
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: 0gD1I7jNYwhPKGOGGuwdXWLLp5Jizp/SlgMQqabS+zA=
Subject key identifier: 53:03:EF:4F:3E:AF:54:1F:C6:0A:02:F2:5C:54:40:B3:F7:69:F1:E0
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0D2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0D27
Signing time: Sun 04 Oct 2026 18:17:15 +0000
Manifest this update: Sun 04 Oct 2026 18:17:14 +0000
Manifest next update: Sun 11 Oct 2026 18:17:14 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: LOt61TFdi0pMcFwXR4NxYhLnvSJJCM0bnAMqptWWyWI=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3375 (0xd2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Oct 4 18:17:14 2026 GMT
Not After : Oct 11 18:17:14 2026 GMT
Subject: CN=6ac2982a-2349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:50:40:82:93:93:ff:2c:62:9e:cd:54:8a:2b:
c3:8e:13:91:57:3c:7e:9f:c6:b8:fa:cc:40:6c:ef:
95:6c:70:47:f2:57:91:07:b3:37:05:3a:8d:f0:8f:
db:80:3e:42:ab:5c:be:20:55:e0:10:da:66:f7:34:
02:d2:6f:9b:8b:25:71:46:fa:dd:b8:99:9c:96:2e:
64:90:27:16:ea:3a:e3:3e:37:21:41:de:7f:76:6d:
d0:10:3a:c3:0b:e7:ba:b1:02:6c:85:23:81:98:23:
cc:3c:f0:8a:d0:b6:99:d6:6e:0c:ae:a9:bd:bf:29:
01:4c:52:27:26:c9:ac:f3:9a:44:b6:42:88:c6:e5:
34:56:23:9d:ab:b1:12:8c:74:39:0b:b9:06:48:38:
c1:ef:9f:a7:c7:fb:bc:da:e0:e1:b5:cf:bc:94:04:
15:5e:09:b9:01:e2:9c:11:81:ab:04:76:9e:5c:48:
36:b6:f3:9a:1a:db:68:06:81:a3:ef:f4:ac:73:6d:
c1:d0:c7:1b:ca:28:99:35:a8:0e:eb:24:34:b2:79:
28:c7:38:ab:4a:c4:f5:78:ea:da:54:d2:4d:b2:7a:
77:54:b7:4f:44:a5:f9:82:44:4d:8b:f8:a2:dc:2f:
4f:01:ee:d0:a7:e3:c4:ed:90:a7:40:aa:ba:4a:7c:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:EF:4F:3E:AF:54:1F:C6:0A:02:F2:5C:54:40:B3:F7:69:F1:E0
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:fc:95:fa:a3:93:73:81:ef:a5:07:70:1b:b7:32:49:4c:
98:9a:87:b6:c0:5b:4f:8a:bf:d9:84:93:49:80:d5:40:38:8a:
71:6e:1a:d9:26:28:a5:6b:f2:85:db:70:2b:b8:fe:02:57:a4:
4c:04:70:d1:25:0d:26:f4:6b:6d:77:06:c6:8a:fe:1a:7c:be:
f6:bb:ed:30:33:c8:b0:df:eb:78:25:be:5a:38:00:00:92:35:
3a:4a:d0:73:42:fc:9e:c4:08:a1:18:8e:d8:10:4c:ab:a1:3d:
55:8b:27:01:0a:a0:04:db:69:e8:a4:89:fe:c0:48:41:56:98:
af:af:e3:ec:f6:e8:41:c2:94:34:8a:aa:5c:fa:f4:f0:3e:af:
63:f6:e0:ea:15:60:dd:ea:15:81:6d:40:83:b2:d3:9c:c2:f8:
2c:c0:1c:72:7d:27:5e:21:58:55:32:c7:d6:9d:8b:08:40:4e:
e4:2c:71:99:9e:29:e2:7b:c0:a3:55:b0:37:d1:6d:24:26:72:
b4:5f:a0:fa:65:9f:7b:40:ca:31:b7:37:78:78:68:37:7b:06:
be:fe:27:03:8b:06:56:d7:ee:da:80:7d:1e:6e:dd:10:e1:25:
57:b8:9e:ee:80:5c:23:ec:3c:af:2a:4a:1f:c5:c6:dd:b6:d0:
80:d0:f6:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC
OEQ5QUIyRUMwHhcNMjYxMDA0MTgxNzE0WhcNMjYxMDExMTgxNzE0WjAYMRYwFAYD
VQQDEw02YWMyOTgyYS0yMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA71BAgpOT/yxins1UiivDjhORVzx+n8a4+sxAbO+VbHBH8leRB7M3BTqN8I/b
gD5Cq1y+IFXgENpm9zQC0m+biyVxRvrduJmcli5kkCcW6jrjPjchQd5/dm3QEDrD
C+e6sQJshSOBmCPMPPCK0LaZ1m4Mrqm9vykBTFInJsms85pEtkKIxuU0ViOdq7ES
jHQ5C7kGSDjB75+nx/u82uDhtc+8lAQVXgm5AeKcEYGrBHaeXEg2tvOaGttoBoGj
7/Ssc23B0McbyiiZNagO6yQ0snkoxzirSsT1eOraVNJNsnp3VLdPRKX5gkRNi/ii
3C9PAe7Qp+PE7ZCnQKq6SnxTqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMD708+
r1QfxgoC8lxUQLP3afHgMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4
RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk
Z05VcnRZTnBQREc0MmFzdXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkVr8lfqjk3OB76UHcBu3MklMmJqHtsBbT4q/2YSTSYDVQDiKcW4a2SYopWvy
hdtwK7j+AlekTARw0SUNJvRrbXcGxor+Gny+9rvtMDPIsN/reCW+WjgAAJI1OkrQ
c0L8nsQIoRiO2BBMq6E9VYsnAQqgBNtp6KSJ/sBIQVaYr6/j7PboQcKUNIqqXPr0
8D6vY/bg6hVg3eoVgW1Ag7LTnML4LMAccn0nXiFYVTLH1p2LCEBO5CxxmZ4p4nvA
o1WwN9FtJCZytF+g+mWfe0DKMbc3eHhoN3sGvv4nA4sGVtfu2oB9Hm7dEOElV7ie
7oBcI+w8rypKH8XG3bbQgND2Mw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:15:20 2026 by rpki-client