
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
File: KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json)
Hash identifier: TIZrR7lmXKecr+SpFwecpZTeXvdUoRsxMs6XtqWM0R4=
Subject key identifier: B5:21:10:D1:BC:66:89:16:7D:72:D6:8D:CC:E4:76:99:63:66:D2:92
Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
Certificate issuer: /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
Manifest number: 85
Signing time: Sat 03 Oct 2026 08:20:26 +0000
Manifest this update: Sat 03 Oct 2026 08:20:25 +0000
Manifest next update: Sat 10 Oct 2026 08:20:25 +0000
Files and hashes: 1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: rtto0U3HCvpG5Yy3ZBWSu/KR42nSYkT0To/wC72f9Y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Validity
Not Before: Oct 3 08:20:25 2026 GMT
Not After : Oct 10 08:20:25 2026 GMT
Subject: CN=6ac0bac9-4c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:ba:b5:32:ed:8c:87:11:e8:28:1c:9a:5f:
2a:76:3a:73:66:3e:a0:99:c9:4e:04:ea:af:cb:2b:
e3:c8:ef:e3:29:40:fa:60:c8:62:46:d6:ac:3c:74:
80:8d:68:4c:7e:3b:99:ab:2d:ae:db:3e:1c:d1:fa:
3a:6b:a1:9f:8b:2b:59:2d:5a:24:dd:c2:ad:2e:66:
ed:cc:98:b6:a4:20:27:1a:fc:29:69:79:68:04:42:
0d:39:24:a5:fb:eb:11:91:47:61:60:fb:67:ac:22:
28:26:d2:f8:90:90:00:f4:39:90:08:bf:eb:de:b6:
85:ea:48:e4:8e:64:82:70:1d:4f:e0:d0:f8:b4:5c:
25:8c:cf:14:5d:4a:e4:df:f4:0c:01:4c:f3:0a:68:
c1:01:5b:c7:83:8b:18:3a:6a:a2:8e:e3:d0:fa:5c:
70:02:83:72:a0:15:85:a3:93:1d:f2:54:76:d9:b5:
66:c0:4d:7e:98:61:ec:4b:33:4d:5f:96:b0:c9:95:
0e:da:6c:c1:22:6b:c3:27:d0:d2:6a:e9:4d:76:27:
75:20:a5:78:fb:d0:8f:43:81:bc:f9:1f:c5:3a:6d:
5e:ea:14:f9:83:1e:97:09:7a:01:ca:0a:7f:e4:60:
26:54:63:75:6c:ea:ff:93:42:1a:d2:f3:ef:ee:9f:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:10:D1:BC:66:89:16:7D:72:D6:8D:CC:E4:76:99:63:66:D2:92
X509v3 Authority Key Identifier:
keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:ad:cb:9e:80:83:49:b1:80:e5:38:0a:f1:48:8a:7f:4d:
f9:25:7f:ff:e6:1b:0c:6b:53:94:df:d4:28:34:74:08:3a:fb:
0a:64:1d:6c:f6:10:84:fb:36:5f:e8:07:52:94:bb:ee:33:40:
29:b4:e0:87:b9:cf:0f:c2:e0:7e:19:7e:f5:b5:08:a9:23:0f:
67:26:51:4f:70:5a:e6:e8:ca:a3:80:1e:1b:0f:c6:6e:58:d1:
28:cd:25:4b:c5:f9:9f:95:04:ad:bf:67:c3:bf:3e:49:d1:61:
42:a0:81:6c:30:06:18:d3:d1:bc:8c:3b:7b:81:5d:50:58:24:
1c:72:a5:29:ef:db:4d:6a:93:e9:e8:0e:16:a6:6f:d2:86:05:
b0:7d:76:1a:08:25:42:0a:f4:a1:fc:79:37:1f:95:fd:a7:af:
36:af:92:9d:62:6b:57:1a:a5:c2:ea:80:32:8a:1e:1c:7b:6c:
38:11:31:51:8f:f6:8b:a3:b7:3d:e1:54:97:5d:05:30:8f:ef:
9b:92:1f:d9:05:bf:19:52:4c:94:95:32:59:8e:d1:4a:04:6c:
9b:0b:03:13:6e:92:50:68:12:d2:97:c3:68:8f:a4:96:ae:85:
4f:5b:7c:56:1e:9b:c9:b4:64:1a:15:1e:3b:68:21:cd:5c:8e:
5e:b1:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:32 2026 by rpki-client