
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier: 5Qownm3coR1C33Hj1mx/aot05wkd3Y5OsHFqs9lcvSA=
Subject key identifier: 9F:3D:95:0A:FF:D8:2D:09:A9:E0:D8:15:6E:C6:66:A8:5A:13:AC:F8
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial: 0955
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number: 091A
Signing time: Sat 04 Apr 2026 20:06:09 +0000
Manifest this update: Sat 04 Apr 2026 20:06:08 +0000
Manifest next update: Sat 11 Apr 2026 20:06:08 +0000
Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: gc+jeCFp3tx1cVOVPBVXFe3yHEKqzFyCAj5iq9YizvY=)
2: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: KT7zEvJNVvs97oYvIe5jqgLfgSdT+s+2AedPsqQHGgo=)
3: C6E6A146171011F1BE8A5674053D8C67.roa (hash: giIRr2ar8YF7Sh/tonFBshlOwMtWsPmV9SJJhoV2jPo=)
4: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: pwTpLqoix1ml/iDyvZtQl2PM0Bjf1ih1Kt+rjQ1/6gY=)
5: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: pHl2UlpqvRYqNzqgzVyVtJS995yGr9GKW6dkHakGY/A=)
6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: FXMw4gU7m6cMDVIFR2ioRmioqgFmxJcgor2Nog9jRxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389 (0x955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Validity
Not Before: Apr 4 20:06:08 2026 GMT
Not After : Apr 11 20:06:08 2026 GMT
Subject: CN=69d16f31-7430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:45:e0:17:87:68:23:21:17:46:9d:12:50:
d9:79:ef:74:cb:1a:6a:de:8c:61:35:b1:5c:97:33:
64:c8:29:30:19:47:cd:16:5b:ec:aa:b9:12:ce:93:
c6:af:a3:87:e1:87:00:3f:1a:84:34:a0:02:31:89:
b1:c0:bf:d6:79:86:d6:91:77:1f:c3:0f:f0:17:bf:
84:64:5d:8e:45:9e:c2:7c:91:99:13:b3:a8:09:91:
63:dd:5c:73:77:f6:0c:e8:58:5b:2d:54:57:ea:3f:
ab:ef:fe:6b:d7:56:51:4c:45:c4:5c:26:86:61:c1:
e9:1e:46:a5:df:e1:1b:ac:fa:6e:c3:56:d4:b2:0b:
31:d9:b3:41:c7:3b:c3:c2:d9:c5:55:0a:75:4e:21:
21:df:de:b2:a6:14:af:3a:49:d7:59:25:be:91:db:
fc:a9:9f:e0:23:61:54:cb:ad:02:4b:cc:b8:ab:a1:
95:b3:28:e5:3c:5c:7c:2d:2c:9e:73:d2:c5:04:50:
c7:0f:1f:21:b5:98:aa:65:16:2a:51:5b:31:22:7f:
9d:93:98:f4:a6:9d:83:40:b0:df:54:ae:38:49:c4:
83:84:4a:89:50:1b:04:98:69:81:38:33:cb:4c:15:
9e:47:ec:43:97:5b:c0:74:f3:70:f3:0d:0d:81:bc:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3D:95:0A:FF:D8:2D:09:A9:E0:D8:15:6E:C6:66:A8:5A:13:AC:F8
X509v3 Authority Key Identifier:
keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:be:6a:33:df:b5:d2:99:98:1f:c5:ce:06:04:7a:21:76:1a:
f7:89:5f:c4:0f:1b:f6:2a:d2:ba:9b:99:3e:90:5e:ef:99:cf:
b2:83:b3:2a:01:32:ac:a7:83:f5:44:db:23:83:b1:4f:29:96:
33:6f:ea:aa:5a:8b:b6:57:8f:70:0d:36:af:74:93:9d:d4:65:
f5:6d:71:01:d2:3a:38:1d:49:b7:6b:a6:6d:41:be:32:90:fe:
b5:26:51:77:d2:dc:c1:96:eb:ce:d7:e3:dc:08:c1:9f:a5:e1:
46:7f:75:3c:7e:30:ec:f9:4d:90:ff:56:a5:b8:19:6d:13:06:
e4:7a:61:6e:39:e0:8f:7c:f8:a4:02:9d:d3:a9:5d:a6:e5:29:
ba:ee:87:4d:00:30:0b:97:6b:37:b2:67:e8:61:d8:63:87:0d:
3e:f6:9b:a8:b9:87:55:ac:d8:dc:4f:08:3e:be:9c:dd:fa:4e:
70:73:03:81:7f:09:9c:4a:24:78:69:f5:a6:10:cb:15:a0:da:
6d:40:b7:ed:2e:26:89:73:f4:93:3e:eb:a4:8e:3e:7c:c7:64:
34:53:3e:39:09:bd:90:e4:71:1d:e8:61:fb:56:11:72:ae:63:
71:ad:a6:26:da:e6:bb:0a:cb:55:c9:11:5e:cb:87:04:ef:38:
ee:76:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:19 2026 by rpki-client