
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
File: KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json)
Hash identifier: k/wpoufaPFR7yiTESc4hM9fLHiTgPsfZDsWYr/NPBD8=
Subject key identifier: FE:7E:FA:69:B1:35:5D:D2:1D:43:B6:99:E9:74:D9:20:9C:FD:01:1C
Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
Certificate issuer: /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
Manifest number: 6E
Signing time: Wed 19 Aug 2026 08:38:08 +0000
Manifest this update: Wed 19 Aug 2026 08:38:08 +0000
Manifest next update: Wed 26 Aug 2026 08:38:08 +0000
Files and hashes: 1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: dKcJ1vRJvo2RuPs5e0UdhBV/hxx5Ai0uHTvDO/RuFRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Validity
Not Before: Aug 19 08:38:08 2026 GMT
Not After : Aug 26 08:38:08 2026 GMT
Subject: CN=6a856b70-1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:4b:67:0b:9f:47:d2:d7:de:f0:be:1f:a1:
32:f4:b9:64:4e:c9:73:7d:f9:e9:37:3b:4a:1c:3e:
41:b8:5f:31:54:59:7d:83:e8:37:fb:86:83:40:f2:
b8:4b:28:ed:2a:da:86:91:20:61:7c:9e:80:c6:77:
d7:c9:54:f0:7d:8f:98:5c:5b:82:ce:c2:cf:1d:1a:
d5:f8:d8:4f:c8:ce:24:67:b8:38:4d:48:36:67:87:
11:a0:9b:49:4b:cd:d9:dd:ed:bf:ef:82:10:5a:62:
72:9d:40:d5:87:e8:25:48:82:8d:1f:b0:ab:05:dd:
58:75:14:5e:2b:33:7e:bc:c9:7d:36:e4:a3:38:79:
84:35:10:ed:aa:c3:02:af:f5:ad:35:34:33:75:65:
4e:bf:7d:a7:57:12:18:99:89:db:f7:d9:bd:cb:11:
3b:4a:a5:6a:fc:b9:a5:71:16:ad:9e:8f:18:88:f6:
b4:05:6f:45:7e:fe:9d:ce:dd:bf:07:8d:69:45:3a:
5c:27:e9:6e:a9:96:4e:bc:13:f6:58:da:06:31:9b:
80:e0:d0:5b:36:70:17:cd:2a:4a:0f:75:77:5c:0b:
54:f7:cc:a1:45:9f:83:c0:0d:a3:d1:2e:ff:0d:f5:
63:83:0a:e8:0b:45:38:4e:f3:cd:fe:be:87:a2:7f:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7E:FA:69:B1:35:5D:D2:1D:43:B6:99:E9:74:D9:20:9C:FD:01:1C
X509v3 Authority Key Identifier:
keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:e8:8e:24:dc:0f:a1:f6:03:22:c8:b0:4a:ae:81:de:9e:
64:7f:35:00:80:9b:80:a3:f8:45:9b:41:24:44:e0:cb:51:80:
04:ec:46:3a:3c:4a:dc:b4:2b:2a:31:52:05:2b:88:5d:e1:6c:
27:5b:ae:99:ad:4d:4b:d9:5e:af:f5:77:88:d7:76:55:91:3f:
84:f5:36:e4:f5:10:2c:80:01:e9:35:bc:02:9b:4d:4f:05:dc:
9b:00:40:bc:fa:48:7b:7d:a2:8d:58:22:b1:b7:88:28:49:23:
81:00:b2:01:44:44:54:d3:55:55:0b:43:72:85:72:73:29:c0:
30:a4:fb:3f:e0:c3:d1:6f:17:74:01:9f:80:c1:06:3d:b0:94:
82:79:86:da:e2:2e:ab:17:80:ce:1c:a8:f9:7a:9f:ff:5f:49:
11:af:1c:71:dd:be:04:16:a0:43:c6:ef:ac:9e:3e:57:1f:e2:
66:d9:d6:fd:5d:74:35:d2:12:bc:47:dd:b9:8e:12:18:ac:0c:
4a:cf:7a:00:b6:f7:5a:6e:48:6f:dd:4d:d1:46:87:4a:44:27:
5b:94:4d:0c:9e:21:93:d6:c7:59:48:70:b9:83:94:6c:70:95:
62:04:74:2e:89:13:e2:8c:dd:af:4c:db:38:21:15:35:88:aa:
c0:ff:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:40 2026 by rpki-client