
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
File: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft (raw, json)
Hash identifier: Ec1fplQBIB/v9cVxTGYsgAh4C95QiAiqeuclp+ulwBU=
Subject key identifier: 51:08:71:F4:6F:B8:E9:CC:5C:FF:6F:D5:DE:07:2E:98:0D:0E:B9:9D
Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
Certificate issuer: /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
Manifest number: F7
Signing time: Tue 03 Mar 2026 05:52:23 +0000
Manifest this update: Tue 03 Mar 2026 05:52:23 +0000
Manifest next update: Tue 10 Mar 2026 05:52:23 +0000
Files and hashes: 1: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl (hash: aW824iqUS5Ue4S+OypIzOKhtbRUq4XyBBf/OnAGlmY0=)
2: 38161248A26911EFBF6D0319C4F9AE02.roa (hash: AVpmO1XfQqx7osD3xv12YLKG1Ejq79RCs8GNCY34Q2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Validity
Not Before: Mar 3 05:52:23 2026 GMT
Not After : Mar 10 05:52:23 2026 GMT
Subject: CN=69a67717-2ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:21:7d:1d:5b:68:33:c8:34:c1:78:11:84:
39:9c:a6:a5:ff:b3:4c:ac:ef:79:24:7a:f5:cc:76:
4b:de:0b:ee:b0:d7:91:59:02:b2:ef:c6:cc:7b:21:
e6:e9:36:00:c8:f3:44:02:87:e5:4e:45:7e:4e:69:
88:b8:84:11:71:03:0c:1e:6a:36:82:64:cf:6e:35:
a1:1d:48:de:f8:45:a5:a0:e9:36:73:82:3b:52:29:
dc:d6:9c:61:f7:4d:7b:91:3b:61:5c:c7:b4:26:4e:
ff:17:62:32:5f:cd:48:96:00:42:da:fc:6b:d2:85:
18:6d:cf:b8:5c:7f:36:8c:46:53:47:88:77:68:a0:
c9:30:6c:e2:08:53:12:af:44:67:cf:fb:7e:dd:ab:
ab:44:1e:ae:76:fe:b0:ad:e1:c7:58:99:c3:92:6c:
d1:11:15:ba:be:ad:27:21:63:bc:cc:11:9a:bb:6e:
23:19:ca:d0:b5:0e:9a:2d:4d:1d:99:bc:8c:26:b8:
a6:25:f8:b1:18:e9:e4:ae:0b:32:18:45:71:61:f4:
14:bf:b4:cb:9e:f9:6c:3d:30:bd:5f:fc:80:27:2a:
58:8f:ce:0b:56:13:ad:26:b5:6c:c5:14:a8:c6:49:
5c:9b:6e:68:5f:a0:46:57:f6:12:19:51:9a:f6:48:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:71:F4:6F:B8:E9:CC:5C:FF:6F:D5:DE:07:2E:98:0D:0E:B9:9D
X509v3 Authority Key Identifier:
keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:f0:15:6c:1e:13:df:0f:8f:87:0d:e9:50:8e:75:b1:4f:
29:a8:e1:0c:68:c6:ea:37:2e:6e:62:a5:88:ee:4d:6e:58:ef:
15:dd:4c:17:4c:52:c4:9b:6d:af:b0:76:7d:f4:b6:de:30:f9:
e5:dd:f6:36:7d:50:26:9c:13:3c:90:83:d6:07:5d:b5:26:bb:
4a:48:48:1f:66:02:43:5e:9f:19:90:77:24:92:90:cd:35:bd:
24:e6:65:22:a2:2a:e7:fc:3e:e3:df:10:cb:eb:bf:73:1e:00:
87:4c:1b:6c:38:60:a7:b9:7a:e1:23:ce:37:e6:2e:1b:ed:d4:
33:fb:49:1e:85:b1:3f:5a:4f:5f:2b:e8:68:74:58:9e:f9:d7:
68:28:5f:78:ee:b8:f9:9f:6d:11:3d:ae:61:39:fc:c1:d6:cc:
e2:a1:0d:99:91:34:d6:a4:84:15:aa:09:af:b6:6e:b6:b3:bb:
79:3b:a5:9a:f3:9c:42:d7:66:ab:cb:a4:ec:66:46:91:8c:d1:
c3:bd:0c:b9:56:c8:61:be:f6:d4:3d:c5:6f:8e:82:71:a5:84:
25:03:68:19:1a:85:61:d7:06:25:08:09:59:c1:cd:91:14:03:
6e:3d:7b:a0:41:63:eb:0f:c9:b2:06:b3:87:a2:9f:56:e7:79:
c0:c9:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:29 2026 by rpki-client