
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier: 0CIQXt/DjIhsvQGKldL5qR3ubeRcm2UlSGuavVKybWE=
Subject key identifier: 8C:26:A7:BA:1F:84:D8:35:C7:A2:7C:FB:CB:A6:D0:10:9A:1C:2E:6C
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 0ABD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number: 0AA5
Signing time: Tue 02 Jun 2026 16:06:15 +0000
Manifest this update: Tue 02 Jun 2026 16:06:15 +0000
Manifest next update: Tue 09 Jun 2026 16:06:15 +0000
Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: 8GKojzQttl2nx8eTOXxUQLwmKqD9Ebw/iGrYa1wjtUk=)
2: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: H9NP/VYQvQD8I9QwYD5I5jN2r70DSUl3MHJ3J25IGvM=)
3: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: 6/hpOniUWZ3kaCUO3scuJGL4ThJjABMLCMX3Elyy0Vo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Validity
Not Before: Jun 2 16:06:15 2026 GMT
Not After : Jun 9 16:06:15 2026 GMT
Subject: CN=6a1eff77-6462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:78:5f:ac:e9:08:d6:5e:ff:7c:32:cc:c7:
30:e2:4f:58:0b:3b:a1:b6:70:82:60:14:38:0f:fd:
bc:32:03:51:63:f6:26:ee:8a:51:fe:13:ee:ea:78:
c3:e1:85:2b:35:e2:92:bf:17:60:20:3b:e2:9c:0f:
8d:3f:f8:d8:f0:4d:d7:9d:4d:6a:1f:5e:43:45:7f:
b9:c5:59:13:9c:86:37:3d:38:c9:cb:10:f0:92:06:
9e:95:75:a9:72:0f:99:4a:4a:94:f5:dd:00:8f:55:
9b:eb:57:f2:47:d9:98:16:c3:98:8f:26:2f:b9:7f:
43:9a:f6:14:74:16:87:87:5e:f4:60:ff:31:15:99:
fc:07:88:c8:86:2d:fc:64:65:d2:cd:e1:52:65:26:
68:e7:9b:a0:c9:82:5c:22:37:7b:54:cb:f7:52:1a:
10:20:b7:36:2f:83:e8:41:00:6b:a0:f1:d4:97:c1:
56:70:4d:17:74:78:2e:7d:a1:20:bb:4f:a3:b6:1e:
b0:d7:37:a5:b1:7b:4d:be:58:3b:5a:b5:30:95:c7:
c3:90:e1:c9:bb:6d:1c:09:4b:1b:5c:36:d6:15:bb:
e0:44:55:e1:87:6d:88:b6:96:ff:6e:58:b0:67:51:
9a:5d:46:77:ec:f0:8e:0d:d3:76:4e:4c:9d:da:42:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:26:A7:BA:1F:84:D8:35:C7:A2:7C:FB:CB:A6:D0:10:9A:1C:2E:6C
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:79:b7:58:a9:26:e3:f6:54:2d:1b:20:c4:e7:76:7c:d3:00:
32:f1:5e:29:4f:2f:71:5f:16:fc:67:03:71:a8:01:b8:9f:96:
ca:55:bc:16:10:8e:1a:5a:a8:12:8c:9e:23:dc:b7:dd:8a:c3:
52:24:52:1d:54:70:42:0f:07:b2:30:30:4f:3f:23:2a:42:0e:
8b:76:4e:23:9a:f7:46:98:cc:a4:b5:02:58:9f:38:4f:3c:90:
b3:d3:b8:ae:b2:fa:c7:4f:5e:8e:10:8c:ed:08:e1:13:1a:de:
3a:51:e8:16:1f:60:ee:26:d5:c4:df:6e:73:23:71:69:ce:70:
5b:09:0d:06:d0:69:5c:44:9e:96:2f:13:9f:f2:ff:21:92:60:
69:29:2f:38:b6:28:c7:b7:f0:f8:45:5a:9e:0c:be:09:bb:21:
96:48:c4:35:60:3c:13:20:99:7e:9d:fb:fe:05:c4:7c:fc:77:
4c:16:05:ac:c6:60:5c:6a:70:59:6f:2d:9b:33:54:96:8e:aa:
36:e8:bf:4e:ec:3e:ef:7a:1b:ef:dd:cc:2c:24:35:0c:4a:51:
93:46:7b:2b:4e:f9:0b:5c:ea:bc:73:4f:2a:91:1a:4b:44:42:
74:a6:1c:b7:df:e7:11:97:96:b1:01:7d:53:23:e5:77:ea:c0:
3f:4a:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:48 2026 by rpki-client