
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json)
Hash identifier: VFS3seLXzXjy3F221Nx7LwArogI7lPqUOHR0V8FrDt0=
Subject key identifier: 8D:75:11:B5:6A:96:0E:7B:97:4A:CF:4F:2D:FE:E2:EE:2F:CF:4C:C1
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
Manifest number: FC
Signing time: Wed 19 Aug 2026 06:53:21 +0000
Manifest this update: Wed 19 Aug 2026 06:53:21 +0000
Manifest next update: Wed 26 Aug 2026 06:53:21 +0000
Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: sCKw7FHnvo1lKDFjaLZzU4OwbbQ2AmCro3WA5lVpBWE=)
2: C028C06E18E211F081A75558C4F9AE02.roa (hash: zKW/ra+nJQMWUbM8Pae8IdbHSNQ3IifmscVyx7k0qbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:53:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Validity
Not Before: Aug 19 06:53:21 2026 GMT
Not After : Aug 26 06:53:21 2026 GMT
Subject: CN=6a8552e1-ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:ad:7c:30:6c:67:4a:bf:7b:be:fa:61:14:
f6:f1:92:e5:6d:50:50:cf:6c:c0:8b:37:04:b2:ed:
bf:e6:a5:7f:f6:1c:f1:e0:f0:fe:ec:94:66:2b:2b:
6d:44:b3:33:f8:fb:77:90:a5:8d:a2:5b:4f:f4:4a:
21:a3:17:c5:96:37:b9:97:99:3b:f3:f7:11:6c:29:
26:ca:24:db:6a:7f:56:a7:61:44:30:1c:4b:24:90:
ff:01:30:03:e8:a8:77:7d:13:82:df:67:fe:48:1b:
27:cb:d9:86:58:b4:de:d6:52:d1:c6:fc:fd:72:d4:
2a:25:64:5b:70:e3:2d:74:17:30:92:de:c7:8b:7e:
61:1a:24:d4:15:78:84:04:42:1e:4c:2d:9d:f1:bf:
8c:f0:06:65:ec:f6:0a:d3:5c:99:5f:87:68:f7:8b:
f7:d7:1b:cd:df:64:e8:94:25:89:59:3f:c4:76:88:
48:2c:d0:58:5a:2b:b3:d8:d4:85:5c:5a:b3:61:6a:
07:e7:d6:d8:9c:1c:c1:27:e0:f5:e0:a2:e2:42:f1:
bb:0f:21:f5:85:38:61:f1:be:19:67:fe:9c:60:ed:
eb:2e:a5:62:8d:09:54:ca:8c:0b:e0:89:57:3d:92:
2f:78:01:17:5d:14:e2:c8:d1:1e:03:b1:e9:e8:e7:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:11:B5:6A:96:0E:7B:97:4A:CF:4F:2D:FE:E2:EE:2F:CF:4C:C1
X509v3 Authority Key Identifier:
keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:0a:14:9a:72:fb:a9:b3:73:7c:11:c9:2a:6c:50:7d:e7:ca:
ee:7d:0a:e3:59:d0:08:a7:df:bc:f9:eb:de:66:61:da:00:b3:
49:5d:59:fd:20:9e:c9:b9:26:d9:4a:a6:34:d6:fe:42:b2:9e:
69:23:7f:db:1a:b1:97:91:a2:86:df:55:16:10:3d:bb:a5:8c:
05:e2:eb:74:44:02:38:9f:fd:fa:70:e9:c7:94:bb:8c:0a:07:
c9:88:6c:bb:66:48:00:5f:fd:5a:e2:a1:84:86:80:a1:12:10:
5b:e4:c1:63:d2:a3:3f:e7:bf:18:0e:d3:20:54:19:2b:97:2f:
a0:a2:5b:7b:1c:d1:ff:97:74:ed:bb:95:f7:71:c1:f2:69:09:
b9:73:8c:04:ba:b3:09:06:4f:cb:be:86:67:87:62:7e:55:20:
88:10:80:41:4a:8e:1f:21:78:f4:1e:0b:4b:f0:a6:82:51:d1:
98:52:1c:86:fd:da:28:4b:31:1d:ed:36:64:e7:e1:e4:1e:b7:
20:de:73:89:50:cb:b4:d4:15:aa:f4:09:a7:9b:01:f3:e2:28:
34:e9:f7:00:b6:1d:4c:81:32:9f:37:91:dc:22:8b:a3:9b:73:
71:0a:30:64:1c:15:1b:fa:8e:b6:1b:f7:ba:d0:78:09:cf:88:
22:0f:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:51 2026 by rpki-client