
$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: JgFPuVIAvGjUvpmq1OWq2dmHJ+66SmHGPRUZfYtLXSI=
Subject key identifier: 40:D5:78:3D:99:6B:35:D7:25:07:A6:D1:EE:47:59:FB:D0:2C:B2:26
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0CFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0CF2
Signing time: Mon 22 Jun 2026 18:17:25 +0000
Manifest this update: Mon 22 Jun 2026 18:17:25 +0000
Manifest next update: Mon 29 Jun 2026 18:17:25 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: HM9iLrjr1ijp6aYjCpP9UtdLAS18ze5sYI57I7CAuwc=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3322 (0xcfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Jun 22 18:17:25 2026 GMT
Not After : Jun 29 18:17:25 2026 GMT
Subject: CN=6a397c35-ec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:a2:a3:53:4b:e6:a3:3e:88:1d:14:29:01:
ff:40:98:21:f4:b5:2b:c0:27:e4:17:c9:7f:7a:36:
ef:53:9f:c1:ef:11:ca:2b:43:94:43:9d:ce:3f:77:
c2:09:97:05:ab:fc:fe:a5:4f:fe:17:c1:46:57:35:
fd:16:ff:af:2b:d7:8e:af:08:c2:1c:ee:05:30:ec:
cd:a8:4c:71:df:37:17:38:de:d6:c6:51:47:86:30:
4a:0b:9d:7d:dd:a6:cf:78:c4:b4:20:c4:b6:b0:78:
bd:07:90:46:eb:8e:d7:33:7f:07:cb:b2:c5:b0:d7:
4b:74:50:07:75:d0:15:7c:8b:36:12:98:2c:9c:71:
51:04:40:92:fd:45:0f:5b:2d:2b:f9:87:d5:f1:8a:
57:8e:97:dc:4a:2a:0b:0e:df:74:6c:70:5a:f9:ba:
a9:67:4c:7e:24:59:3c:35:ca:81:d2:a4:48:58:2f:
67:56:8a:36:79:6b:7b:26:6e:42:2d:3d:93:1b:3f:
c8:1a:bb:5d:df:0f:38:06:50:38:4d:72:e2:a0:ee:
97:8f:f7:46:2a:69:74:0d:17:0e:d1:19:5d:1a:b4:
ce:f6:bb:c6:76:4a:73:de:a8:01:23:f1:27:6b:fa:
78:70:51:ec:cf:91:d5:92:e0:68:d5:0f:3b:30:73:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:78:3D:99:6B:35:D7:25:07:A6:D1:EE:47:59:FB:D0:2C:B2:26
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:0f:cb:cc:ff:f0:33:da:32:66:f7:00:e4:ae:0d:5b:1b:
2f:04:0f:d4:1b:f9:e7:36:f0:35:e2:0d:b4:c4:d5:9c:a6:46:
00:a1:77:4c:9a:60:72:1c:de:87:65:a5:d2:92:b6:6c:0d:f0:
5f:0d:a9:28:00:83:36:ab:e2:f6:fc:8b:ea:cc:32:52:23:73:
75:05:32:60:8a:59:bd:99:21:fb:36:5c:78:da:01:08:9d:c5:
41:0f:a2:ad:f8:e0:58:69:ef:7a:5c:4c:e9:6a:c5:0a:90:a2:
e8:77:0a:8a:dc:9c:49:4e:e2:6e:4e:a0:5d:4c:af:a4:8d:99:
5a:38:ef:e4:14:20:12:9e:fc:77:2d:77:7f:8a:54:2c:95:72:
8e:0f:ec:5a:2d:fa:c0:8c:64:8b:fc:f8:c8:30:3e:97:9d:be:
8e:86:4f:42:fe:8e:c5:8d:14:5e:09:c2:c0:4a:8d:93:98:81:
e7:8f:df:b4:3b:ef:88:15:c7:28:44:6d:69:ea:33:3f:30:eb:
59:ea:a2:44:ef:c0:39:a0:16:3c:22:fd:5a:b5:75:67:c1:2b:
c8:bd:d8:e7:07:06:24:aa:ea:9a:82:a7:96:00:9a:9f:de:c0:
2d:bb:fe:86:53:ab:9c:bf:9b:52:f1:26:74:cc:08:14:f9:7d:
b7:fc:4a:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC
OEQ5QUIyRUMwHhcNMjYwNjIyMTgxNzI1WhcNMjYwNjI5MTgxNzI1WjAYMRYwFAYD
VQQDEw02YTM5N2MzNS1lYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/qio1NL5qM+iB0UKQH/QJgh9LUrwCfkF8l/ejbvU5/B7xHKK0OUQ53OP3fC
CZcFq/z+pU/+F8FGVzX9Fv+vK9eOrwjCHO4FMOzNqExx3zcXON7WxlFHhjBKC519
3abPeMS0IMS2sHi9B5BG647XM38Hy7LFsNdLdFAHddAVfIs2EpgsnHFRBECS/UUP
Wy0r+YfV8YpXjpfcSioLDt90bHBa+bqpZ0x+JFk8NcqB0qRIWC9nVoo2eWt7Jm5C
LT2TGz/IGrtd3w84BlA4TXLioO6Xj/dGKml0DRcO0RldGrTO9rvGdkpz3qgBI/En
a/p4cFHsz5HVkuBo1Q87MHPjewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDVeD2Z
azXXJQem0e5HWfvQLLImMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4
RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk
Z05VcnRZTnBQREc0MmFzdXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATP8Py8z/8DPaMmb3AOSuDVsbLwQP1Bv55zbwNeINtMTVnKZGAKF3TJpgchze
h2Wl0pK2bA3wXw2pKACDNqvi9vyL6swyUiNzdQUyYIpZvZkh+zZceNoBCJ3FQQ+i
rfjgWGnvelxM6WrFCpCi6HcKitycSU7ibk6gXUyvpI2ZWjjv5BQgEp78dy13f4pU
LJVyjg/sWi36wIxki/z4yDA+l52+joZPQv6OxY0UXgnCwEqNk5iB54/ftDvviBXH
KERtaeozPzDrWeqiRO/AOaAWPCL9WrV1Z8EryL3Y5wcGJKrqmoKnlgCan97ALbv+
hlOrnL+bUvEmdMwIFPl9t/xKpA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:37 2026 by rpki-client