
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json)
Hash identifier: BnOKpUXBwYvyyrzlxtDVyWgZAxO1G85pB8HDLI8oz3s=
Subject key identifier: D0:9B:25:C8:0E:78:69:44:E9:F8:A7:C8:6E:33:56:06:72:D7:3B:DD
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial: 0F0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
Manifest number: 0F00
Signing time: Fri 28 Aug 2026 17:39:21 +0000
Manifest this update: Fri 28 Aug 2026 17:39:20 +0000
Manifest next update: Fri 04 Sep 2026 17:39:20 +0000
Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: G2ItLjZwp1xdUaLu9wv7S6oLhKVCbl+CU//CfveWu40=)
2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: I3a+AQK6qVCuGM8BlFl5ofUbKIxiO2UA8EiuLaXOEkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 17:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3851 (0xf0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Validity
Not Before: Aug 28 17:39:20 2026 GMT
Not After : Sep 4 17:39:20 2026 GMT
Subject: CN=6a91c7c9-f2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:1b:d7:a8:e2:1a:bc:58:2c:e0:96:4c:c5:
13:a7:4f:a7:cb:a8:50:34:ed:50:76:98:ed:24:f6:
3e:40:80:54:d7:8b:41:ea:d3:0c:04:ba:aa:07:9e:
f9:24:12:d8:87:b6:ba:a9:fa:f0:65:91:2c:71:81:
a1:24:ff:b3:fd:97:a8:00:dc:49:d6:20:2e:f1:76:
75:e0:8c:e9:c5:84:47:3d:3c:65:7a:93:12:f8:19:
18:6d:b1:be:e6:76:eb:77:0e:bc:1d:31:91:96:fb:
82:9b:2b:06:62:e5:78:be:88:40:43:1e:d7:11:92:
5d:14:fc:9a:94:cd:72:14:ea:08:66:7b:f4:8b:59:
03:5a:4b:12:dd:8f:59:cd:79:1b:a8:6b:6b:75:69:
84:b3:39:0a:b0:d9:cb:e2:09:73:26:09:c0:c3:5a:
f1:70:24:18:16:8f:37:21:69:ec:8b:f4:7b:e1:ed:
ff:ec:98:81:a1:fe:8f:d0:e5:ea:f2:ee:c8:b2:3e:
db:a5:47:17:b4:7f:58:ce:29:27:15:14:61:f2:72:
cf:c5:65:07:2f:ee:bf:cf:9f:05:38:fc:a9:90:fe:
56:e7:aa:3f:b1:92:ec:7c:e3:35:06:c9:0a:e2:92:
61:58:7d:73:d8:f5:7a:95:b8:5b:e7:59:de:d3:ef:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:25:C8:0E:78:69:44:E9:F8:A7:C8:6E:33:56:06:72:D7:3B:DD
X509v3 Authority Key Identifier:
keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:70:c9:36:bd:e7:03:a9:73:eb:7a:8f:08:99:08:bf:c9:c2:
7e:55:fb:66:d4:bd:f2:7d:4e:6d:e8:22:e4:0d:07:07:23:15:
5e:ec:8a:29:35:24:85:30:03:07:58:63:e3:5e:1c:22:eb:6e:
d3:42:29:27:56:d7:f7:12:60:d4:42:57:87:1a:02:02:70:ba:
c5:c8:7a:fd:e7:6c:98:8b:06:d1:10:b0:5b:a6:30:65:ce:1a:
a4:05:b3:bd:62:6b:bf:dc:b3:81:f7:1d:ee:3b:b6:f3:10:eb:
ae:a0:c7:e6:0c:09:cd:73:6e:9f:a6:89:ad:f4:cf:ee:c8:38:
a1:3e:0c:c9:62:b6:fa:26:ad:ed:18:bd:22:44:fd:e4:8f:e8:
ea:8a:46:fe:6c:fb:a9:ac:1b:a6:1d:68:89:bb:02:86:50:f8:
c7:0c:3e:9f:3f:56:06:f3:f1:e7:2f:74:b1:1a:a8:47:20:65:
d4:7c:68:73:88:52:f2:10:91:52:1f:16:41:9f:43:95:e5:78:
af:79:5a:a1:c1:40:a5:60:e4:23:a6:b5:02:17:44:17:f4:34:
4a:3a:8c:ac:aa:61:7a:dc:74:dc:64:bc:73:26:2b:6a:43:7d:
49:9c:61:2a:21:a1:e0:68:74:c3:85:37:43:d8:20:5a:43:21:
2b:81:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:47:32 2026 by rpki-client