
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier: lfUA2KnKWXRxuemjM9vcJGl6DbNYBbtXzbj4YkqheIw=
Subject key identifier: 8F:C0:07:EF:9D:42:3A:6F:8E:21:77:5A:72:0A:8B:13:40:FF:D6:79
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial: 066D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number: 0663
Signing time: Thu 18 Jun 2026 22:40:04 +0000
Manifest this update: Thu 18 Jun 2026 22:40:03 +0000
Manifest next update: Thu 25 Jun 2026 22:40:03 +0000
Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: 6l+jL1/HE3YW1EF9QM9TQ0VQsBpGeYwxuq0nDhoFu4o=)
2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: 3aFodImKWMo+HHP106nEDJyeLQ2LYiLD1hjDTf3lt2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 22:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Validity
Not Before: Jun 18 22:40:03 2026 GMT
Not After : Jun 25 22:40:03 2026 GMT
Subject: CN=6a3473c4-fcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:68:49:22:f6:bf:79:09:35:23:22:f3:d2:
0d:7f:56:d7:76:00:c4:19:42:1f:f5:14:5c:cb:f5:
ee:d5:e6:8b:a3:de:7c:e9:4e:06:a6:fe:eb:9a:4c:
d5:2b:4f:c0:19:c9:90:76:99:7f:4d:20:85:cc:2f:
59:d1:5d:05:37:9e:2a:7a:a2:23:99:31:b2:b6:7b:
f4:fe:d2:57:99:4f:df:2c:82:b7:06:44:2c:35:1a:
43:ca:cf:ff:b5:28:4f:1f:68:42:88:48:90:51:c2:
83:b3:3b:99:b1:d9:1b:0e:03:1e:6a:2c:54:32:3e:
dc:e8:75:17:23:b5:e2:9c:83:63:4d:50:2d:4e:3f:
01:3b:07:b5:6a:cc:db:52:1a:76:96:3c:9c:28:28:
5b:33:18:ff:0e:85:d3:ab:fe:59:e1:7f:8b:65:76:
88:38:22:b3:94:df:ba:49:14:80:78:30:85:8d:ed:
92:46:3a:74:67:ef:0c:65:dd:37:f5:93:4e:64:39:
43:37:33:6d:7c:07:07:29:c7:a0:1a:6b:3a:69:a7:
36:dd:48:66:15:b7:04:f5:fb:8f:e3:b9:f2:96:cb:
58:b2:1e:4d:a2:11:3b:ab:92:f8:c2:b4:62:0f:66:
e6:24:80:7d:90:15:5a:0b:9f:ec:38:59:37:2e:d3:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C0:07:EF:9D:42:3A:6F:8E:21:77:5A:72:0A:8B:13:40:FF:D6:79
X509v3 Authority Key Identifier:
keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:b9:80:03:dd:70:76:15:95:3d:93:69:0f:24:a1:d5:f2:
11:0d:35:ff:3e:a0:02:64:df:fb:ca:d3:54:c9:b0:35:69:1a:
2a:ff:e7:5c:35:d7:8c:67:a6:42:06:4f:3b:48:d2:e7:dd:33:
6b:0f:c9:54:4a:24:8f:80:17:43:6c:65:15:87:77:6f:a2:ce:
32:f0:60:f2:8d:d2:ec:06:35:8c:92:13:4a:b3:80:ac:6a:77:
f0:cf:9e:33:f0:7c:62:11:73:49:24:4f:3e:1f:3b:c3:64:35:
90:2b:25:1c:ea:35:8a:f7:b0:2f:1b:26:36:f3:42:35:5f:c8:
a8:18:68:23:62:2b:85:3c:1f:0d:cf:ef:3e:cc:f1:9e:f3:10:
ab:11:e5:5d:d3:ea:47:8d:9f:67:52:43:26:0c:c3:be:78:2f:
c1:1f:f5:98:65:d9:bf:6d:6f:2f:09:6d:21:3f:3e:95:56:b3:
e1:30:d4:23:35:b6:64:d5:73:a0:8c:65:0a:ba:4b:78:7b:0b:
d8:6d:83:35:e8:af:2d:c6:ab:9d:a1:84:02:20:52:bd:a5:2d:
81:51:e0:e7:80:f2:e6:08:e2:1e:9f:2b:cf:96:9e:b7:fc:4a:
4b:06:11:7e:a3:d5:66:6a:56:3f:80:01:0f:89:d5:73:d6:7b:
41:fb:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:24:58 2026 by rpki-client