
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier: onsj6nF5a9CforK0GN+IpLImiBsIBQhWuN6y0qUx/WU=
Subject key identifier: 9F:71:20:E3:84:BD:AC:06:CB:B9:8B:8B:43:24:C6:6C:A4:FC:FB:09
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number: 01CB
Signing time: Mon 05 Oct 2026 04:07:59 +0000
Manifest this update: Mon 05 Oct 2026 04:07:58 +0000
Manifest next update: Mon 12 Oct 2026 04:07:58 +0000
Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: NaeEYZ/7VP/xI6RBQhF4Du8kWOZDg+vuWvsq/5i0qss=)
2: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: XulmFJ+sIF5UMyQAz/MmaZcZch5QE26KdzQqhFjBUzg=)
3: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: 0cQ7lL+Dgw4MdHfwJ/NaEJmV6pZpv3TD2ijoWRCbMbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Validity
Not Before: Oct 5 04:07:58 2026 GMT
Not After : Oct 12 04:07:58 2026 GMT
Subject: CN=6ac3229e-e4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:0c:07:d9:42:a6:d4:1d:a7:64:e0:5b:aa:
a7:bb:cd:4a:e1:20:98:e1:e5:8e:01:38:1e:63:37:
7d:f6:2f:8f:ef:da:3e:fa:51:03:3e:17:f0:23:9a:
af:78:9c:2f:26:7b:11:ad:5d:84:a9:62:96:3c:49:
de:cb:c2:5f:3a:a1:c8:f0:52:35:33:fb:35:f1:1d:
8d:7b:97:53:d2:f5:1c:9c:b4:71:bf:0a:11:a9:9c:
59:4e:69:53:23:b4:f7:fa:7b:19:2a:68:a4:c3:8b:
3e:54:78:ae:81:b0:55:a7:94:f3:24:53:6f:a5:6a:
00:0b:8f:9c:6f:7e:ed:80:73:03:82:38:be:9a:26:
15:ad:a8:7a:56:fc:6f:c2:de:fe:bf:8b:5c:ff:91:
62:4c:c7:ff:6f:67:9a:28:f9:53:5a:d2:7f:9d:55:
e8:65:25:60:82:03:56:42:b3:29:76:6a:99:11:b7:
a6:d4:7e:47:c6:47:da:e8:62:c7:88:54:1e:75:bc:
14:a0:a3:a7:1d:eb:95:d3:fb:05:9f:31:b6:ca:ce:
f3:55:7b:ed:a3:83:70:a9:b3:1b:5d:cc:b7:a8:7e:
f6:a5:14:b3:a5:e4:a0:51:53:89:5e:c4:2c:ce:a0:
14:bc:53:f3:75:f0:c4:c9:0d:1d:18:b7:e3:96:a8:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:20:E3:84:BD:AC:06:CB:B9:8B:8B:43:24:C6:6C:A4:FC:FB:09
X509v3 Authority Key Identifier:
keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e1:4a:1e:0e:8a:4c:bd:df:3b:8c:1d:fd:4a:50:08:39:13:
32:13:34:0d:5c:06:5c:59:e5:c0:0a:17:ac:51:90:38:84:dc:
7b:16:08:d5:4d:36:7a:77:63:5a:8f:29:d9:0d:43:e7:1a:e9:
02:28:11:06:d0:f8:7b:74:ec:d1:ed:fb:4f:8f:a3:af:22:d1:
0a:b7:cd:c6:c1:db:d0:4d:df:56:72:3b:db:29:35:3a:f6:28:
da:71:8f:5d:6a:0e:cd:c6:8e:ad:2e:3c:47:48:db:aa:00:6f:
63:78:5e:a3:87:d4:db:48:4e:ee:8d:c4:85:e3:c6:60:91:c0:
cd:c6:e6:22:18:1a:77:86:43:17:2b:2c:73:9e:bf:47:08:0c:
60:cc:e1:e6:a2:97:86:78:4f:bb:ea:fb:97:cb:7c:8d:6d:b7:
f9:6b:84:6c:90:9b:ad:ee:30:3e:27:59:38:25:48:2a:42:0a:
4c:71:d5:cd:9a:64:71:5b:2e:23:8a:2b:f5:1e:2f:b4:59:cd:
62:de:44:52:fd:ff:1e:69:91:9b:f6:e5:52:cc:9d:c2:1c:03:
e6:a4:30:3e:b2:5e:6d:36:4c:95:14:36:86:ac:3e:cc:3a:b9:
f7:90:00:fc:39:a9:a4:61:70:56:a0:42:94:fb:c9:e4:e7:17:
37:0a:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:00 2026 by rpki-client