
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
File: KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json)
Hash identifier: XasU34ouDmJFWjXr1/L09HPbTjfn9UlZON8iRZiai/w=
Subject key identifier: F3:30:59:A3:2A:ED:BC:77:87:F3:E5:31:0F:95:0C:0A:03:8A:E0:6F
Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
Certificate issuer: /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
Manifest number: 41
Signing time: Thu 21 May 2026 08:35:42 +0000
Manifest this update: Thu 21 May 2026 08:35:42 +0000
Manifest next update: Thu 28 May 2026 08:35:42 +0000
Files and hashes: 1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: vlF+AjKG5UbGVe9egH7jUnzbGwxlG3nyh4mC463VMQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Validity
Not Before: May 21 08:35:42 2026 GMT
Not After : May 28 08:35:42 2026 GMT
Subject: CN=6a0ec3de-24f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:05:cc:f3:77:08:43:03:b9:52:39:2d:12:
43:26:0c:74:5d:ed:1c:a4:23:d0:7e:21:49:02:01:
55:02:73:70:a6:e7:bc:c9:56:c6:e7:4a:5d:35:08:
20:c7:b6:e1:4b:09:8d:59:69:e6:90:b8:fc:1d:53:
70:4f:00:c9:1c:69:d9:9a:12:bb:70:2d:92:35:77:
b8:b2:1f:cf:81:47:68:35:97:01:ba:b4:7c:09:80:
a2:db:53:df:6e:87:ce:48:0d:c2:c3:33:bd:33:dc:
91:e7:15:3e:de:f8:bd:90:87:de:f1:0c:5b:6f:32:
de:c7:6c:26:3e:76:1a:c1:c3:39:2f:37:73:2a:61:
1c:b3:81:f4:e1:3f:92:6a:44:69:f3:95:d4:3d:46:
f9:af:9c:b3:22:ba:0f:5d:44:23:ba:da:bb:a2:6c:
81:8f:a2:c3:39:45:44:81:c9:2a:d5:13:3a:b2:3c:
eb:ce:8d:4e:ed:b1:29:fb:eb:6c:bc:5b:99:25:2a:
60:46:f5:09:53:4f:c5:d3:f2:b2:8d:32:41:ae:92:
0b:ed:aa:66:61:66:93:42:68:2c:01:52:be:e1:72:
ec:41:84:1e:fc:ea:48:14:f8:4c:72:a1:26:a1:29:
e0:f1:fd:53:3a:55:c2:28:27:13:e1:66:47:84:d8:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:59:A3:2A:ED:BC:77:87:F3:E5:31:0F:95:0C:0A:03:8A:E0:6F
X509v3 Authority Key Identifier:
keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5d:43:e4:dc:b6:61:92:e6:3b:1e:ef:83:c5:a6:20:a9:a4:
f9:36:9e:3c:58:5f:3c:ca:25:5f:8c:2a:92:00:09:6f:c8:a1:
56:28:86:49:d3:ce:8a:d4:5d:f6:80:38:89:9d:f3:37:48:04:
9e:95:2a:ea:0a:45:e4:13:be:51:cc:be:57:3e:74:11:b2:82:
c4:54:df:ce:a3:28:dc:05:6f:08:17:b8:20:05:c8:44:0f:e8:
f2:48:67:f6:1f:f1:4c:d5:74:4c:02:a5:24:1d:d5:f3:c3:39:
c0:b0:b9:f5:8d:93:d3:45:2c:9c:9c:6b:df:bc:47:c5:a9:4f:
a1:ef:a9:fe:15:5a:9e:47:c2:ca:85:d3:d9:13:0d:42:dc:c3:
6c:9a:b4:b2:c7:10:16:a3:2d:7f:a0:51:fc:7a:3f:83:46:92:
1a:23:c0:68:25:9d:48:47:a9:a4:81:31:e1:a6:a2:4f:24:29:
8b:11:46:d5:58:9b:96:bb:56:b5:44:3b:3b:50:a8:f5:ba:5d:
d3:7a:0d:7a:18:b8:8e:bf:28:87:f8:39:ba:d0:34:bf:1d:31:
d7:ea:e9:74:5c:33:e0:f7:90:74:e2:30:c8:ee:92:50:40:4a:
c6:30:18:a2:53:17:d2:e7:1d:63:1e:4c:46:25:53:f8:17:5e:
91:e9:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:40 2026 by rpki-client