
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json)
Hash identifier: ZebxQuqf7LxVBvMaGXupb8P9p/vqEsUBwc+82LqhTA8=
Subject key identifier: 91:33:BD:A5:73:05:EF:F9:A9:E8:C7:34:91:EE:31:3F:16:12:B7:16
Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
Manifest number: AD
Signing time: Wed 19 Aug 2026 07:49:31 +0000
Manifest this update: Wed 19 Aug 2026 07:49:30 +0000
Manifest next update: Wed 26 Aug 2026 07:49:30 +0000
Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: DynQZCDiCv0LTh6/tTiQEqcplNOjkFNiEarM6Qn383Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Validity
Not Before: Aug 19 07:49:30 2026 GMT
Not After : Aug 26 07:49:30 2026 GMT
Subject: CN=6a85600b-2fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:48:fd:a7:b3:82:f1:96:14:bb:fa:e4:b2:
83:0f:0e:59:72:58:21:44:60:f9:6b:18:20:46:87:
6e:14:0b:a6:b0:1a:f7:73:82:a1:75:25:ea:3b:74:
26:fd:8e:13:f9:63:e2:75:77:6d:f5:37:bf:8b:db:
a8:e9:a0:e6:eb:d6:41:94:ff:4d:e7:1f:f7:19:c3:
f1:bb:55:9e:c6:d3:8a:21:31:dc:72:99:87:e2:72:
d8:ed:a2:57:54:24:b4:30:fd:fb:96:68:4a:8d:45:
32:13:bb:f0:27:a5:22:a8:ee:38:20:e6:c2:90:3f:
85:60:7c:ca:49:84:b0:65:18:8d:5a:ca:19:f9:c7:
b9:5d:09:f0:0d:8c:46:8e:b2:d2:9a:f6:f6:ed:3a:
e7:c6:5f:e4:af:1a:23:2e:bc:1d:cc:74:18:9c:6e:
3a:8d:03:63:0d:d9:de:f0:a2:dc:28:c7:10:c1:16:
63:96:7a:7b:74:55:f8:70:fb:19:37:36:fd:e6:42:
fb:4e:bf:7c:42:0f:23:02:8d:f0:ce:bb:6f:92:18:
59:38:d5:77:de:8b:97:75:e2:a2:dd:0b:9f:65:42:
c9:48:ac:b4:21:d6:18:04:4e:bd:26:ae:34:60:04:
4c:3c:61:0c:c9:6e:89:80:51:65:5b:cf:fb:0e:ee:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:BD:A5:73:05:EF:F9:A9:E8:C7:34:91:EE:31:3F:16:12:B7:16
X509v3 Authority Key Identifier:
keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:1f:35:f8:78:a8:49:4c:73:24:3b:db:d5:81:86:40:f9:
ab:10:9c:27:7b:ff:eb:27:3b:9f:68:3f:d1:20:75:0b:74:aa:
13:cb:a8:e0:e0:96:a4:34:dc:70:80:68:ef:a8:b1:c1:2b:62:
9a:dd:8f:ad:33:52:d0:af:75:4f:cf:62:84:86:9f:ee:3a:7a:
43:4f:86:3d:69:a6:34:a1:ea:85:de:dc:75:04:db:d8:f0:01:
f6:13:9b:c8:f1:24:4b:87:cd:4f:e2:8b:3f:29:ff:65:d8:9e:
96:9f:a6:b5:0a:87:5e:af:82:9b:66:34:6c:da:76:8a:06:62:
0f:a5:95:44:34:b6:a5:c8:5a:6a:c0:90:f8:b2:a8:c5:95:f0:
9f:f1:11:5c:7c:5a:59:12:d8:20:bc:70:6e:30:3c:b9:55:9f:
fb:6d:93:7b:15:b0:83:3a:4a:da:fd:e5:c2:b3:cb:a1:8f:85:
4d:2b:a3:32:32:97:cd:92:45:d8:19:90:e8:76:e9:44:2b:73:
52:e4:6b:72:8c:f1:f8:42:b8:c1:4c:a9:28:36:eb:78:13:1d:
fc:7b:5b:e6:17:2b:86:35:7a:25:d8:47:af:3b:2d:e8:e1:ca:
3f:00:d3:91:5b:52:88:6b:c7:d3:ec:7d:a3:51:85:f2:50:f7:
f7:ff:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:49 2026 by rpki-client