
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
File: k-Wm1UXgDFaegN4yLrINV1d1BXU.mft (raw, json)
Hash identifier: TTGn6Tp7RKKaqmvQye3WE0FU3eXOUavRy4gr7UyodhA=
Subject key identifier: C4:0B:7D:96:AB:DD:89:08:1C:55:01:E1:3E:1A:E6:72:4F:37:9E:A0
Authority key identifier: 93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75
Certificate issuer: /CN=A9171A47/serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
Manifest number: C7
Signing time: Mon 05 Oct 2026 07:18:43 +0000
Manifest this update: Mon 05 Oct 2026 07:18:42 +0000
Manifest next update: Mon 12 Oct 2026 07:18:42 +0000
Files and hashes: 1: k-Wm1UXgDFaegN4yLrINV1d1BXU.crl (hash: WWgCNuzOLlEJ/LOvphOi8jIWoTWwzDs0WM35/pRHR+k=)
2: 1805E4389DE011F0B44FDA76C4F9AE02.roa (hash: fUfQBk8vuauvLwmckgm4LCigStd+cF1S00uf1tyzxoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl
rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A47, serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
Validity
Not Before: Oct 5 07:18:42 2026 GMT
Not After : Oct 12 07:18:42 2026 GMT
Subject: CN=6ac34f53-5f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:96:48:1b:57:96:97:3e:77:d2:f9:0f:82:
9a:69:f1:91:10:21:67:82:ae:df:5a:e0:93:db:66:
9f:e2:7d:85:c8:1c:ae:60:b1:e0:90:86:5d:85:db:
54:68:96:ef:84:71:f1:c5:e0:9b:21:6e:ba:82:aa:
60:a3:bc:7f:20:06:d7:40:13:28:e9:2e:31:88:46:
eb:ee:c5:5f:b8:9d:1c:2c:97:a6:c5:44:bc:dc:85:
a0:9a:f0:46:e7:81:e6:69:bc:a6:63:5b:1e:5e:20:
2c:29:f9:50:82:41:e4:f7:43:e8:5d:95:cd:74:86:
30:8f:60:50:74:34:8a:c1:29:99:23:69:89:a5:9a:
70:71:f2:6a:f1:5a:3c:b4:8f:2d:f2:5e:52:40:3b:
c5:25:7b:b7:da:bb:14:4a:9f:c9:5d:14:57:a4:b1:
f7:ef:10:11:e3:ea:85:e9:d9:9a:12:46:e4:bb:09:
57:63:36:3d:7d:14:f2:14:8c:b2:53:25:73:2d:86:
10:61:bc:cf:28:1e:9e:cd:77:22:63:e6:53:00:d9:
ce:a2:40:34:83:9c:95:20:02:28:04:25:7e:77:ed:
4a:c6:39:07:f8:73:3e:30:4e:b1:01:6b:f5:41:8a:
64:f1:62:01:80:57:8e:bd:6c:cb:3c:83:79:66:31:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:7D:96:AB:DD:89:08:1C:55:01:E1:3E:1A:E6:72:4F:37:9E:A0
X509v3 Authority Key Identifier:
keyid:93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5a:f8:b4:70:3e:9c:ff:36:91:ac:07:90:97:f5:a6:aa:ff:
24:fc:22:30:ce:b7:c3:55:c4:85:dc:5d:30:c3:6c:40:71:f2:
6d:7a:80:03:96:a0:f4:58:71:ed:83:04:cf:f3:8d:cb:60:1d:
cd:b2:08:0e:4a:f9:35:7b:03:a5:5e:24:54:a7:a8:fe:1b:d5:
df:00:1b:fb:85:a1:c8:34:8d:a8:96:fc:7e:41:50:08:f6:6b:
b7:0a:18:f5:96:19:85:36:54:1b:b6:35:5d:a0:ed:22:b1:dd:
7b:1d:e1:4f:0c:ea:7b:cb:90:9d:38:8d:2d:88:c9:6c:16:ff:
f0:12:87:36:05:83:51:22:cf:2c:d5:9b:70:45:4f:0a:05:5e:
e0:74:bd:bd:b7:db:b7:eb:ce:08:c5:40:04:24:c9:4b:ee:6f:
40:ef:37:8e:7c:dd:c7:88:19:8e:b8:1a:f2:f4:89:91:04:e2:
84:f7:ad:57:04:05:b9:f1:f8:e3:fb:fb:bd:49:70:97:7c:df:
3c:03:ba:98:05:5f:3c:c3:0f:fb:2b:c5:39:f4:2a:4a:6e:2f:
e8:26:47:82:7d:79:b9:d0:5e:ab:67:85:d1:07:c8:62:dc:ab:
8a:95:0c:4e:2a:b2:3f:66:50:f0:57:da:24:a9:39:96:d3:0e:
fd:f7:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:42:06 2026 by rpki-client