
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json)
Hash identifier: T3KtviPn7uvyk10eb0mPUS5Vz1WDccvmKDlloKtvMuA=
Subject key identifier: B6:4E:10:0D:FF:59:C0:F6:19:DE:B0:79:AE:D1:3C:8E:88:C8:29:FE
Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
Manifest number: 0216
Signing time: Mon 05 Oct 2026 03:19:14 +0000
Manifest this update: Mon 05 Oct 2026 03:19:14 +0000
Manifest next update: Mon 12 Oct 2026 03:19:14 +0000
Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: uPbJb4Xf0LtL+q8e9M14PcfrVKw1JrBKqWGCZSSeK8o=)
2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: IsR02EcFYSAXSpQzNxCA79lgP4S8FydbSljAspj7zII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Validity
Not Before: Oct 5 03:19:14 2026 GMT
Not After : Oct 12 03:19:14 2026 GMT
Subject: CN=6ac31732-ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:5d:da:4d:c6:11:7e:e7:79:97:2b:e2:95:
db:51:b9:ea:39:c7:16:a9:68:7d:30:63:1a:04:bf:
7c:42:56:5c:f5:5c:a8:22:dd:1e:f3:04:5a:0f:db:
21:e7:2d:31:29:fb:0d:51:9a:25:e0:e7:02:ac:4f:
e8:f4:db:b2:20:05:31:88:f5:4e:f9:d6:2e:53:fd:
a9:01:de:11:d6:b0:90:0f:1f:4f:cd:ee:d9:0e:6d:
05:2c:99:fa:93:c3:75:02:2d:93:29:7b:54:08:54:
da:50:41:2e:63:19:e7:a0:ab:41:b2:14:45:cf:cc:
fe:70:3d:6a:2e:b7:de:b6:75:cb:bb:4b:29:47:e3:
2f:8a:1b:e9:71:c9:fe:92:ae:98:fd:53:8f:20:eb:
80:42:4f:84:dc:1f:39:88:da:9d:d3:09:2d:e5:da:
59:14:15:cf:c9:64:7c:e7:18:6f:e4:61:4d:2b:49:
57:fa:7d:17:18:0e:41:a2:71:26:a1:eb:39:8b:c2:
81:ae:16:f3:5d:69:6d:cf:3f:2b:62:ad:3b:8c:be:
9c:6e:3c:37:2a:58:6c:92:44:fd:be:be:57:1f:03:
f4:98:c8:ba:79:8c:97:51:09:81:3a:e0:b8:62:cf:
93:bc:b0:4a:73:96:06:34:ce:b3:ad:3d:0e:24:52:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4E:10:0D:FF:59:C0:F6:19:DE:B0:79:AE:D1:3C:8E:88:C8:29:FE
X509v3 Authority Key Identifier:
keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:ac:08:6f:53:1a:a8:c1:8f:1f:af:34:7b:06:81:38:24:50:
45:59:a4:08:48:4a:0b:fa:41:f3:22:b0:b5:26:15:ed:dc:bf:
f7:80:a8:57:1d:87:00:f1:42:d5:3a:ae:c8:b0:23:97:55:d3:
6d:07:19:23:36:44:34:2f:62:e3:51:ce:12:16:d3:1d:a3:67:
02:87:55:71:a8:1a:5f:aa:d0:2e:75:80:f6:60:3e:d9:e1:95:
c8:64:61:b9:eb:70:13:a8:42:4e:bb:54:f3:79:fd:e1:17:c8:
e5:b7:48:99:55:6c:3d:9e:57:e3:f2:b0:31:f9:65:ff:42:63:
da:0e:1d:4a:cf:6e:1b:60:e8:dc:16:ae:06:8f:43:2c:f9:f4:
02:a9:7e:ee:e5:5f:dd:59:b2:e1:47:b9:14:fb:18:85:6d:5b:
fd:5d:ff:f4:f0:b6:60:18:97:59:45:d6:1a:f8:e3:7a:32:15:
92:7e:92:26:64:31:44:4f:36:fd:9f:8a:f3:5c:76:98:f7:1f:
13:e4:9f:5d:95:b8:5f:bd:ef:63:5d:f8:da:d7:38:01:75:b3:
1c:87:41:5c:5d:7b:68:53:bf:b6:6b:18:bb:58:6e:c8:29:f9:
35:40:88:5d:a5:6e:92:49:a8:22:00:ec:75:34:cc:4a:ed:48:
f2:e3:cf:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz
OEU5QzJGMjUwHhcNMjYxMDA1MDMxOTE0WhcNMjYxMDEyMDMxOTE0WjAYMRYwFAYD
VQQDEw02YWMzMTczMi1kZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlxhd2k3GEX7neZcr4pXbUbnqOccWqWh9MGMaBL98QlZc9VyoIt0e8wRaD9sh
5y0xKfsNUZol4OcCrE/o9NuyIAUxiPVO+dYuU/2pAd4R1rCQDx9Pze7ZDm0FLJn6
k8N1Ai2TKXtUCFTaUEEuYxnnoKtBshRFz8z+cD1qLrfetnXLu0spR+Mvihvpccn+
kq6Y/VOPIOuAQk+E3B85iNqd0wkt5dpZFBXPyWR85xhv5GFNK0lX+n0XGA5BonEm
oes5i8KBrhbzXWltzz8rYq07jL6cbjw3KlhskkT9vr5XHwP0mMi6eYyXUQmBOuC4
Ys+TvLBKc5YGNM6zrT0OJFKC1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZOEA3/
WcD2Gd6wea7RPI6IyCn+MB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz
RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox
ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYawIb1MaqMGPH680ewaBOCRQRVmkCEhKC/pB8yKwtSYV7dy/94CoVx2HAPFC
1TquyLAjl1XTbQcZIzZENC9i41HOEhbTHaNnAodVcagaX6rQLnWA9mA+2eGVyGRh
uetwE6hCTrtU83n94RfI5bdImVVsPZ5X4/KwMfll/0Jj2g4dSs9uG2Do3BauBo9D
LPn0Aql+7uVf3Vmy4Ue5FPsYhW1b/V3/9PC2YBiXWUXWGvjjejIVkn6SJmQxRE82
/Z+K81x2mPcfE+SfXZW4X73vY1342tc4AXWzHIdBXF17aFO/tmsYu1huyCn5NUCI
XaVukkmoIgDsdTTMSu1I8uPPSQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:09:21 2026 by rpki-client