
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File: KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier: ckk5HlJKbuIHnW1zFTV7x7fY92U8nj5l34L4gWyi6O4=
Subject key identifier: 19:56:9D:3A:7A:41:30:18:8F:59:67:4D:1F:4F:32:08:D4:47:C9:55
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0543
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number: 04A4
Signing time: Tue 27 Oct 2026 00:04:43 +0000
Manifest this update: Tue 27 Oct 2026 00:04:43 +0000
Manifest next update: Tue 03 Nov 2026 00:04:43 +0000
Files and hashes: 1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: j/TRluveE83NcYAnAZZMi09AGIOmP/A/wWnctvQwTF4=)
2: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=)
3: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=)
4: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=)
5: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=)
6: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=)
7: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=)
8: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=)
9: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=)
10: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=)
11: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=)
12: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=)
13: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=)
14: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=)
15: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=)
16: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=)
17: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1347 (0x543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Oct 27 00:04:43 2026 GMT
Not After : Nov 3 00:04:43 2026 GMT
Subject: CN=6adfea9b-13c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:b8:99:5d:1e:f2:c0:3e:e2:9c:9f:ed:69:
c4:61:16:0a:15:c9:ac:9e:f9:f2:0e:f6:bd:bd:b4:
88:9e:4f:f6:96:5f:c6:7f:fd:0b:dc:c5:4e:96:d4:
05:3f:53:ff:b0:01:42:b3:69:67:85:9a:66:ef:d2:
fb:5e:a3:fe:2e:61:5c:f4:64:c1:d8:04:ea:95:1f:
8f:e1:7d:0b:3d:5f:19:a5:aa:72:7f:e5:ab:a5:59:
1b:67:06:68:8d:07:26:2d:1a:41:fc:07:54:6a:da:
e0:4f:19:91:33:91:25:c3:aa:69:f9:dd:b6:80:8d:
9a:85:04:be:f1:23:b9:3b:98:af:f2:0e:6f:fa:e3:
04:18:86:23:45:51:eb:bc:56:c0:5d:3e:16:44:65:
aa:3a:7b:3b:7f:f2:2c:dc:fb:3c:a7:e8:a6:c8:45:
4a:37:12:a4:24:01:72:cc:26:f9:34:bc:17:b4:85:
08:cd:4a:df:3b:50:99:9a:26:81:72:0c:1c:b9:c7:
92:66:24:06:85:9f:41:1f:ca:4d:90:e6:89:3d:5c:
e3:9e:5e:ae:56:68:06:1a:e3:6d:53:ce:61:0d:15:
e2:ce:99:7a:4d:16:03:9d:7b:11:ca:2f:f8:8d:95:
d5:9b:a1:29:7c:fe:b5:54:e0:bd:86:99:52:36:48:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:9D:3A:7A:41:30:18:8F:59:67:4D:1F:4F:32:08:D4:47:C9:55
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:11:85:36:7d:41:62:81:52:4d:a3:2e:9a:4e:d4:9a:29:05:
56:86:54:7d:b5:8a:0e:74:5a:a4:b2:d9:f5:a3:5a:b4:32:43:
66:3d:c1:31:7a:9a:7f:0f:3d:d3:34:7b:a3:c1:d7:17:8d:4a:
e4:be:ab:8f:44:4c:23:02:d1:8f:3f:da:41:64:de:1f:e9:89:
a5:66:a1:4f:08:8a:5a:88:63:6d:a7:f6:17:92:3b:62:85:9e:
62:47:1c:5b:7d:07:1c:3a:86:55:f3:cf:b1:d2:44:aa:e6:34:
73:97:2f:81:31:98:5e:85:51:c1:1d:5f:2d:bb:66:bc:0b:f7:
19:24:84:60:b3:95:b3:52:d8:30:cc:0c:e4:3c:b0:9a:85:e8:
57:01:73:3b:39:81:a9:98:e1:0a:c9:cd:59:9c:91:a7:2d:91:
87:b0:74:71:dd:57:a0:ee:98:06:02:0f:93:a4:f5:68:aa:8c:
e4:7e:2e:d6:e5:42:db:f2:15:0b:95:38:c9:ff:c9:ff:48:31:
36:61:47:3a:f7:9e:38:12:d1:1f:87:b3:e8:f8:ce:0e:36:ff:
19:c8:19:2b:3c:79:13:61:d8:66:da:a4:58:28:8d:00:b3:8e:
9b:83:96:b4:6c:c4:86:2b:59:37:ea:e4:48:33:0f:a8:cf:11:
2c:48:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:31:11 2026 by rpki-client