
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.mft
File: kJTbzLCZPZNW3iYiNSEr-nxpWzA.mft (raw, json)
Hash identifier: z/AL8pBYjiNs0AR4V7+SgGqOIkDtUAxwSAnt38nMEpo=
Subject key identifier: FD:99:08:C8:A9:29:D7:76:66:ED:E6:5D:57:04:50:F5:CB:CD:DD:04
Authority key identifier: 90:94:DB:CC:B0:99:3D:93:56:DE:26:22:35:21:2B:FA:7C:69:5B:30
Certificate issuer: /CN=A9182D8F/serialNumber=9094DBCCB0993D9356DE262235212BFA7C695B30
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJTbzLCZPZNW3iYiNSEr-nxpWzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.mft
Manifest number: 1A
Signing time: Sat 03 Oct 2026 09:44:45 +0000
Manifest this update: Sat 03 Oct 2026 09:44:45 +0000
Manifest next update: Sat 10 Oct 2026 09:44:45 +0000
Files and hashes: 1: kJTbzLCZPZNW3iYiNSEr-nxpWzA.crl (hash: J8cp2vsm5/UtopnrfyTeRpYWc2P/AJf6169ftCLWD8g=)
2: 8039749A9BB711F1867484075411F970.roa (hash: ih8oZkZRFJCH3uQTRYQXi4BDJrWbPw89ue2NLOo7OWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.crl
rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJTbzLCZPZNW3iYiNSEr-nxpWzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182D8F, serialNumber=9094DBCCB0993D9356DE262235212BFA7C695B30
Validity
Not Before: Oct 3 09:44:45 2026 GMT
Not After : Oct 10 09:44:45 2026 GMT
Subject: CN=6ac0ce8d-dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:e1:0a:9d:1c:50:02:e2:79:19:2a:a7:78:
ce:17:1b:e3:74:f0:92:64:d2:4c:54:26:a1:9a:03:
29:39:8e:6d:d3:f6:bc:2c:51:e4:3e:21:db:b9:dd:
49:53:ab:de:08:6c:7e:17:f9:4a:a6:e8:7c:bb:43:
38:6e:15:eb:44:eb:54:14:c2:94:c8:a4:37:3f:40:
4d:c9:5f:59:f6:95:c8:14:3d:54:28:ba:a5:b1:9d:
e1:57:e4:d0:26:be:c9:34:c0:1e:c7:63:86:7f:fd:
6f:0c:7c:66:ec:c3:2e:f5:bd:9d:fe:54:e4:c9:f9:
81:d0:bb:68:71:b1:24:90:05:dd:98:64:97:f5:33:
14:06:c7:8c:c3:ee:61:1c:66:df:7e:28:b2:14:74:
00:a9:49:8e:14:ab:bc:aa:c3:43:6e:34:c1:3d:58:
74:9f:68:e1:ff:c2:e5:95:48:e5:0a:e1:24:33:6a:
ba:65:80:98:76:9e:3f:cb:72:a3:f4:e2:1e:60:9f:
95:e1:5d:18:fc:1d:c5:1b:b0:92:07:4c:78:6f:9b:
89:cc:08:cc:8a:4e:38:4a:fb:25:79:cb:39:b3:de:
d0:3b:b2:06:aa:1d:80:1f:a5:a3:97:63:5a:5f:f1:
93:80:f2:e7:fe:03:50:2a:41:9c:35:b7:a8:d5:ea:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:08:C8:A9:29:D7:76:66:ED:E6:5D:57:04:50:F5:CB:CD:DD:04
X509v3 Authority Key Identifier:
keyid:90:94:DB:CC:B0:99:3D:93:56:DE:26:22:35:21:2B:FA:7C:69:5B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJTbzLCZPZNW3iYiNSEr-nxpWzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:b2:89:be:4d:86:10:18:63:1e:2e:d6:74:1d:8b:3a:ff:fd:
8e:41:5d:20:58:53:e9:94:d6:5f:18:cc:d9:7a:84:a7:7d:48:
74:d4:b6:05:47:6e:dc:21:4b:40:5d:31:c2:22:9b:c6:1a:30:
ee:cb:bf:13:da:a4:50:67:e3:8d:0b:63:ed:02:0c:c3:1e:fd:
cd:61:65:ce:d4:12:be:a8:d6:2e:4d:3f:92:68:1f:99:1b:35:
d2:17:b5:f2:13:b7:82:19:bc:ee:8b:dd:e1:90:48:4a:71:62:
96:50:42:a0:4b:04:8d:24:52:43:70:11:b0:1a:10:2d:69:c9:
29:17:85:c5:2e:52:8b:9a:4e:26:9c:a8:a4:c9:da:17:bf:40:
96:2f:b1:36:f4:99:43:7e:35:19:84:22:b6:eb:51:56:f0:0e:
db:85:5b:12:2b:35:4d:ff:4a:a5:61:de:b9:2d:bc:2c:b3:32:
59:48:c4:d7:f9:50:10:8e:e5:9b:c2:e7:04:2e:f5:f8:70:54:
d8:a1:14:01:13:61:0e:43:3e:63:3b:1c:a0:69:fa:e6:d0:b9:
8e:37:75:3c:e9:f3:f0:e5:15:03:de:16:d4:4a:f9:95:81:31:
3b:6a:c4:b1:16:2f:9a:14:b8:82:2b:b6:78:35:ba:0a:99:fc:
95:ba:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:04 2026 by rpki-client