
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier: G5qw+7j6HhrHrXP3leWZRUtWYjiqyDqrP4SFUSgfa/E=
Subject key identifier: 85:94:42:45:08:0B:64:B9:B5:B6:D1:9B:6D:FA:AD:8C:38:14:C0:F8
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial: 03BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number: 03A6
Signing time: Tue 21 Jul 2026 01:34:42 +0000
Manifest this update: Tue 21 Jul 2026 01:34:42 +0000
Manifest next update: Tue 28 Jul 2026 01:34:42 +0000
Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: 8Y+Qaoln53n+G/TycNZpRN5opaQpTSMRkR+U0yLX1tg=)
2: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: oiSsK2P8HRB4FPzmPdMZC05vhJRqZjFnda/dRmDD5yE=)
3: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Kkc4FrDSL9TyqmO89DwT+TFSNidqWuKseH0zs4kx+8M=)
4: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: V7aBUIeHjnuFGSXcgQjlU9vZiTp/iM8MzCOM0K2/HNc=)
5: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: 8BhnI271pXtssKyoUU3+BWjfHdoZbJ1UUEIVs2VtNjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 958 (0x3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Validity
Not Before: Jul 21 01:34:42 2026 GMT
Not After : Jul 28 01:34:42 2026 GMT
Subject: CN=6a5eccb2-8fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:20:f9:d6:05:76:f2:ff:31:d7:57:52:57:
fa:e3:9a:61:76:3c:ac:f0:2a:14:47:9d:5f:ae:02:
e8:49:0e:02:19:16:6e:68:89:3e:65:43:36:b4:25:
48:8c:79:16:f7:d4:1d:fd:56:3c:e0:b4:52:98:4e:
1e:a9:95:07:59:d5:e2:ac:29:3e:52:53:8d:b1:0e:
a5:67:9c:e0:be:2e:5c:33:1d:62:74:b5:86:1e:f4:
f3:a9:05:61:12:97:1e:b5:63:e4:10:d8:b8:60:06:
91:63:83:fc:2b:60:17:02:cb:e9:15:e3:35:66:00:
51:36:66:37:03:a5:29:81:bd:ad:c1:c5:03:8d:4d:
16:81:bc:2f:98:c9:04:54:c3:ff:26:24:0b:2a:5a:
d7:b5:3d:00:4f:99:a9:b4:2e:6f:aa:93:be:96:e1:
6d:39:eb:d3:98:61:63:66:a4:97:28:30:7f:84:74:
75:f0:a4:35:a1:3f:8d:89:8f:c8:88:c5:11:9d:f0:
d4:c6:39:27:b3:96:69:ac:d7:fa:90:98:17:42:2c:
94:e2:34:b8:20:fe:1b:fe:db:5a:fc:73:c4:49:84:
22:6f:58:6d:f3:ad:28:86:26:06:84:71:19:a3:c8:
92:07:a9:b0:7d:36:9d:b9:cf:3e:3c:04:0c:aa:41:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:42:45:08:0B:64:B9:B5:B6:D1:9B:6D:FA:AD:8C:38:14:C0:F8
X509v3 Authority Key Identifier:
keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:43:a2:e9:2e:a3:b0:55:7b:de:6b:77:cf:e2:4d:88:aa:
80:79:35:c0:ca:41:df:52:a5:5a:ef:23:fa:ad:eb:7e:1d:2e:
c8:c8:13:11:6e:98:37:2e:16:a0:ea:39:7f:48:15:c0:dd:81:
ad:24:32:ec:0f:77:78:a7:c1:8a:43:01:d9:b5:93:22:40:02:
f7:bb:96:8a:98:3b:68:f8:4c:ab:2c:2a:18:39:fe:13:11:91:
f3:1c:4a:61:58:56:9e:c0:47:d9:65:37:e5:4e:f7:d7:4e:17:
78:f4:b8:79:3c:b3:eb:fa:5e:dc:20:e9:7e:20:14:7e:d9:30:
3a:f0:66:0e:66:90:0e:b4:b2:4e:9a:bc:c9:3a:c4:75:a5:24:
dc:31:75:3e:4c:78:f6:06:15:c0:37:6f:ad:c1:34:ac:aa:f2:
a6:5e:59:3f:af:cd:09:15:d5:89:ef:23:98:22:21:81:f0:57:
a4:69:1b:d6:a7:04:27:3d:a3:70:82:67:56:7d:42:71:92:dc:
b5:d7:37:87:a4:2b:be:39:55:a2:55:a5:f8:a8:9c:12:22:4a:
03:1e:70:13:d9:82:9b:c0:69:e3:a3:08:28:db:e4:25:18:d3:
eb:81:d6:84:bb:91:ee:42:85:cb:17:69:75:1a:a5:bf:d5:05:
16:d7:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:07:45 2026 by rpki-client