
$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json)
Hash identifier: dMPCwY7977z5qbZXQ5+2FkjHPXTgJ9Jfxq/cDb7Kf7o=
Subject key identifier: 77:71:04:5C:40:C4:EA:35:D9:75:35:E3:DD:B5:1D:4B:0B:FF:08:71
Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Certificate serial: 05DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
Manifest number: 05D5
Signing time: Sat 04 Apr 2026 22:47:57 +0000
Manifest this update: Sat 04 Apr 2026 22:47:57 +0000
Manifest next update: Sat 11 Apr 2026 22:47:57 +0000
Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: n/NWE049wBuR2TRf3G8jMyhf0MDL3Ryn78iG8uRctgg=)
2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: 5KIGpWZKTRHwQtms3xYKU2Snxu8ukES0vK87z+NnMlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7
Validity
Not Before: Apr 4 22:47:57 2026 GMT
Not After : Apr 11 22:47:57 2026 GMT
Subject: CN=69d1951d-4164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:44:ca:06:04:2f:f3:43:c5:32:02:d8:91:
af:32:f0:dc:23:85:d0:c1:20:a0:70:36:c5:b5:df:
6b:44:c6:2c:19:21:a0:c4:eb:76:6e:b8:76:bc:1e:
9b:97:1f:ef:9f:36:6d:fe:5e:a7:67:6d:e0:88:2d:
14:45:01:fe:26:db:17:a5:98:ed:e4:dd:e5:87:86:
55:78:03:96:16:9a:00:8e:a2:82:70:7c:be:66:f7:
1b:1d:53:e3:25:fa:be:ee:47:f8:4e:66:df:7b:92:
a2:84:fe:01:93:20:d7:e0:72:02:5f:fc:32:6d:56:
8a:ff:3e:f9:3a:9f:07:6a:aa:f7:2b:aa:d3:3d:09:
4a:bb:10:4e:4e:5e:cd:36:0c:20:62:27:f1:2c:55:
a8:f0:96:21:9a:b9:de:12:34:ca:46:cd:2f:0e:c9:
9d:a2:fa:ba:f7:37:54:05:30:9d:3c:8a:b8:88:b5:
cf:a7:3f:cd:9d:79:fc:dd:3f:1a:ff:64:5d:b5:ab:
b8:1c:8a:0c:15:6c:ee:8a:a5:cf:c3:65:43:e8:99:
56:e2:57:f6:ab:7a:00:73:f9:a1:fa:df:28:08:a6:
c7:6d:bf:de:75:c7:26:f8:58:58:50:07:18:14:85:
e8:be:a7:e8:18:9e:8c:6a:64:f9:5a:0d:fd:80:cb:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:71:04:5C:40:C4:EA:35:D9:75:35:E3:DD:B5:1D:4B:0B:FF:08:71
X509v3 Authority Key Identifier:
keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:13:f5:82:02:86:13:de:25:13:5f:a5:a3:d3:9b:ee:c5:3a:
a0:23:f4:7d:01:ff:cc:5c:c9:3e:49:5a:1c:69:2d:54:0b:fd:
52:56:2f:bf:26:7b:28:57:73:83:ff:94:c5:6f:f2:df:22:37:
93:d1:d0:16:1a:d9:5e:65:f2:a7:c0:71:85:95:71:7a:e4:42:
03:fb:f9:e4:3c:b4:c2:52:ac:e6:5c:1f:a4:cc:76:d2:9a:80:
3a:5f:24:3b:e2:21:e6:31:cc:d3:90:2d:74:2f:55:ea:c7:24:
70:a8:9d:90:cd:8d:e0:ca:71:3a:1e:90:9c:ac:c8:96:95:c8:
5a:60:a1:b5:5b:0a:bc:f7:4a:da:89:19:87:e7:ac:aa:1c:d4:
fc:e7:0a:b9:b7:2b:91:0c:1c:96:ce:2c:2b:89:e2:86:df:d6:
2e:00:09:9b:ed:17:93:e2:c0:79:cd:bf:9f:62:d5:d9:f7:4c:
09:a2:ea:b0:94:26:4a:fb:d4:a2:5b:e8:d8:a0:48:b7:4b:bd:
b7:57:c4:bc:c5:3c:af:0e:45:ab:cd:09:89:01:6a:28:2d:b8:
91:49:64:23:20:47:d5:95:c0:81:82:8b:2a:89:1d:ec:f2:85:
9a:00:7a:68:41:a6:1a:08:62:8d:1f:12:a6:cb:d3:fa:cb:b4:
ef:26:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:49 2026 by rpki-client