
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft
File: kWVolTFx5je1xQUy4yMbNrnGjLs.mft (raw, json)
Hash identifier: YbaK7EjaMq32vTdi+FQBIBzrKiEBjVWfEZQDBhCuU8o=
Subject key identifier: EA:51:5E:5B:9A:7F:81:E7:58:0F:ED:B9:49:8E:27:BF:D5:4F:12:AF
Authority key identifier: 91:65:68:95:31:71:E6:37:B5:C5:05:32:E3:23:1B:36:B9:C6:8C:BB
Certificate issuer: /CN=A916B32E/serialNumber=916568953171E637B5C50532E3231B36B9C68CBB
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft
Manifest number: 6C
Signing time: Wed 19 Aug 2026 08:42:35 +0000
Manifest this update: Wed 19 Aug 2026 08:42:35 +0000
Manifest next update: Wed 26 Aug 2026 08:42:35 +0000
Files and hashes: 1: kWVolTFx5je1xQUy4yMbNrnGjLs.crl (hash: d9FenXKNjAlFX0IC8KZvQgdgpWLhkdoZ+ngCvx/e1yQ=)
2: CBA294E6000F11F1A395F9D03F6F56BC.roa (hash: 7pdhmhnOODRIBE8hIy7aPVlTry8TuLzDRyLTI2kIKXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.crl
rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B32E, serialNumber=916568953171E637B5C50532E3231B36B9C68CBB
Validity
Not Before: Aug 19 08:42:35 2026 GMT
Not After : Aug 26 08:42:35 2026 GMT
Subject: CN=6a856c7b-62e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:d7:b9:7e:ff:e1:0d:29:4e:25:1e:9b:d9:
19:9a:c5:bd:76:e4:81:d6:fc:55:77:fa:f5:7a:33:
29:a0:00:be:c0:81:c4:e1:6d:54:b2:cf:38:4f:7e:
96:be:3e:36:d1:6f:b6:10:75:3b:b1:19:dd:d0:58:
d0:60:43:68:43:18:20:90:7f:8a:6b:5f:f4:64:e0:
46:32:b6:d7:5b:df:bd:88:73:23:6b:3f:2a:74:d0:
c0:4f:4d:3b:68:6b:02:49:16:a4:97:1c:b8:3c:7f:
97:25:9e:27:c2:da:79:23:c1:81:03:3d:9b:fd:82:
6f:50:eb:31:84:df:6a:98:1f:c3:bb:0b:9b:57:02:
3b:be:a6:f0:6f:7e:14:ae:9c:be:b8:90:39:5d:c1:
26:0e:1e:ce:30:b9:83:69:6e:d4:b1:ba:fb:78:ac:
2f:a7:85:27:b3:3e:84:ff:89:b5:d3:e5:29:4d:b4:
6e:4e:af:aa:5c:3e:12:17:ff:7a:f0:b6:86:df:3d:
bf:c9:a2:b1:ff:52:a8:aa:3e:06:5b:16:ba:2e:4a:
64:24:1b:04:44:20:e1:f3:8e:db:b7:dd:db:cd:31:
df:7d:13:92:2e:29:2d:8f:dc:43:1f:a4:c2:bd:f4:
d1:8f:72:47:f0:27:04:9f:11:1f:8d:63:f8:f7:a9:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:5E:5B:9A:7F:81:E7:58:0F:ED:B9:49:8E:27:BF:D5:4F:12:AF
X509v3 Authority Key Identifier:
keyid:91:65:68:95:31:71:E6:37:B5:C5:05:32:E3:23:1B:36:B9:C6:8C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8f:5a:3c:96:77:ce:15:59:3b:28:ba:0d:71:16:55:7b:37:
ac:27:fb:8a:f5:f4:e1:8c:61:14:5d:3c:74:98:6d:f4:6a:3c:
c3:49:70:e1:51:c3:89:50:20:cd:18:b3:1a:c8:b5:f6:6b:ca:
0c:4b:b5:24:14:a8:c1:20:be:86:dc:4b:35:08:04:cd:9a:f8:
ce:01:0a:aa:3d:4a:de:86:28:c8:41:b9:42:1a:06:52:1a:d9:
11:b1:de:14:87:26:a3:22:ae:6d:cc:a8:e4:50:ce:23:99:d3:
72:70:72:9a:33:eb:af:94:4e:50:25:51:1a:54:07:4c:68:fc:
3a:1e:55:71:48:bb:8f:4d:d1:ef:5d:3d:f9:15:1d:cd:2b:39:
09:46:9f:70:d2:2d:2f:da:e2:e6:73:49:4c:cc:17:f6:75:bc:
0b:c1:2d:37:1a:25:e3:a4:da:bc:48:bf:4c:a6:5c:cd:c9:e4:
b1:74:28:7b:da:45:a4:b5:be:39:72:77:45:28:aa:33:e3:d4:
b2:49:32:cf:56:a2:83:57:54:84:ee:99:42:1c:c8:a9:a3:50:
6e:da:60:b7:c4:3a:b9:32:33:a3:ca:97:17:e2:28:b5:a7:ea:
a9:cb:40:f4:a3:0a:87:a0:ab:25:ad:7f:b8:be:44:74:7c:4d:
a7:3d:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:04 2026 by rpki-client