
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File: Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier: SajEWYB14D+noFsOZw2neTJTy1Rv0QFRIQXo7lS11Rs=
Subject key identifier: 94:17:A1:2F:70:1E:7A:8C:72:7E:02:86:DA:F1:FB:DA:BF:40:13:27
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 09C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number: 099B
Signing time: Thu 20 Aug 2026 19:55:58 +0000
Manifest this update: Thu 20 Aug 2026 19:55:57 +0000
Manifest next update: Thu 27 Aug 2026 19:55:57 +0000
Files and hashes: 1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: gAR2K7mJxudX66U0vE/lbeJqoRr3fo71gXLkqf6V0RQ=)
2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: SHeprPzbCJK7OlueBAVX3hu432Pz3KHbWo2lGdKMTQE=)
3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: tGvR4Lvw2xcnvZAi3tVX941d13zG0cbdG6STnkMarY0=)
4: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: DPCUhEYWzZw/Q4o7/HdkA1e5q+1hk1SxLOVa65/v/3A=)
5: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: azInidenMOueD30As1H+RBAKXgDG+VqWECAoFhqLl5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2499 (0x9c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Validity
Not Before: Aug 20 19:55:57 2026 GMT
Not After : Aug 27 19:55:57 2026 GMT
Subject: CN=6a875bce-8cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:11:44:d9:7a:b0:1a:ef:9f:5b:b4:9b:40:
bd:18:64:43:d8:c0:00:f9:b8:13:4e:91:97:a9:ed:
e5:49:25:00:83:88:22:33:09:c9:1d:19:13:32:ff:
c2:22:20:fa:41:51:5c:4d:69:dc:36:e3:55:95:2b:
cf:d3:6e:2a:22:49:c7:48:3b:8b:4d:49:7b:53:32:
a7:b0:99:51:e5:ed:04:7e:b9:ca:f9:13:20:0e:98:
b6:f4:7c:ff:0d:ba:ba:9e:8b:ce:a0:24:c8:42:bc:
73:2d:8f:1f:86:c3:f3:f0:ab:f6:de:99:8d:b3:7b:
6c:65:0b:2c:9f:d7:c4:4a:58:39:4b:dd:80:f2:5a:
4e:4e:ec:af:81:ab:b0:77:bd:5c:ee:84:e3:88:bc:
9e:5a:df:4f:d0:da:48:b9:f4:c9:c7:cf:d8:30:90:
56:7c:71:92:44:8e:94:7c:08:99:e7:9f:73:2c:a4:
62:f5:46:0c:39:8d:2e:7a:15:19:8e:5d:a8:40:03:
28:5c:cf:eb:bc:d2:ab:63:23:31:80:52:34:06:72:
3a:77:19:f7:2b:11:09:01:15:f1:77:3e:96:54:97:
f1:42:ca:dc:a7:e2:b2:0d:74:7c:79:6c:58:c4:9c:
67:7a:7d:cf:66:b3:e9:84:ab:c4:b9:5e:e7:51:70:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:17:A1:2F:70:1E:7A:8C:72:7E:02:86:DA:F1:FB:DA:BF:40:13:27
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:0e:70:88:10:f2:9c:b1:b3:e3:d5:ed:25:4a:40:5c:c1:69:
08:3a:74:7e:e5:0b:8b:8c:e9:e8:06:49:ef:5a:1b:ce:4d:c5:
29:3d:44:e2:b8:44:76:af:1e:88:8b:57:a1:c1:df:a1:43:93:
0b:77:49:de:86:37:ce:e0:a4:eb:d3:1d:95:4a:9f:9b:ea:c0:
a0:25:da:b0:be:0e:6f:70:71:78:5c:76:da:8a:39:81:42:f3:
00:ee:b1:31:de:83:04:1a:f2:72:ed:9b:64:32:15:5e:58:24:
cb:bc:7c:3b:c8:7f:e4:35:b6:d9:ab:4f:3c:3f:8d:92:db:d9:
7f:e1:60:31:5a:93:92:96:f1:c2:38:58:1e:63:d0:a2:97:d1:
ee:b9:7e:08:55:9c:08:8b:df:a6:fc:89:c6:96:9f:d2:1d:1e:
db:8b:6b:ab:65:df:93:02:a5:2e:23:b6:e6:dd:bb:b7:d0:4f:
1b:e0:81:ec:c4:f6:ae:77:39:3c:71:b9:35:d3:1f:f2:39:4f:
6f:18:30:c4:c9:ab:5b:c9:4b:74:0b:48:e8:34:07:d0:cc:f8:
fb:67:ec:a2:ff:e4:3d:ea:9f:0e:24:df:e8:6e:0e:e2:76:d2:
0e:d2:84:79:71:16:c9:c5:d6:82:d5:38:9b:46:32:05:20:7f:
74:6f:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:51:06 2026 by rpki-client