
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json)
Hash identifier: 5oo5yPH9OjfnKLldQTZrhSvsCr3exyyiAUP14+4Dan4=
Subject key identifier: 39:D1:F1:D3:23:F1:AC:10:4D:99:EB:B8:07:6C:93:45:74:4C:34:F9
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial: 0AC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
Manifest number: 0ABD
Signing time: Tue 18 Aug 2026 19:44:53 +0000
Manifest this update: Tue 18 Aug 2026 19:44:52 +0000
Manifest next update: Tue 25 Aug 2026 19:44:52 +0000
Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: MfY9gqMdlf8AzKoyEVY1lfzInEZCE5N5fX0IwL56pxE=)
2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: 7R0MGfZkuYK0q4GvlRzHgvPqThNHFfUTlqLnpkAuyi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Validity
Not Before: Aug 18 19:44:52 2026 GMT
Not After : Aug 25 19:44:52 2026 GMT
Subject: CN=6a84b635-5045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:bf:f2:e7:47:51:1e:40:ea:a1:97:66:c0:
5f:aa:7d:09:e7:df:2a:53:d3:7d:37:ad:2c:8f:eb:
4d:ec:1e:dd:3f:79:8a:02:96:c2:36:aa:0a:c9:bd:
e9:f3:a0:7d:56:d6:61:67:d6:0b:cb:c8:1d:96:97:
9a:78:52:2f:c4:d2:75:99:9f:52:6c:be:1b:05:6a:
62:80:8d:e8:b3:1f:b9:3c:b2:0b:55:6d:a9:65:f3:
75:b4:f0:c9:61:8b:c3:f9:d1:91:d2:c5:e8:bb:3b:
4f:62:d0:d2:ac:d9:36:cf:02:cc:35:f7:3a:f5:7d:
33:77:74:4b:2e:e2:9d:c9:9d:86:23:03:6e:2b:01:
f6:69:1e:2f:fe:7c:30:73:03:ea:07:ef:57:0c:97:
dd:17:ff:ee:e0:b1:73:d5:58:17:45:88:6e:e8:b0:
0d:9d:7b:9a:0f:d7:7d:b1:57:f6:ec:e1:96:90:22:
69:b0:3f:d9:3c:c2:94:8f:f6:fb:7b:d5:fc:ff:77:
94:c1:df:55:ba:b5:b0:c2:d9:07:ba:17:07:2e:f2:
13:d8:13:a7:20:e1:f1:ef:f9:cd:89:66:81:a7:99:
d2:66:17:76:7c:d7:91:05:5d:bb:eb:f4:a6:d7:8d:
86:07:bb:4c:b7:5c:fb:e5:e1:73:01:f3:21:99:76:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:F1:D3:23:F1:AC:10:4D:99:EB:B8:07:6C:93:45:74:4C:34:F9
X509v3 Authority Key Identifier:
keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:22:d7:ed:32:b4:0b:07:15:18:7a:ba:a3:38:1b:d0:e3:0a:
36:b5:00:d5:31:9b:34:bb:a1:3c:4c:97:1e:43:cf:63:db:4d:
94:be:15:e3:fd:e3:cb:19:64:50:e1:55:64:59:89:ae:50:00:
2c:70:ba:8a:8c:da:cb:73:1b:1e:4c:e4:8d:91:d1:c7:65:f8:
05:cb:79:4e:56:16:4c:60:41:a1:13:a3:79:36:11:02:61:39:
0b:5a:c6:c9:14:35:03:18:a7:3c:2d:48:78:5c:bc:c3:69:08:
57:9d:bd:46:66:f7:08:ce:64:c4:3d:67:02:e6:83:48:1d:c2:
3d:9b:b7:a1:4f:36:fd:8e:d9:5a:a9:d6:3f:95:ce:fb:d2:ac:
0b:75:05:73:e7:13:d8:13:6e:b2:96:a9:8e:b7:04:01:7c:4c:
50:a1:3e:4e:9e:3a:b6:14:2c:64:f9:6b:9c:aa:d2:7a:b3:43:
cc:c9:46:78:df:8c:ff:cf:70:db:39:9d:16:5f:d6:36:bf:a9:
59:d4:af:53:58:c5:a4:09:98:22:e7:51:36:89:f1:4c:32:42:
a0:ad:ce:c1:02:2d:8e:44:e1:8b:6b:a6:26:d6:23:16:b2:16:
f4:0a:d4:57:03:fc:99:c9:ff:92:d9:18:2d:93:1c:2b:ea:ca:
a0:c0:a1:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC
OERCN0NGMkQwHhcNMjYwODE4MTk0NDUyWhcNMjYwODI1MTk0NDUyWjAYMRYwFAYD
VQQDEw02YTg0YjYzNS01MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAu/8udHUR5A6qGXZsBfqn0J598qU9N9N60sj+tN7B7dP3mKApbCNqoKyb3p
86B9VtZhZ9YLy8gdlpeaeFIvxNJ1mZ9SbL4bBWpigI3osx+5PLILVW2pZfN1tPDJ
YYvD+dGR0sXouztPYtDSrNk2zwLMNfc69X0zd3RLLuKdyZ2GIwNuKwH2aR4v/nww
cwPqB+9XDJfdF//u4LFz1VgXRYhu6LANnXuaD9d9sVf27OGWkCJpsD/ZPMKUj/b7
e9X8/3eUwd9VurWwwtkHuhcHLvIT2BOnIOHx7/nNiWaBp5nSZhd2fNeRBV276/Sm
142GB7tMt1z75eFzAfMhmXZgCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnR8dMj
8awQTZnruAdsk0V0TDT5MB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF
MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV
c3FuNS1qMm1VTzI0MjN6eTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZiLX7TK0CwcVGHq6ozgb0OMKNrUA1TGbNLuhPEyXHkPPY9tNlL4V4/3jyxlk
UOFVZFmJrlAALHC6iozay3MbHkzkjZHRx2X4Bct5TlYWTGBBoROjeTYRAmE5C1rG
yRQ1AxinPC1IeFy8w2kIV529Rmb3CM5kxD1nAuaDSB3CPZu3oU82/Y7ZWqnWP5XO
+9KsC3UFc+cT2BNuspapjrcEAXxMUKE+Tp46thQsZPlrnKrSerNDzMlGeN+M/89w
2zmdFl/WNr+pWdSvU1jFpAmYIudRNonxTDJCoK3OwQItjkThi2umJtYjFrIW9ArU
VwP8mcn/ktkYLZMcK+rKoMChqw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:47 2026 by rpki-client