
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier: uQpeasQ978UoAGhJMjoRzC2zBnomuDBptD5/lhzoPzI=
Subject key identifier: A6:2A:41:E6:46:A1:41:2D:E1:D1:B0:44:11:27:45:92:B8:7E:A9:86
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number: 016F
Signing time: Mon 27 Jul 2026 06:45:16 +0000
Manifest this update: Mon 27 Jul 2026 06:45:15 +0000
Manifest next update: Mon 03 Aug 2026 06:45:15 +0000
Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: 1CAng/h+Kpjw7yu7/C5iawAVgsrarwz61p7MJQqKTD0=)
2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Validity
Not Before: Jul 27 06:45:15 2026 GMT
Not After : Aug 3 06:45:15 2026 GMT
Subject: CN=6a66fe7c-810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:fa:08:3e:7f:c9:4f:fa:fa:de:76:24:f8:
26:03:f9:dd:7a:16:36:ce:f8:f5:3d:50:b7:ca:e4:
7d:55:85:56:ce:b3:ac:67:cc:77:af:e4:dd:e3:0f:
9b:70:48:27:f9:d9:35:02:5e:e2:96:2a:45:e2:82:
27:98:12:4f:68:fe:27:75:90:63:b7:8e:96:c0:bb:
1c:57:63:3f:10:c1:d5:03:99:1a:2b:b5:d6:81:f1:
a6:8f:c8:46:f2:2d:92:6b:51:8b:79:c9:b0:7e:67:
33:65:27:32:33:df:fa:d6:bc:0b:d6:0e:1f:78:ed:
98:61:8e:c4:57:ba:58:d8:59:4e:8b:80:85:ec:19:
ad:97:ed:71:17:9c:3a:9b:30:c4:a8:d0:ed:24:2a:
f7:6c:21:ec:5f:b8:bb:e7:be:e8:58:60:69:e3:cd:
33:22:a4:cf:b4:bd:77:0c:b6:79:09:04:26:65:94:
87:26:8b:51:f5:ae:cb:e4:7e:cd:2a:10:b6:3d:d9:
e2:59:f4:c9:d6:5f:59:89:e7:42:f1:f0:88:41:96:
f9:e2:6d:c5:c5:d5:e7:1e:7d:8f:4e:c2:c0:0d:84:
5f:f1:36:e7:e5:9d:61:77:e1:9c:3f:dd:62:9f:b4:
a3:82:fe:6c:9d:11:0d:97:c5:40:c2:0e:57:8d:bf:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:41:E6:46:A1:41:2D:E1:D1:B0:44:11:27:45:92:B8:7E:A9:86
X509v3 Authority Key Identifier:
keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d7:cf:f6:ae:0e:32:cd:b6:72:8b:f3:4c:73:14:e1:56:30:
37:b3:05:b8:ab:32:34:11:65:56:2a:ea:5c:36:36:e5:9e:fe:
88:33:f9:8d:91:cf:a8:2e:87:68:ed:13:5b:f4:46:cb:d9:b0:
61:64:b8:90:73:88:d5:8e:3c:7f:7a:b3:3a:df:1a:1b:8a:b8:
30:1f:fe:be:a4:a5:ea:28:30:75:8e:8a:a5:2c:70:b4:fe:bf:
4c:cb:71:f8:37:50:2b:71:71:cd:2a:90:46:36:e6:90:6b:ae:
0b:70:a5:dd:73:29:27:44:68:ed:37:85:8d:69:1c:78:09:26:
aa:d4:fb:1c:a7:88:ac:48:a7:ef:61:65:b7:a7:0f:d0:8d:3b:
6d:48:3e:a0:3e:b8:23:46:6e:aa:a4:ca:ee:37:c2:20:00:5f:
e7:94:d4:bf:d7:3c:ba:96:54:35:7a:e0:ee:95:c7:69:48:11:
92:f0:4f:ae:5f:93:b5:cf:0f:e9:09:89:c4:1a:7d:56:73:40:
9e:a5:0c:36:20:53:f9:1b:b8:93:8b:b7:be:1a:fd:0a:c8:f0:
0a:fe:3a:0f:1d:54:41:31:fa:1d:67:28:ba:16:6a:30:10:88:
b1:06:86:b0:8f:5d:19:fe:da:7e:66:ca:b7:86:42:e4:e8:e8:
1e:3f:18:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:46 2026 by rpki-client