
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier: ctZe5SVMvX0g2LuJi+G/nxJPsh546YMdDC9VkV1eCsg=
Subject key identifier: D8:97:6F:09:9C:59:4E:D9:29:BB:24:A5:66:C5:E8:A4:E4:29:5C:03
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial: 0BB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number: 0BA7
Signing time: Sat 04 Apr 2026 18:52:25 +0000
Manifest this update: Sat 04 Apr 2026 18:52:25 +0000
Manifest next update: Sat 11 Apr 2026 18:52:25 +0000
Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: JLsAQvh03kHLxhzYRh7HBr4q6ipwVmtVKzxxjg5/Rpk=)
2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: BflaMKPNzYcw7RJZL8ZElH/1dQPWbz3sqv57VUU34cI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Validity
Not Before: Apr 4 18:52:25 2026 GMT
Not After : Apr 11 18:52:25 2026 GMT
Subject: CN=69d15de9-f32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:15:aa:fa:9c:cc:6d:f6:6b:62:f7:22:f6:
64:48:cb:00:a4:b8:bb:20:4a:88:0a:1d:e7:a7:7c:
c3:26:b2:6b:25:91:05:7a:ea:bc:a4:cc:21:3f:b0:
a4:ae:9f:16:30:99:48:ca:81:c0:e4:cc:f5:c5:65:
32:16:ea:11:1c:45:ca:05:15:2a:5e:c0:3d:10:dd:
49:b3:4d:59:17:61:4f:12:3d:fd:d9:61:c6:f6:02:
08:34:af:32:bb:0b:06:87:07:7a:43:68:2e:34:1b:
05:12:4b:c8:6d:03:94:86:cc:98:08:87:e4:4d:c4:
b5:69:6a:dc:96:8c:a6:fd:cc:84:65:79:c4:81:4a:
68:2b:3a:04:d4:f8:f5:91:e8:82:f2:cf:17:04:76:
58:1b:b2:2d:8d:b5:9e:ee:27:ed:40:92:a9:fc:36:
af:4c:57:e7:43:30:f1:5e:dc:e5:12:45:27:40:81:
0c:87:c9:79:2a:e6:84:c2:21:93:0c:ff:cf:ce:26:
a4:4a:9a:5d:09:0d:00:50:25:ce:b0:76:b2:e4:36:
a8:38:a2:56:3e:5b:29:33:c3:b0:ce:78:fe:84:96:
c0:b8:9a:c6:5f:75:e8:66:4c:ab:e0:42:1b:ca:3a:
90:6c:9e:55:8b:4a:d5:e8:ac:fa:97:07:52:4f:e5:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:6F:09:9C:59:4E:D9:29:BB:24:A5:66:C5:E8:A4:E4:29:5C:03
X509v3 Authority Key Identifier:
keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:7d:cf:10:0c:68:4d:7d:6b:1e:2f:68:a7:3d:83:6f:8b:06:
c4:a8:93:f4:13:1b:22:34:b2:6d:6b:62:fb:4c:f3:c1:cc:b2:
04:2b:da:ff:ee:a7:fa:d9:36:bf:66:49:16:5d:84:5d:1f:3f:
dc:d4:27:fb:06:ce:7a:10:b3:5e:b5:81:63:a0:56:55:00:55:
2d:6e:69:11:7d:e6:68:a8:e5:b7:d9:95:da:be:a3:80:b7:3c:
de:1a:90:a7:7c:1c:76:3f:07:63:21:e3:f2:dc:68:29:41:1d:
35:86:2f:f9:a8:69:02:3c:c4:21:04:25:c5:3c:1e:bd:1a:11:
2b:04:89:e3:86:a3:c8:61:8b:37:45:57:54:bf:66:54:2b:e1:
db:88:0a:9a:d5:00:65:a8:b7:e2:d4:82:46:0d:77:91:10:51:
da:78:00:8c:18:6c:6b:2a:23:77:d4:0c:a3:57:1d:64:6e:82:
ce:d8:f2:83:cb:e7:a3:3d:0f:e4:88:9f:d3:ae:2e:3b:85:07:
d5:37:b1:1b:b5:0d:f2:5d:14:b9:b0:52:a3:a9:3e:7c:88:1e:
f0:dc:1f:48:1b:ab:63:0e:01:f5:ef:1f:7d:a3:39:87:71:74:
43:76:bf:a9:f9:0a:c3:7c:50:cb:78:e8:22:7d:dc:b1:53:22:
22:01:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:15 2026 by rpki-client