
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier: h7ERtWZKAjvyOfwmHgFcAEmP+2ThUBNt/UAgcNaKzA0=
Subject key identifier: DC:FA:D8:C4:39:11:B6:08:B5:2E:0D:CC:F0:D8:3E:1F:D7:4B:21:4F
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number: 0701
Signing time: Tue 04 Aug 2026 22:40:08 +0000
Manifest this update: Tue 04 Aug 2026 22:40:07 +0000
Manifest next update: Tue 11 Aug 2026 22:40:07 +0000
Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: uWzmjvrvmeSNv32JbmRS2bUKQas1bHBiqlukb9e7zmQ=)
2: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: VfrfnykE97GgaY0zRE1Dz7s8bBRf2eI3Tb8yh05ip+M=)
3: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: 8pde81MDcdkJU9eGQjEY56q793Xs+y72zgiO1W6XgWY=)
4: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: DhlpMOxeerbam0Ebreh2cRbDaMP2SQsnadCF8Us5sL4=)
5: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: WXVlUOyzkeWPzzhrZIomqjgaV1ZguxykDFw7LzZvm8o=)
6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: ztA1AuZ4BQqgfUQti87Mu8/rVRVBv0z6I/y7sZMhknQ=)
7: 68219776A41311EBBF911855C4F9AE02.roa (hash: fKg8ntxQpUWIysk2hR9+QrUacflT95hyt+BE5Ct5DAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 22:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Aug 4 22:40:07 2026 GMT
Not After : Aug 11 22:40:07 2026 GMT
Subject: CN=6a726a48-3b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:3a:e9:47:a8:e9:d9:a4:a3:77:39:32:39:
b9:53:4b:43:43:da:a7:a1:ae:46:eb:95:0d:48:af:
1b:91:70:44:cb:ca:b4:23:c7:88:1f:ec:3e:51:51:
ad:21:5d:16:46:52:2e:49:f1:dc:d1:5c:3c:f9:b2:
45:ad:4b:14:17:5d:00:a4:08:da:8b:69:38:1d:5d:
0c:2d:f8:e7:42:11:14:2e:7e:8f:8c:9e:c3:6d:44:
14:c7:d1:0b:56:ea:03:ff:4f:88:3e:e9:44:85:6e:
16:f2:39:32:97:ea:36:67:0a:b5:b9:f7:3d:c0:a8:
94:17:70:dc:f2:ec:2c:55:1c:f8:d1:1c:e7:11:92:
9a:f4:ae:8d:75:a8:38:46:b1:c9:18:ef:85:ab:96:
20:b0:53:85:63:38:68:9f:87:d6:85:d2:55:12:d9:
c1:ee:a0:22:06:3a:13:2a:a3:a6:c1:cc:03:e9:bc:
f9:08:63:95:2c:98:1d:76:f4:8a:c5:7a:f3:3d:87:
f0:a5:81:34:e0:54:8b:ab:78:39:3e:49:a2:21:65:
3b:6a:dd:82:fc:96:ec:cd:41:0b:91:43:1e:a2:d5:
df:f2:fa:06:52:57:3b:49:11:2c:db:fb:1b:3c:0d:
bc:78:16:a1:01:7c:ca:66:d4:0d:61:7a:4d:b9:ad:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:D8:C4:39:11:B6:08:B5:2E:0D:CC:F0:D8:3E:1F:D7:4B:21:4F
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c9:c1:d8:c5:6e:84:79:30:71:fe:1d:9b:ed:15:89:08:96:
ab:94:d1:e4:c2:e3:1b:77:87:47:a7:ba:77:56:0f:40:33:6e:
76:18:6a:44:d8:7a:60:86:6b:0f:70:bc:a1:38:36:92:a0:b7:
7a:de:ac:5f:ad:15:b6:d3:ef:87:0c:81:44:28:d6:ab:07:3c:
0a:48:6a:79:d0:f0:6e:48:1d:3f:cc:a4:0c:3c:4b:dd:20:cb:
d4:b2:c7:f9:7d:ce:bd:7c:71:03:fd:b0:6f:c2:27:1d:ea:80:
bc:5c:24:2d:21:aa:4f:3f:33:b2:fe:44:ca:fb:a6:08:4d:26:
3d:77:0c:70:49:ec:31:15:f1:53:e3:4d:74:0e:08:6d:d0:44:
c1:04:a4:f9:fe:bb:10:c4:de:c2:b2:66:45:9c:ae:41:ca:97:
64:f9:01:f9:84:48:37:79:2b:ad:41:b4:a6:29:53:54:1f:1f:
9a:7d:68:cb:e2:c4:2f:b5:20:48:e8:0e:16:30:18:07:01:5d:
ca:58:6c:9c:c9:1b:7c:e4:e5:3e:ae:e9:92:a4:28:e8:d5:58:
2f:05:6b:31:50:23:5a:46:48:a1:fa:e9:d3:2b:67:c2:69:0f:
fb:c7:77:04:2c:45:e8:6e:6a:ca:f5:93:9e:56:38:e2:53:6d:
10:78:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:10:29 2026 by rpki-client