
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
File: Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft (raw, json)
Hash identifier: 2TCMTKR9O8a4SfIqQrRDBpmJvkhAluFLWv6Bmq92DN0=
Subject key identifier: 30:07:F7:70:05:D5:98:2C:09:9B:E6:C4:E6:AB:3C:79:A4:B9:CA:05
Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
Manifest number: 55
Signing time: Thu 03 Sep 2026 05:13:40 +0000
Manifest this update: Thu 03 Sep 2026 05:13:39 +0000
Manifest next update: Thu 10 Sep 2026 05:13:39 +0000
Files and hashes: 1: Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl (hash: BqTHYz3OJwRAjm2Wu4Kgij9rolYM8Jo6jd5R7wRVvdk=)
2: 792D74047BFE11F1AA9690E78EA30FBC.roa (hash: XTYptpNlRAo7alSvOyzI+cw6KIvbeNRndpdGXKdvGYQ=)
3: B8086D68733A11F1A07DD97E95A30FBC.roa (hash: bTVB+DDvlWg3BGswbEV0Wrf2VGFZJmesV6ILbWOzMg0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Validity
Not Before: Sep 3 05:13:39 2026 GMT
Not After : Sep 10 05:13:39 2026 GMT
Subject: CN=6a990204-efad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:fe:58:57:37:dd:a9:47:75:0f:fd:db:ab:
6f:f6:41:07:25:e3:b4:aa:2f:d7:ec:5f:04:9f:96:
bb:1d:33:6b:fc:5f:b2:07:35:68:00:8f:e1:5c:0c:
55:b2:f6:ce:4c:ef:a3:24:5e:b7:0d:af:a5:e1:f1:
4f:04:e7:d1:7b:92:b4:04:a2:65:f9:1b:ef:6d:b2:
38:d9:6c:11:42:1e:cb:a6:51:41:d1:ee:6c:13:1c:
99:2d:48:17:ac:48:7d:77:68:d8:58:05:80:0d:8a:
0c:a4:d2:d8:fc:ee:ed:bb:38:1b:a4:fa:26:b9:5b:
5c:e7:e9:7e:08:ca:99:3c:5c:43:8b:95:7a:16:97:
e3:c2:01:6c:18:dc:74:0f:e4:3c:66:a1:55:08:f0:
89:69:65:aa:89:fd:35:b3:06:1d:3e:ed:ff:2a:bc:
95:d7:71:40:69:bd:e9:ed:c6:86:72:28:4f:37:df:
70:f3:b5:cf:45:18:b0:bb:51:ff:a0:79:74:14:43:
6f:63:04:43:b9:7f:0b:cb:da:dd:d8:7e:79:5f:56:
7c:d4:4c:0c:4f:96:6e:02:24:7c:a7:09:24:b7:5f:
aa:28:28:61:be:67:30:a0:5f:55:96:4d:68:3e:2f:
87:b2:06:e8:7e:e0:4e:fc:ba:93:4d:bd:16:a6:51:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:F7:70:05:D5:98:2C:09:9B:E6:C4:E6:AB:3C:79:A4:B9:CA:05
X509v3 Authority Key Identifier:
keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ae:0b:25:c8:68:2d:dd:14:3b:d7:85:96:a1:48:b4:29:3a:
04:8f:58:ff:db:86:79:06:82:d0:a9:cd:14:e1:1d:ae:71:d3:
b2:dc:e2:a1:3b:49:43:4f:90:74:ce:e7:92:3b:0d:d5:41:e9:
32:88:0e:4d:d2:cd:44:0e:9d:34:99:32:74:46:56:3d:05:1c:
20:ab:3b:ef:b6:e7:75:84:01:e5:91:86:0a:ba:33:bd:f0:11:
81:08:9e:a2:b9:77:80:7f:ee:da:e5:f7:0c:89:44:c5:50:70:
58:e9:9f:31:35:26:97:fa:91:8f:43:02:6f:fb:f0:cb:07:2b:
6a:b6:b9:34:61:83:f9:5c:3f:d0:c5:24:19:0f:83:0f:e6:12:
ec:9a:79:c7:0f:f8:71:fd:02:54:4f:c5:71:79:d9:04:5f:b4:
59:c8:43:ad:1d:f2:2d:80:ac:9d:f1:e2:89:64:ec:a6:85:51:
29:6b:54:17:2e:a6:24:7b:8c:0c:a0:85:aa:69:c8:5b:4b:71:
d6:d2:38:3a:c2:39:9e:38:9c:96:dd:db:d1:f5:e5:ba:c8:2e:
68:28:9e:fa:69:20:e9:be:fd:33:aa:92:8e:3a:f9:11:a9:3a:
52:e4:62:57:f1:1e:6b:b4:76:dd:b0:58:c4:93:d3:09:73:b3:
2e:fc:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:44:57 2026 by rpki-client