
$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: ScLRlpaC/yTC6vFSLTGe5egluj0IJXt9CZHIy38TOAA=
Subject key identifier: 4E:40:28:63:8F:D6:A1:E1:7E:3F:6C:0D:CA:12:8F:CB:AF:0F:C7:84
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0CD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0CCA
Signing time: Sat 04 Apr 2026 18:11:26 +0000
Manifest this update: Sat 04 Apr 2026 18:11:26 +0000
Manifest next update: Sat 11 Apr 2026 18:11:26 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: vy4uRU9Qr2MjK1XZHMCR+DwOFmpbEfABCTgZQvQIdVk=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3282 (0xcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Apr 4 18:11:26 2026 GMT
Not After : Apr 11 18:11:26 2026 GMT
Subject: CN=69d1544e-216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:4f:78:d5:e7:d6:77:4a:df:22:78:76:98:
e5:63:2a:6b:3d:b3:ae:cf:5a:82:2f:4f:7b:0a:b3:
63:00:65:b6:3d:ca:d9:06:c6:15:3b:cf:42:1e:d1:
30:b0:d2:d4:13:9c:52:14:7b:c5:da:05:f2:17:e3:
5e:bd:45:4a:9c:d0:4a:57:f7:8b:4d:05:47:ff:a9:
8f:b2:13:9f:be:6a:b3:bd:0b:bb:ee:9c:32:62:8a:
34:bf:7b:04:9c:2b:02:4f:fe:52:f4:7f:13:46:3a:
87:13:c7:6f:b7:ff:28:2b:ea:83:0f:c3:81:a4:f3:
d3:dd:03:24:aa:b6:18:7e:83:90:94:be:12:0c:dd:
7f:23:5c:cf:9e:90:e0:b7:61:22:82:c2:e6:17:a2:
6c:9e:eb:68:bf:b8:4e:b9:01:13:b2:47:74:21:f2:
b9:1a:2d:1e:6b:36:4f:e4:86:45:50:a8:cd:ed:ac:
4a:d2:26:75:7d:51:4c:40:d8:f5:b3:72:66:04:d0:
02:21:27:4b:b1:b8:44:72:f5:97:5b:f5:87:80:ad:
d7:44:89:66:24:e7:bc:bb:27:d7:2c:79:48:ba:f1:
51:a5:83:51:b2:e0:78:1a:fa:1b:22:8f:55:03:24:
fd:37:13:85:c0:e5:b6:72:d7:8e:d5:12:ce:ab:c7:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:40:28:63:8F:D6:A1:E1:7E:3F:6C:0D:CA:12:8F:CB:AF:0F:C7:84
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:4d:3a:91:31:94:2e:f4:7b:fe:de:86:89:59:f0:43:d8:b0:
a0:c0:c9:74:5a:55:eb:8f:52:29:a9:d9:b1:27:24:9d:72:10:
9d:47:91:6f:8e:a9:a1:38:25:e0:25:34:24:50:6b:7b:a2:52:
8f:57:2a:47:7b:5a:7a:b0:4b:d5:52:40:7f:d8:f3:1b:9e:31:
37:1c:0e:71:fa:ea:f6:87:f4:ef:96:46:b0:cd:a3:28:b2:a0:
dd:c2:1e:44:3d:aa:73:ae:9d:d4:6e:87:bc:5f:bf:6b:dc:59:
10:8c:de:9d:ea:b0:99:59:e6:7e:f5:87:20:7b:15:c7:d2:14:
bf:67:68:1b:3d:1e:3c:68:66:75:50:92:74:a7:4d:2f:75:7d:
f3:1b:35:dc:d5:40:ba:0d:22:30:1a:2c:ce:9e:58:b9:22:f0:
85:45:c7:d3:75:dc:44:8c:a3:d8:8d:fc:82:bb:03:dd:aa:49:
4a:8f:c2:d0:9b:17:66:13:b7:01:5a:08:e9:8a:e9:64:b3:e0:
fc:3c:4a:71:6f:cf:86:3f:fd:0d:b2:73:6d:1d:2e:72:39:f8:
bb:4a:2c:06:c6:e9:ce:d9:cf:c1:52:ec:83:38:04:1e:2b:24:
97:73:da:d2:1b:62:b6:09:ed:67:7c:41:87:14:44:81:6a:d5:
84:15:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:27 2026 by rpki-client