
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json)
Hash identifier: Dw90RTd6NTpr5rdY4SCjVAZoYe0HsHoBTAzVUN5Avuo=
Subject key identifier: DC:0A:6C:25:04:8E:29:B4:A0:06:89:E6:6E:C7:57:A3:CD:C2:BC:C8
Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
Manifest number: 014E
Signing time: Tue 13 Oct 2026 05:59:56 +0000
Manifest this update: Tue 13 Oct 2026 05:59:55 +0000
Manifest next update: Tue 20 Oct 2026 05:59:55 +0000
Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: /2rNGDZzmASyt1KeQzsdAFyzzzcfJviHKbfjyQ0OQ5A=)
2: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA=)
3: 854C34B410A611F1B36A7FF1393D8C67.roa (hash: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Validity
Not Before: Oct 13 05:59:55 2026 GMT
Not After : Oct 20 05:59:55 2026 GMT
Subject: CN=6acdc8dc-a454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a6:df:dd:f5:51:ad:7f:73:ee:66:21:a8:e6:
4b:7c:07:ed:12:ef:8a:62:4b:ca:64:f3:dd:fe:24:
e5:7a:6b:57:eb:4e:0e:f0:f4:eb:25:1c:40:7b:24:
cf:b3:8e:e9:03:c6:74:97:a4:5a:c1:d4:6b:47:87:
ab:32:c7:4f:4b:4d:ea:c1:16:d4:b8:65:d3:0a:5e:
c8:80:c3:32:e3:f8:ed:e5:b0:43:55:87:c5:f4:e0:
11:f6:b7:95:15:18:d9:72:f3:f5:90:a8:68:2d:25:
4b:36:f6:dd:6b:c0:f9:33:d2:c2:3e:1c:c6:64:cf:
6e:a5:50:03:42:fa:85:f8:ce:62:78:51:ce:f3:21:
0b:a5:9f:81:93:55:98:1c:53:dc:73:38:00:87:13:
1b:5b:5a:18:2b:f6:ad:65:6d:db:ec:11:40:82:70:
84:19:8c:0d:cb:c5:48:91:f8:52:77:d0:d2:53:71:
80:98:aa:4f:9e:75:a0:32:42:6f:21:b3:4e:a2:f8:
c7:d8:66:43:ac:43:d6:77:3a:6b:f6:5e:c6:cf:c2:
fe:ab:f8:84:71:84:00:07:3e:92:24:dc:84:41:08:
1a:7f:0e:2b:72:f6:f0:cf:96:7b:f8:26:78:e0:99:
d2:da:17:bd:90:70:8d:25:f9:99:30:b2:35:64:6d:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:6C:25:04:8E:29:B4:A0:06:89:E6:6E:C7:57:A3:CD:C2:BC:C8
X509v3 Authority Key Identifier:
keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:eb:8d:b7:2e:aa:12:30:bf:42:c9:49:88:71:cb:34:57:58:
e4:b4:41:5a:a8:be:ae:5f:cd:24:26:59:98:76:03:79:1e:b3:
09:15:3e:1d:64:e2:a2:b5:ee:b1:48:48:89:2e:93:a9:a0:fb:
aa:a1:76:9c:c3:a4:7d:56:ce:d4:bc:db:54:74:19:bc:a1:ee:
05:69:1b:12:74:7f:a1:b1:71:89:01:1c:b0:8e:dd:82:46:fd:
57:33:10:37:45:e3:72:19:d5:e6:c3:dd:98:81:ba:15:fd:12:
e5:57:16:c7:6d:0d:48:fb:9a:31:12:ee:c5:65:be:a1:bd:c1:
39:00:60:78:05:9c:14:fb:db:d4:68:e0:67:23:c0:1d:e2:06:
e0:db:82:6e:a4:c7:c7:76:41:56:76:48:30:3d:f2:c5:cf:0c:
0c:c3:e4:14:21:5b:08:4a:8a:dd:40:e1:26:63:e3:af:36:b4:
67:08:a3:22:8d:2a:cb:7a:bb:4c:fc:5c:87:70:c5:79:bd:e7:
22:bd:00:53:f4:34:86:c1:6a:93:38:98:7b:ef:c8:65:d7:a8:
df:79:9f:9e:07:89:8b:03:b9:37:47:48:80:35:bd:a4:e6:9d:
b5:bc:ab:30:b3:45:20:0d:7a:41:66:ae:04:4c:19:36:ee:75:
69:9f:1a:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz
ODcwNjU1QUUwHhcNMjYxMDEzMDU1OTU1WhcNMjYxMDIwMDU1OTU1WjAYMRYwFAYD
VQQDEw02YWNkYzhkYy1hNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7abf3fVRrX9z7mYhqOZLfAftEu+KYkvKZPPd/iTlemtX604O8PTrJRxAeyTP
s47pA8Z0l6RawdRrR4erMsdPS03qwRbUuGXTCl7IgMMy4/jt5bBDVYfF9OAR9reV
FRjZcvP1kKhoLSVLNvbda8D5M9LCPhzGZM9upVADQvqF+M5ieFHO8yELpZ+Bk1WY
HFPcczgAhxMbW1oYK/atZW3b7BFAgnCEGYwNy8VIkfhSd9DSU3GAmKpPnnWgMkJv
IbNOovjH2GZDrEPWdzpr9l7Gz8L+q/iEcYQABz6SJNyEQQgafw4rcvbwz5Z7+CZ4
4JnS2he9kHCNJfmZMLI1ZG1wRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwKbCUE
jim0oAaJ5m7HV6PNwrzIMB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy
RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODU1My9BNTlCRkZFNEQyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tE
dnJtUm5KbTk0Qlk0Y0dWYTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGeuNty6qEjC/QslJiHHLNFdY5LRBWqi+rl/NJCZZmHYDeR6zCRU+HWTiorXu
sUhIiS6TqaD7qqF2nMOkfVbO1LzbVHQZvKHuBWkbEnR/obFxiQEcsI7dgkb9VzMQ
N0XjchnV5sPdmIG6Ff0S5VcWx20NSPuaMRLuxWW+ob3BOQBgeAWcFPvb1GjgZyPA
HeIG4NuCbqTHx3ZBVnZIMD3yxc8MDMPkFCFbCEqK3UDhJmPjrza0ZwijIo0qy3q7
TPxch3DFeb3nIr0AU/Q0hsFqkziYe+/IZdeo33mfngeJiwO5N0dIgDW9pOadtbyr
MLNFIA16QWauBEwZNu51aZ8aqg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 13:49:38 2026 by rpki-client