
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
File: KtPYi16OCwUUGjvJL4XkJzoFYqE.mft (raw, json)
Hash identifier: uTCv3bZXWGs7dJzfCgqekg+fzfUa+Smo24CRPXPpuXU=
Subject key identifier: FD:04:A4:B7:EE:0A:8C:F1:85:7F:9E:D3:8E:93:4E:D2:BC:28:14:21
Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
Certificate issuer: /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
Manifest number: 0200
Signing time: Mon 19 Oct 2026 03:44:51 +0000
Manifest this update: Mon 19 Oct 2026 03:44:51 +0000
Manifest next update: Mon 26 Oct 2026 03:44:51 +0000
Files and hashes: 1: KtPYi16OCwUUGjvJL4XkJzoFYqE.crl (hash: /7HRbY7vwT+VwPxNMDEvIk7ZhZvzUx7eI0Vg4SL/694=)
2: 1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (hash: KGc0TSSoFoKqnsUVoh0np4Cm7NUT/EBHE/n1p8DVqTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Validity
Not Before: Oct 19 03:44:51 2026 GMT
Not After : Oct 26 03:44:51 2026 GMT
Subject: CN=6ad59233-0f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:33:1b:ca:be:59:8a:f8:01:1c:c0:47:b0:
23:ab:26:2d:11:e2:58:63:d0:3c:3b:4f:f0:4b:d4:
4f:87:be:d9:0d:59:39:2c:b3:bc:c5:44:bc:d7:c7:
65:d1:40:a4:39:81:ac:71:e9:8f:7f:a4:be:94:08:
3a:a6:fb:cf:ec:81:a9:71:94:98:fa:48:67:64:2d:
df:95:e3:2a:bb:18:db:70:40:d3:ee:c2:c9:9a:8a:
ab:01:b0:e1:6f:52:ac:ee:99:6a:12:f3:62:33:cf:
48:71:f0:5d:be:31:b1:c2:5c:eb:33:3e:04:ab:ac:
80:93:40:e8:ea:5c:29:bb:3b:4b:51:35:5d:96:7b:
72:73:5f:b5:91:c0:07:6b:5e:ce:ed:e7:fb:d7:6c:
38:41:b4:d3:98:11:b1:4e:4f:70:04:ab:26:8f:f8:
2d:b5:b5:78:44:a1:6b:6f:0e:91:b7:4f:e6:0a:13:
a7:22:77:71:6b:1d:dd:78:48:73:0f:18:1b:48:96:
54:27:57:44:25:86:22:27:74:22:0d:6c:5e:1e:fc:
be:5e:e8:ca:3d:51:87:e0:c5:47:07:96:09:fb:6f:
e3:14:ce:83:e4:8f:ba:f3:75:bc:4d:bb:94:cb:d7:
fa:55:84:3e:b8:cf:d9:ba:b9:bc:a8:48:d4:09:90:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:04:A4:B7:EE:0A:8C:F1:85:7F:9E:D3:8E:93:4E:D2:BC:28:14:21
X509v3 Authority Key Identifier:
keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:95:99:f7:29:ae:22:f3:7a:98:b8:d3:c9:3f:11:35:b4:5f:
2d:f7:cb:e5:3e:07:6b:52:af:04:a3:12:90:2d:8f:22:aa:b5:
82:d9:c2:f9:a8:da:25:8a:77:55:77:1b:ad:a8:06:bd:45:f8:
a5:a7:4c:47:9b:cc:38:f6:b7:4f:f4:7e:5a:44:f0:09:89:9d:
99:58:ef:7a:97:f7:bd:80:57:84:74:ee:61:ca:a6:c0:c5:d6:
f3:18:72:3e:0c:a4:87:63:30:3d:8a:ed:97:49:d8:f8:27:4b:
50:6a:10:dd:39:11:1c:02:ca:84:c0:36:47:38:b4:f1:41:95:
67:7b:59:9f:f6:cf:aa:20:be:f8:be:4f:52:e7:2c:e5:f9:e8:
f5:93:f1:0b:b3:5f:ad:16:28:3a:a5:d1:32:39:1c:67:ef:41:
1a:16:32:ca:0a:18:52:e0:c2:3f:c4:71:c9:bc:a8:fe:ed:30:
12:81:24:6a:4e:22:81:b4:6b:f6:da:c0:d6:60:ec:12:c6:85:
a3:24:09:d3:5b:2a:00:20:91:56:d5:c1:2d:10:d8:fc:9f:a6:
cb:a4:47:74:18:c5:2d:2c:33:79:3b:a0:82:68:ed:28:94:30:
ab:89:ac:91:00:02:c2:7b:85:fc:88:1b:a5:9f:84:b8:ac:b4:
3a:50:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:15 2026 by rpki-client