
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier: GQRuuxKaS31uFl4NfA/edsg/TSVuN/xTAtgcTdIKcFs=
Subject key identifier: 8D:D5:3F:9D:A9:FF:50:4F:AC:32:9E:7C:6F:5C:89:7E:1C:C7:87:2C
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 09DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number: 09B3
Signing time: Tue 06 Oct 2026 20:04:24 +0000
Manifest this update: Tue 06 Oct 2026 20:04:24 +0000
Manifest next update: Tue 13 Oct 2026 20:04:24 +0000
Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: J5M1RcsTRvDFUNgOB9V+v4dmlbuTEp1jMqvMBa17Q8g=)
2: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: DPCUhEYWzZw/Q4o7/HdkA1e5q+1hk1SxLOVa65/v/3A=)
3: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: SHeprPzbCJK7OlueBAVX3hu432Pz3KHbWo2lGdKMTQE=)
4: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: tGvR4Lvw2xcnvZAi3tVX941d13zG0cbdG6STnkMarY0=)
5: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: azInidenMOueD30As1H+RBAKXgDG+VqWECAoFhqLl5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Validity
Not Before: Oct 6 20:04:24 2026 GMT
Not After : Oct 13 20:04:24 2026 GMT
Subject: CN=6ac55448-84fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:11:09:fb:5a:76:fb:49:27:16:ff:ea:9d:
b8:9f:07:44:f3:d4:08:f4:e4:a6:8e:c6:00:cb:35:
4a:57:73:dc:ec:2f:22:2d:e5:11:23:30:ee:7a:ad:
51:2f:2c:53:1a:53:64:94:64:b5:11:28:2d:62:09:
81:4e:65:ab:5f:9f:4d:6a:6e:85:85:64:82:a3:3b:
05:b3:bd:40:c0:aa:f0:3b:8b:d7:41:c3:cc:9d:ad:
d4:d8:b9:24:0e:5f:cd:8a:c3:83:f0:5e:c6:a7:9a:
e4:ec:9d:fb:d7:e6:c8:68:86:19:e6:8b:3b:da:ea:
84:dd:a1:e0:3a:73:9c:c3:a4:5f:b7:15:b6:03:c1:
3e:9d:cc:2e:d4:bf:ba:b2:00:2a:d4:35:14:48:e0:
97:e8:fe:5c:43:e1:ce:f2:12:f1:b6:7e:e0:aa:0a:
1e:2a:1b:4c:87:c0:fd:d6:c9:9f:b8:9b:77:71:c9:
45:cc:53:34:f0:8f:43:31:34:e7:b2:46:82:ec:58:
75:21:1f:10:97:8c:e6:90:a5:a2:1f:38:e2:62:7c:
70:c3:44:e2:b2:e9:26:9f:30:cb:3e:61:4a:2a:3b:
fb:c4:11:14:62:e3:92:58:8f:c7:a6:02:ed:77:ea:
fd:e4:3e:14:75:c8:61:6b:ea:5e:81:32:d6:2c:1c:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:3F:9D:A9:FF:50:4F:AC:32:9E:7C:6F:5C:89:7E:1C:C7:87:2C
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:e8:03:51:ae:18:f3:5b:d9:56:63:fb:7d:ab:22:d5:61:
1c:52:18:7d:59:25:f8:28:6d:02:55:e7:7e:47:41:6d:33:d8:
89:51:fd:c0:85:3a:ea:b8:3a:63:f1:dd:9c:07:73:08:05:59:
cf:bd:13:70:5a:ec:a1:b1:78:76:04:ce:1e:76:96:5e:2a:da:
b9:57:3d:7d:b2:e3:69:84:4b:9a:17:02:3f:9e:37:bf:48:14:
83:dc:7c:6e:36:7d:72:8e:4d:d3:8b:92:11:ff:49:a5:36:be:
f9:c6:c2:ee:99:3e:33:2b:eb:7e:5c:0c:59:87:60:e4:44:b1:
79:54:e5:cf:b7:f5:ca:d4:92:5e:4d:e1:d6:78:54:e9:62:4f:
7b:29:05:dc:fe:d1:9b:7a:59:f5:b9:75:9b:b5:ba:eb:f5:dc:
7a:2c:49:cb:11:5e:39:fe:05:c1:0a:f0:d1:c4:39:0d:af:1b:
da:ed:73:6d:97:94:3b:30:af:4e:85:6c:2d:20:71:a9:6a:08:
24:1d:28:4c:65:e0:d4:15:58:ed:88:16:d4:3a:f1:db:c8:25:
ae:2b:db:4a:71:a0:d3:69:6e:74:cc:ea:7b:b3:75:78:da:57:
67:76:fa:fe:c6:57:60:3a:31:65:5c:d0:86:87:1c:c6:56:96:
0a:60:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:34:56 2026 by rpki-client