
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json)
Hash identifier: Q5npJGCdJsPZdz7OJ9LwU8o7Y40GI2utlUicLj0hKQs=
Subject key identifier: 80:C1:E8:9A:CE:F5:65:78:B3:2D:08:07:98:DC:76:F1:67:77:62:C3
Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Certificate serial: 1B6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
Manifest number: 1B44
Signing time: Tue 06 Oct 2026 16:19:23 +0000
Manifest this update: Tue 06 Oct 2026 16:19:22 +0000
Manifest next update: Tue 13 Oct 2026 16:19:22 +0000
Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: V/t7D/cMnlQDAei39oBBAC+Y1cXoAXWT5ESbukM+Vtw=)
2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=)
3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7018 (0x1b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Validity
Not Before: Oct 6 16:19:22 2026 GMT
Not After : Oct 13 16:19:22 2026 GMT
Subject: CN=6ac51f8b-15c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:f6:1b:51:4e:d6:90:ae:96:97:59:35:84:
f1:95:e1:59:5f:bc:3f:b4:ac:a1:75:28:a0:7e:2c:
cc:2e:95:9e:a7:04:26:b1:76:84:25:5c:54:7c:a4:
2a:b7:d5:8b:63:9f:3c:d4:2d:4e:66:53:18:6c:e3:
e9:80:44:e6:a6:35:b3:20:a1:16:92:a8:c6:89:e2:
74:45:23:65:7d:1a:32:f1:f6:6a:6e:57:95:65:29:
7a:11:47:5b:c9:7d:a9:9a:a8:3c:ba:33:70:1b:3f:
13:bf:e9:63:fa:45:0b:cf:cb:66:99:85:42:de:5a:
ac:92:8b:86:a9:02:b9:2c:fb:b9:aa:9d:11:45:23:
6e:d9:f5:ee:26:6c:45:0a:e2:bc:ef:21:31:1a:e2:
aa:33:74:48:d3:59:15:1d:a8:1e:8e:43:ee:ad:ab:
c0:3f:bf:44:18:6d:05:cd:6e:c7:6e:1f:31:7b:40:
c9:20:4b:40:d2:32:83:3f:1a:61:d2:cf:3d:a3:b3:
fe:dd:c8:12:49:d3:d7:ad:ea:fa:c1:83:71:87:2d:
11:a3:58:ba:0d:93:86:f9:e3:a7:33:d2:6d:77:a0:
4f:2d:0f:7e:37:23:cd:fb:fd:b6:e7:0a:0d:36:58:
ed:20:8b:23:ee:ac:58:16:4a:55:31:e4:6b:14:76:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:E8:9A:CE:F5:65:78:B3:2D:08:07:98:DC:76:F1:67:77:62:C3
X509v3 Authority Key Identifier:
keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:8c:52:0c:c5:5b:ee:c3:98:3f:90:9e:dd:6b:2f:3d:22:
e0:4e:72:b6:e6:10:e7:85:49:4f:ac:f5:de:d5:66:35:69:a4:
d1:fe:3a:87:10:97:c2:d6:ea:d0:9c:d8:aa:b0:dd:7a:54:5a:
ab:ff:9d:47:eb:65:bf:4a:dc:6a:65:60:9a:d3:40:2a:d1:80:
29:7b:1a:ff:5b:f0:2c:55:d0:7d:04:4a:61:80:6e:56:5d:23:
48:f2:98:72:9f:49:1e:42:24:3e:82:fa:7c:d7:20:3e:54:4a:
e9:f0:f2:7b:b0:81:2c:c3:1c:0e:e4:f5:57:69:76:a7:04:71:
4d:91:b5:d8:3c:9a:a9:8e:9f:3f:a1:ef:9e:50:d2:14:0e:61:
8f:a3:f3:8c:a1:52:81:7c:79:d4:93:6b:8e:6d:f6:1f:35:09:
c2:04:72:d2:05:85:d7:9b:dd:09:a0:25:ae:28:a8:ad:c6:b7:
89:89:a9:3c:59:77:8d:87:ff:3f:b6:34:d7:3a:74:01:c7:00:
7d:6d:06:82:8b:a1:9f:84:1e:fc:43:3e:b9:be:26:3e:81:e9:
ff:6c:7d:e2:de:20:dc:54:6c:55:e3:ce:82:c6:d0:7b:7e:eb:
41:74:28:c6:31:14:d4:d7:3a:47:1d:df:e8:59:5d:86:47:57:
15:7c:73:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:32:21 2026 by rpki-client