:c7:8d:
e4:12:b8:9f:72:3b:2a:1c:3f:44:b2:09:b0:be:05:
7d:81:95:3c:4a:b5:8d:35:5e:ac:cb:65:8e:66:5a:
6d:3e:72:46:5c:23:e2:93:59:3c:be:b5:28:c4:b2:
c0:87:5c:9f:56:e9:cf:66:c7:87:d1:22:80:9f:ef:
c6:33:e4:7f:bb:33:1d:50:7c:a2:a8:fb:cd:6a:b5:
da:83:93:45:ff:a7:17:e9:0d:f8:92:1c:24:78:9d:
f1:b6:51:4e:6e:15:e9:d5:53:88:1e:8c:bf:e4:36:
13:f4:98:9b:71:c7:99:a2:4e:e9:0f:34:f9:29:35:
63:b3:ca:15:f9:2a:7a:a3:2a:5d:76:e7:72:47:db:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:5A:B3:05:4D:50:33:25:92:50:EE:C9:35:AA:76:D4:44:F9:D1
X509v3 Authority Key Identifier:
keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ab:75:98:43:b5:47:8c:de:17:57:61:7a:c7:a4:9b:1a:8a:
0b:e6:c6:3a:6d:51:2c:ee:54:b1:db:a8:e8:34:16:1a:1e:21:
b8:45:80:2c:b1:c2:34:d1:4e:d6:56:df:03:7d:6a:01:41:8c:
17:aa:d4:fc:1d:8a:89:1b:6b:46:24:2b:62:86:24:07:9f:02:
29:74:49:dd:0e:50:b2:ea:fc:1a:96:24:2d:0f:1c:eb:2a:4c:
ab:d4:ba:6d:8e:b1:f0:82:8b:f7:bd:84:7a:a7:83:91:cf:b4:
92:e2:f4:59:d9:80:fc:df:f5:74:88:82:23:92:fc:4c:eb:d6:
df:d3:44:b3:c4:12:f5:17:86:1c:56:5c:87:56:19:c3:f4:a0:
3e:02:c9:51:df:c3:b4:12:20:5a:62:fc:64:f4:26:97:4e:87:
94:76:74:de:47:8f:01:3d:86:21:7b:36:e7:93:fb:e0:35:84:
a7:21:84:fa:05:e3:c3:2b:f8:79:1c:a7:5b:a7:8a:fb:81:91:
25:17:1d:5a:fc:c2:74:99:91:82:92:00:d6:7e:5e:bd:10:42:
e1:01:0f:3c:6e:65:63:59:cc:fd:76:3c:cf:50:eb:cb:8c:b2:
9a:41:1b:cc:5d:9d:f4:76:e8:ec:86:e6:d5:e7:1c:ce:5b:fa:
b1:c2:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:33:03 2026 by rpki-client