
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier: RKI/Byeb9fpY30gXNhWKgX0M8toe0nty0f8oRPDASXU=
Subject key identifier: 79:F8:AC:53:6F:15:A5:3E:4F:08:72:56:C7:C2:B7:12:02:2A:F5:CD
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial: 09BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number: 097A
Signing time: Tue 06 Oct 2026 20:13:42 +0000
Manifest this update: Tue 06 Oct 2026 20:13:41 +0000
Manifest next update: Tue 13 Oct 2026 20:13:41 +0000
Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: mz2MOg4oDByqzbF2FvxsdtWXm1wACMVHKdz8t3LAGrA=)
2: C6E6A146171011F1BE8A5674053D8C67.roa (hash: GdJrwOcBSARq4/FNK6vVvRNfwD4ouN5tI56UpTBLQoQ=)
3: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: fU8U+rbYp2dAehv5eyJeJOz/H0y87uhJnW3UZL3rWEw=)
4: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: RtPGThGqwF6Lt9ZojH+6P6/SywE8f7dpOmQASMjiD/k=)
5: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RHb46EhZSU7qN/QgIJjxpm52L/NmpWILd7aGEj4JQ+M=)
6: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: Q6FMSMjkfEAMKhCFNhQcSf7GYwRwpzjTWqn2bUhsSe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Validity
Not Before: Oct 6 20:13:41 2026 GMT
Not After : Oct 13 20:13:41 2026 GMT
Subject: CN=6ac55675-d2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:84:2d:36:59:15:cd:1d:e3:d5:ad:87:bf:
d7:84:f7:94:c0:a0:2d:f7:90:be:49:f0:cf:81:44:
d8:ac:42:39:9b:65:38:51:92:75:5a:3e:c3:03:35:
1a:c7:16:41:d9:73:bb:a1:25:da:b1:eb:81:e8:05:
9a:92:c0:db:8b:26:6f:d2:39:4e:f8:67:73:d5:34:
8d:0a:b1:35:f7:1f:dd:45:88:a0:d8:c8:72:79:9c:
fe:81:15:0c:5c:83:18:16:1f:d6:20:d7:5f:5c:45:
ba:09:13:90:91:48:fb:a3:5a:0d:21:66:ac:7c:b2:
98:ba:51:25:86:21:d4:29:5e:dc:f7:4a:9f:fa:80:
cf:02:fd:14:1f:af:b3:05:d4:2f:b5:7c:9c:c9:9e:
3c:79:d2:e0:78:ab:c7:b4:8b:85:68:23:5a:79:c2:
2b:89:c8:f1:43:9c:03:d8:b2:20:e0:9f:cb:dc:30:
ad:2e:44:9d:74:57:2d:88:4b:4d:77:3d:e7:5e:52:
36:a9:c7:44:e1:42:50:b3:82:b5:32:ad:7f:03:44:
5e:6c:f2:16:c5:e3:fb:dd:e2:a2:0b:d1:42:58:cb:
15:d1:bf:93:4a:37:b6:2f:e7:01:40:c4:42:d7:30:
b0:ba:08:bf:c1:31:62:53:fe:03:6d:b1:56:4b:60:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F8:AC:53:6F:15:A5:3E:4F:08:72:56:C7:C2:B7:12:02:2A:F5:CD
X509v3 Authority Key Identifier:
keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:36:08:a0:6e:5d:0a:39:4e:39:1c:26:6e:84:e5:4e:fc:da:
1b:8f:57:52:ca:16:19:5e:c0:94:c6:bc:05:f2:86:78:3b:0f:
fc:93:2c:fa:e1:9f:ac:3a:d7:b8:2a:36:01:a1:99:8f:2c:f1:
41:2f:b4:f6:4d:15:7a:82:99:37:aa:9b:98:cd:5d:0e:a2:6c:
9c:b1:ec:e0:ea:78:76:c1:31:e2:5d:da:e3:87:dd:7b:05:c6:
67:85:d5:e9:51:66:82:20:5f:f2:aa:a8:46:f1:93:90:8f:ee:
a0:85:0f:2d:b9:96:29:fa:f7:0f:29:93:86:c7:88:eb:a6:99:
06:0b:cb:e9:42:3f:33:56:19:47:34:df:a2:d1:98:5b:21:2a:
3e:78:9e:ff:f5:bd:a0:0d:e8:7e:d5:63:2a:1a:7b:38:c0:07:
10:a6:65:75:cf:b6:67:7c:b1:c5:ff:ef:8e:ea:40:02:24:bc:
4f:0d:e2:30:44:a9:f8:96:41:79:38:84:fa:37:40:48:42:04:
ee:e8:c5:15:6c:40:95:0f:4a:b9:2e:92:9b:c6:23:fc:2b:f5:
aa:3d:8f:e2:e4:1f:9d:f4:bb:14:a5:d6:d6:4e:bd:bc:5e:75:
be:b3:35:b2:94:1b:45:b5:7d:10:93:29:a6:0c:2d:48:8d:36:
4f:1e:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:31:29 2026 by rpki-client