
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json)
Hash identifier: N/oiNz3PZVDlydkYvCwgx2CK1/uwELhQXtoPsSyFXOY=
Subject key identifier: 6E:CF:78:20:0A:13:97:1F:F5:0B:5A:F0:2D:94:F4:B9:96:7A:C7:C2
Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
Manifest number: 0102
Signing time: Fri 15 May 2026 06:20:05 +0000
Manifest this update: Fri 15 May 2026 06:20:04 +0000
Manifest next update: Fri 22 May 2026 06:20:04 +0000
Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: 8Y43o2N3z15WvZOECcJ6BPh35xOUvarj+FE/r6jQ/aM=)
2: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA=)
3: 854C34B410A611F1B36A7FF1393D8C67.roa (hash: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 06:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Validity
Not Before: May 15 06:20:04 2026 GMT
Not After : May 22 06:20:04 2026 GMT
Subject: CN=6a06bb14-fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:3e:18:77:2d:6e:9b:91:31:39:d9:83:6a:
c8:9c:15:94:33:74:e3:a3:70:49:43:bb:16:e8:d3:
13:27:2f:34:56:ed:e1:40:bc:f9:85:e4:f2:da:d3:
8e:3f:b8:f1:09:8d:81:7b:44:a8:f5:b4:4a:e9:0a:
ef:a8:a3:1c:8d:49:8f:c3:ff:19:01:89:18:23:ef:
91:28:7e:76:c0:3d:21:46:34:ef:bd:25:41:6a:ad:
96:70:ed:fa:bb:57:34:a7:23:03:e7:68:ca:25:b5:
58:0f:9a:b1:79:58:d2:bd:bf:aa:8f:2b:71:1c:00:
2f:59:e1:d2:4e:db:10:be:8a:a0:15:88:21:94:85:
f6:5e:84:1e:f7:62:5a:c9:2b:84:ad:94:1e:21:e3:
52:74:57:ea:59:c4:0f:6e:ea:43:49:18:e6:f0:f5:
63:f4:f0:86:84:c6:e3:51:00:ba:4f:ef:43:8a:18:
35:7f:4f:6d:94:61:fd:10:89:fb:b8:d6:0b:29:22:
f3:2c:9b:c3:1d:58:28:bf:41:c0:ee:96:d2:0b:6e:
66:ca:5e:7a:55:f7:23:f8:45:96:25:07:37:b1:bd:
8b:23:a9:34:fe:e0:46:38:70:06:71:51:90:74:d4:
88:b0:7c:3d:54:7c:28:1e:31:67:d5:2e:69:42:9f:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:78:20:0A:13:97:1F:F5:0B:5A:F0:2D:94:F4:B9:96:7A:C7:C2
X509v3 Authority Key Identifier:
keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:2c:67:00:d7:43:44:2d:ba:c8:e3:81:5b:5b:a6:3e:b1:3f:
7b:47:82:e8:bc:99:bd:c2:63:92:09:22:b6:00:ad:2e:c6:69:
79:af:da:91:8a:55:91:d4:2a:3d:e6:fe:dd:90:4e:6b:f3:20:
bc:35:d1:ad:2f:0f:f2:02:ca:a0:71:78:88:b5:f1:ed:62:c6:
53:10:68:ab:ec:22:e1:d4:87:62:a2:39:ce:df:9a:e7:5f:7f:
a3:81:ef:ef:3e:18:7c:0e:ad:eb:a4:09:5c:f4:b8:49:6f:e6:
82:d6:a5:62:2e:29:2e:75:cc:26:a1:c7:a9:78:ea:90:83:b7:
5f:7a:b9:50:8a:34:16:00:2a:41:4d:af:a7:f9:23:54:ce:38:
94:68:6c:7d:9a:b8:2f:ca:20:30:42:60:1a:70:4f:47:03:9f:
7a:e4:e7:9d:0f:0a:9c:41:0e:16:c8:9e:0b:d6:ff:e1:51:9f:
c4:93:61:1b:79:46:5c:ee:74:9b:3a:76:13:71:31:8f:e4:7b:
a7:5c:23:78:b2:69:c0:60:57:8f:c2:e2:b7:9e:d5:cf:a1:ed:
fd:be:c9:75:7c:d2:36:4d:64:d2:f7:61:d2:06:5a:8c:a3:65:
dc:59:3b:7d:8f:f8:65:a1:70:fd:5c:68:ac:d3:c0:b9:0b:8f:
73:a3:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:26:31 2026 by rpki-client