
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File: KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier: O1aSdtz4M6Q6cWipS8cfMOPVhZsCHKIP8VdTpEZoE4k=
Subject key identifier: 1D:09:9F:92:45:3C:94:97:F8:5F:00:48:18:00:0A:2E:4E:90:D1:3D
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number: 0474
Signing time: Sat 25 Jul 2026 01:18:53 +0000
Manifest this update: Sat 25 Jul 2026 01:18:53 +0000
Manifest next update: Sat 01 Aug 2026 01:18:53 +0000
Files and hashes: 1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: n1E+NHOp6n/dEp1if+sBLYs3WZnp6vu0aqDDQyp0BtY=)
2: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=)
3: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=)
4: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=)
5: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=)
6: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=)
7: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=)
8: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=)
9: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=)
10: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=)
11: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=)
12: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=)
13: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=)
14: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=)
15: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=)
16: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=)
17: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 01:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Jul 25 01:18:53 2026 GMT
Not After : Aug 1 01:18:53 2026 GMT
Subject: CN=6a640efd-ce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:74:9e:23:c8:1a:f1:a5:b4:6f:58:8e:9d:2b:
66:5f:54:61:35:0f:0e:10:54:6f:81:ca:3b:df:30:
70:34:79:26:a3:a3:47:e2:63:ed:2a:d6:ab:0a:da:
73:5f:d7:df:8a:24:2f:fc:62:fc:bf:ae:31:b5:a9:
cf:21:cc:b3:23:3e:a8:0b:8b:ee:74:06:17:2c:17:
10:4d:0a:d9:22:67:99:23:32:19:c6:b2:72:e8:34:
cf:86:ed:58:ba:fc:4b:5b:f8:f2:b9:09:bf:6a:e2:
82:9f:c9:25:e9:9f:04:fb:b3:71:dd:57:05:99:4c:
6a:ee:4c:df:30:09:86:71:06:f8:b0:69:e2:5a:02:
ab:e2:6e:62:ba:9c:83:b8:d4:c7:af:91:13:cd:1d:
08:b5:7d:4d:78:b7:72:d9:50:1b:45:1b:55:b1:35:
98:af:87:fe:88:4c:d3:59:61:72:b5:0a:e8:32:e0:
42:c6:8e:41:f0:af:de:33:a9:2a:52:09:da:79:ae:
3f:dc:a1:66:35:52:cb:61:fa:68:b6:a2:9f:3c:3b:
62:6a:c1:24:52:bb:aa:72:eb:55:85:e5:40:ce:bc:
f2:53:d2:32:bc:54:44:a0:48:1e:f8:85:cc:74:a2:
15:7e:67:cb:4d:fb:62:12:c3:fb:fd:a1:0b:bd:15:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:09:9F:92:45:3C:94:97:F8:5F:00:48:18:00:0A:2E:4E:90:D1:3D
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:2f:a7:53:17:df:0d:6f:e8:f7:f9:1b:1e:4f:61:82:e3:
e3:17:33:85:52:96:c1:b4:76:13:42:64:84:5f:98:26:a5:cb:
f2:4a:43:28:60:cb:5a:5a:7b:93:f3:4d:18:27:26:fc:2d:e6:
6c:9f:2b:f7:b9:64:d6:d1:58:ac:92:06:92:79:c2:a4:84:3e:
bc:8c:c7:91:a1:b4:de:f7:70:af:d2:f5:ca:01:ad:98:1c:37:
c8:08:db:45:86:fc:d2:0a:20:d2:f1:4e:63:ec:37:07:17:58:
60:85:e3:01:7d:c7:ff:a3:06:38:37:2d:9c:83:ba:fb:1c:32:
d4:3d:be:ed:3e:da:6a:66:9a:19:4d:3b:f0:f3:3b:a6:3a:ba:
51:48:d5:cc:b5:4a:1e:ba:e9:d6:ca:a6:29:6a:88:3b:27:f7:
83:c4:a8:3e:44:35:79:3d:bc:b3:da:69:64:cc:c1:c8:e1:ea:
8d:d3:c3:92:6d:af:cd:f2:75:d7:eb:72:14:26:1e:12:da:87:
f4:1d:e3:9c:7b:93:09:d7:e7:d4:f0:3a:d2:df:e5:55:62:8f:
1d:1d:20:13:97:5d:fe:03:64:29:d7:7f:ed:5f:8a:2f:fb:15:
c6:32:a0:e8:58:d2:d6:7c:47:3e:55:58:f0:3d:d4:f6:9d:ed:
da:d2:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:17 2026 by rpki-client