
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier: bMNOGIVLMc/Ol/RmYAB5W3wJuzBydEVNd8EB1/Gamug=
Subject key identifier: A7:D8:E9:84:74:3E:80:6B:C0:1D:D2:7B:87:C8:55:41:84:25:FB:16
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 06DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number: 06B9
Signing time: Fri 20 Mar 2026 21:58:17 +0000
Manifest this update: Fri 20 Mar 2026 21:58:17 +0000
Manifest next update: Fri 27 Mar 2026 21:58:17 +0000
Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: Bdbb+yKO+rEW5DeXllQ1Edzu/6qfQLWO0nphGpoOAwI=)
2: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: bhE8kPKbDhbjGGtK3dqK/PTW2f7OgPh1zprjpQ4GT6Q=)
3: 68219776A41311EBBF911855C4F9AE02.roa (hash: VjXHPuIwGHjxhTWLqkjCa7VDTT6rvVJHd6oJKd+W8yI=)
4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: j3y2MD2N/DYKUU8fqu1Wpt61itE0tbiREOOVu3Ycs5g=)
5: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: w4PVGKfxeERIvQHJMYDS31Ha+UPsN3eP0dVpold/msw=)
6: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: GMAvWxN7LqaBOKvtkjWDIMlqwj7hC5qzX6WxN7KtnZg=)
7: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: 1Z9LS41ng6fjPpTuu047cOJxnZNw575SVnm1zMIsT+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 21:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Mar 20 21:58:17 2026 GMT
Not After : Mar 27 21:58:17 2026 GMT
Subject: CN=69bdc2f9-d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:e9:71:68:0a:15:07:30:c8:a3:d4:ee:91:
d5:95:30:50:40:ea:38:a0:54:f7:10:9d:48:ae:26:
02:99:c2:e9:5f:7d:92:6b:ce:70:a9:5d:a6:fe:55:
57:c6:48:fa:95:12:e6:ad:3d:75:c6:ad:f0:95:f0:
9b:98:c3:af:f2:91:85:51:1b:94:0b:d7:e2:11:91:
f0:66:f0:39:d7:5b:4a:fd:36:98:c4:f8:21:bc:dd:
4a:6c:53:c5:c4:ac:c3:2a:60:55:b7:d4:3a:92:19:
29:c1:35:5d:c0:52:43:7b:08:78:9e:28:c7:e9:d9:
f2:5e:5f:72:fc:3c:6c:1f:46:e1:38:35:b6:83:db:
8f:20:c7:6f:54:aa:43:39:de:90:a2:22:e0:73:7a:
d2:d4:b1:25:65:e5:79:2e:22:2c:d0:e2:cb:0c:9f:
07:0b:72:e4:d6:66:ea:b2:b1:b0:3e:19:55:cb:11:
8e:57:5b:bb:5b:ac:82:67:e7:63:5d:2c:6a:4a:b9:
da:22:cb:ff:0e:cf:5b:21:55:79:05:27:21:82:cd:
81:2a:c0:3a:0c:81:0f:8f:3a:bf:c1:b2:34:c4:2e:
9a:11:09:e1:2b:e4:d1:45:1e:3c:62:cd:1f:7f:b1:
c8:85:6e:11:f2:86:49:ec:e7:b5:eb:bc:17:bb:1f:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D8:E9:84:74:3E:80:6B:C0:1D:D2:7B:87:C8:55:41:84:25:FB:16
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:b9:d6:ad:a1:93:a3:3b:06:3e:1a:09:c3:1c:5c:de:4f:
fc:f2:cc:2e:18:8b:cb:d9:6e:e6:60:20:ac:f2:8f:1b:67:1e:
c6:91:d2:0c:13:f4:56:06:a8:29:20:ab:bc:3d:db:28:d4:a1:
6b:16:12:1a:93:e2:94:cd:42:6e:b7:74:62:17:39:ee:c2:2e:
b4:f2:fa:fe:8a:80:7d:a0:6f:24:db:0c:31:91:7e:b3:00:c9:
65:97:e1:a4:24:ea:79:7b:33:42:ab:5e:4d:47:cf:d4:ea:6f:
85:d4:b8:2b:b9:56:c5:90:29:25:04:6e:be:01:0a:89:f2:ce:
ef:7d:a1:72:67:23:0d:d0:3e:0c:7f:25:2a:94:bc:12:a0:dd:
56:83:7e:cf:b8:db:18:66:51:ee:12:eb:e7:18:3e:ec:0f:5d:
36:6b:0d:e9:a5:6b:97:f3:6d:c8:48:0a:bb:76:f3:d4:38:69:
41:28:1b:c0:44:b4:a6:10:9e:6c:af:f7:d9:c9:a0:b5:e7:30:
00:82:97:f7:05:56:02:eb:7a:5a:b6:d2:3e:e2:c7:10:b0:43:
14:01:c0:58:74:81:35:c8:55:5c:08:af:9b:46:77:c0:f6:60:
fe:13:00:5d:3f:89:a1:16:38:a4:17:91:07:43:5f:7f:62:34:
02:47:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:16:58 2026 by rpki-client