
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json)
Hash identifier: Qerq1iU0evFCzvPEjbdPYBXfnj24VV9al8phFNe+4hA=
Subject key identifier: 71:9A:90:23:4B:1D:55:B0:2F:F0:55:8B:1B:1E:95:56:20:3A:DA:24
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial: 0547
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
Manifest number: 053F
Signing time: Tue 18 Aug 2026 23:50:13 +0000
Manifest this update: Tue 18 Aug 2026 23:50:12 +0000
Manifest next update: Tue 25 Aug 2026 23:50:12 +0000
Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: alzhd5af3/ThI6Lbnv6iIwBV15TnrHdmyyF1OMMGZ1A=)
2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Validity
Not Before: Aug 18 23:50:12 2026 GMT
Not After : Aug 25 23:50:12 2026 GMT
Subject: CN=6a84efb5-5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:29:81:ea:3c:3f:17:a0:05:e7:ae:ec:fe:
66:f7:0b:b3:93:9e:45:45:09:e7:bd:61:7f:74:84:
60:c8:61:82:2a:95:cf:76:02:9a:a4:0b:b9:cb:e8:
06:27:ef:f4:98:85:17:02:00:03:f8:27:60:f3:d3:
84:60:52:3d:f1:f6:8a:ed:09:5f:bb:35:92:a8:72:
20:21:43:e3:f7:4a:6f:7c:20:62:72:e4:24:b3:28:
39:d1:66:46:11:6f:98:81:db:e9:b9:cb:89:8b:43:
0e:b7:57:0f:cc:b1:ef:50:e5:3b:b0:ee:ad:7b:49:
34:e6:bc:38:28:b4:9b:89:16:4b:3d:35:9b:f4:77:
b5:a9:f7:0c:a7:ff:28:50:fd:63:ad:50:86:5c:65:
9c:22:be:3c:8a:99:23:5f:3c:d0:fb:bc:91:1c:07:
4a:9a:42:c4:c4:84:a6:42:7d:b2:d0:7d:a5:fe:ca:
bd:01:90:47:a9:e7:2d:d6:d0:4e:84:83:af:ca:ee:
3a:69:cf:e0:3b:11:73:5e:f0:15:72:9e:d8:d4:61:
ba:1b:f3:9e:e4:4c:1b:ff:6e:ff:77:7e:48:fd:75:
14:0b:e1:62:2d:4c:22:3b:91:4d:bb:1d:9d:0b:49:
df:76:30:5a:bd:be:a8:e2:db:47:84:92:af:f9:f1:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:90:23:4B:1D:55:B0:2F:F0:55:8B:1B:1E:95:56:20:3A:DA:24
X509v3 Authority Key Identifier:
keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b1:21:b3:b4:49:1d:0e:74:95:57:e5:1d:c0:80:11:70:e6:
c6:4c:ae:ea:ba:c1:b3:7a:0f:3e:5c:ca:b5:d7:bb:0c:15:7a:
f2:01:dd:bb:88:eb:6f:87:3c:20:2e:db:09:8b:ee:26:e7:31:
4d:71:01:cc:eb:83:b9:1d:dd:ff:7b:46:1a:68:c0:ea:18:7f:
0a:25:d2:de:0f:ee:86:10:03:df:45:ca:ed:d2:86:71:93:d1:
de:9c:53:dd:3b:ff:16:76:ed:2a:08:96:05:d1:6b:16:1e:73:
d7:89:8e:d0:02:2a:5c:37:53:f4:b5:dc:66:25:00:2c:3d:88:
72:33:18:66:8c:6a:4c:89:50:ed:d2:d5:40:13:4c:5a:78:9d:
19:77:b9:c7:6f:d0:30:89:ab:91:3e:62:3b:5c:56:a9:db:65:
cb:fa:d8:40:d6:88:b1:0d:6c:d0:6d:ee:fb:44:00:5c:1c:1a:
98:5a:66:a5:c3:26:67:c6:c1:f2:0c:da:33:f7:83:b7:2c:98:
3e:f3:4c:5c:ac:00:1f:b0:04:5b:2c:a8:a9:83:24:e4:52:de:
58:71:eb:ec:fc:16:ae:eb:b0:7b:de:52:d3:2b:9a:98:c4:be:
35:7c:87:d2:b7:32:00:9b:40:25:85:b3:2f:3f:f4:51:95:f0:
db:fe:87:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0
MTdCMzU5RjUwHhcNMjYwODE4MjM1MDEyWhcNMjYwODI1MjM1MDEyWjAYMRYwFAYD
VQQDEw02YTg0ZWZiNS01NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcQpgeo8PxegBeeu7P5m9wuzk55FRQnnvWF/dIRgyGGCKpXPdgKapAu5y+gG
J+/0mIUXAgAD+Cdg89OEYFI98faK7QlfuzWSqHIgIUPj90pvfCBicuQksyg50WZG
EW+YgdvpucuJi0MOt1cPzLHvUOU7sO6te0k05rw4KLSbiRZLPTWb9He1qfcMp/8o
UP1jrVCGXGWcIr48ipkjXzzQ+7yRHAdKmkLExISmQn2y0H2l/sq9AZBHqect1tBO
hIOvyu46ac/gOxFzXvAVcp7Y1GG6G/Oe5Ewb/27/d35I/XUUC+FiLUwiO5FNux2d
C0nfdjBavb6o4ttHhJKv+fFIYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGakCNL
HVWwL/BVixselVYgOtokMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy
MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2
UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATrEhs7RJHQ50lVflHcCAEXDmxkyu6rrBs3oPPlzKtde7DBV68gHdu4jrb4c8
IC7bCYvuJucxTXEBzOuDuR3d/3tGGmjA6hh/CiXS3g/uhhAD30XK7dKGcZPR3pxT
3Tv/FnbtKgiWBdFrFh5z14mO0AIqXDdT9LXcZiUALD2IcjMYZoxqTIlQ7dLVQBNM
WnidGXe5x2/QMImrkT5iO1xWqdtly/rYQNaIsQ1s0G3u+0QAXBwamFpmpcMmZ8bB
8gzaM/eDtyyYPvNMXKwAH7AEWyyoqYMk5FLeWHHr7PwWruuwe95S0yuamMS+NXyH
0rcyAJtAJYWzLz/0UZXw2/6HCg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:52 2026 by rpki-client