
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
File: kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json)
Hash identifier: xf3XmGWMOe+LuORCOhqxajIji4Qx/vPQWik+j4E/Mtw=
Subject key identifier: 6F:1E:0D:67:5C:1A:72:39:60:95:30:64:9A:01:03:24:02:A7:3A:6E
Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
Certificate issuer: /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
Manifest number: 0177
Signing time: Fri 05 Jun 2026 04:56:58 +0000
Manifest this update: Fri 05 Jun 2026 04:56:58 +0000
Manifest next update: Fri 12 Jun 2026 04:56:58 +0000
Files and hashes: 1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: OC+dVc+a3hm+gQEV/YQfzMHj122qBPhRDVIr2fqrO+U=)
2: CCAF2918109411F186362BB2353D8C67.roa (hash: Upvyy2jPvhhD/OdsNESStZNIXsW/r3KlLDVUrD02B1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 04:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Validity
Not Before: Jun 5 04:56:58 2026 GMT
Not After : Jun 12 04:56:58 2026 GMT
Subject: CN=6a22571a-30fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:d6:d1:2b:48:33:b4:66:09:32:27:a8:3e:
ee:ca:bb:1c:47:46:8f:d9:14:2f:16:10:13:a7:e1:
45:9f:33:8f:df:cb:c1:ff:57:70:81:58:01:26:10:
3e:b4:cb:ee:1d:be:92:cf:1c:2d:d4:74:43:59:30:
a7:6c:43:4c:94:8c:c6:9b:a5:69:4a:51:28:87:07:
ee:24:57:e7:25:0f:a1:4a:4f:52:14:2b:76:0d:97:
f5:30:03:72:10:76:9a:b1:bc:d7:47:46:d4:0d:45:
54:4f:20:45:b1:ee:49:99:97:6b:c7:6a:e6:f7:d0:
9f:2d:e5:68:b4:e6:51:48:5d:c0:e0:1d:46:aa:49:
9f:4e:25:c5:b4:2b:ee:b5:6f:ba:a7:bc:3a:16:75:
62:db:a1:49:25:8e:b0:a6:a2:98:79:e9:70:8f:09:
c7:1c:80:3b:02:3c:d1:ba:66:26:c2:fb:9d:f6:c2:
b9:03:82:eb:2a:b1:96:71:c3:e2:be:55:67:b9:93:
29:ac:99:b3:c6:e0:e1:ba:14:13:28:3e:89:0e:22:
64:ec:9d:09:5e:c9:52:57:37:fd:22:95:a9:02:89:
a0:7b:6d:49:65:f3:b2:db:0b:ae:8d:55:3d:f8:46:
00:75:fe:eb:0e:08:77:fb:0a:05:39:1e:8d:86:16:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1E:0D:67:5C:1A:72:39:60:95:30:64:9A:01:03:24:02:A7:3A:6E
X509v3 Authority Key Identifier:
keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:02:69:94:6e:a0:ac:ac:1b:8f:55:a0:8f:ed:d0:53:ce:f9:
f7:0f:a2:0b:84:87:eb:1a:18:3b:03:0d:97:72:f5:7e:b1:ef:
18:3f:81:54:9d:0b:4c:70:5b:4c:cf:63:f8:c0:ea:42:1e:a2:
51:38:bc:a7:5f:aa:45:c5:a0:f9:fc:3f:26:7f:95:53:12:6e:
f5:48:2b:25:2a:18:69:d5:aa:f3:f1:e9:dd:b8:1c:13:8a:bd:
d7:95:c0:17:ec:57:b4:67:58:73:26:2f:c7:1b:ca:47:a3:3a:
7d:2f:30:e3:e8:40:8a:4b:0f:bd:a1:7f:ae:41:e4:d9:7e:bd:
75:6c:8a:03:6c:7c:9c:2b:9b:10:40:1c:4e:4f:7e:4e:60:1b:
1d:c8:8f:40:1c:b8:f7:dc:55:7a:3b:af:b2:3f:f5:a3:0c:9e:
dc:17:02:59:0d:72:aa:3f:ab:b7:bc:be:c8:f9:3f:f1:07:88:
fb:de:1b:63:0b:c0:54:8e:82:47:8f:94:8b:52:0b:69:93:4d:
fe:84:18:4a:8c:f5:2e:dd:59:28:18:f7:1f:50:d1:c1:ae:b4:
d8:8c:68:63:21:4e:d9:e0:29:10:b7:41:6e:70:51:3f:34:6f:
bc:cd:a6:33:0e:0c:47:ae:65:96:99:fd:e4:25:9a:90:0d:d5:
cf:b1:77:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5MDkxMTAvBgNVBAUTKDkwOERCM0Y5Qjc0NkY1MjBCQkI5QTg0Qzg1M0Y2OTI2
QzE1RUI5QkQwHhcNMjYwNjA1MDQ1NjU4WhcNMjYwNjEyMDQ1NjU4WjAYMRYwFAYD
VQQDEw02YTIyNTcxYS0zMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEbW0StIM7RmCTInqD7uyrscR0aP2RQvFhATp+FFnzOP38vB/1dwgVgBJhA+
tMvuHb6Szxwt1HRDWTCnbENMlIzGm6VpSlEohwfuJFfnJQ+hSk9SFCt2DZf1MANy
EHaasbzXR0bUDUVUTyBFse5JmZdrx2rm99CfLeVotOZRSF3A4B1GqkmfTiXFtCvu
tW+6p7w6FnVi26FJJY6wpqKYeelwjwnHHIA7AjzRumYmwvud9sK5A4LrKrGWccPi
vlVnuZMprJmzxuDhuhQTKD6JDiJk7J0JXslSVzf9IpWpAomge21JZfOy2wuujVU9
+EYAdf7rDgh3+woFOR6NhhYqzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8eDWdc
GnI5YJUwZJoBAyQCpzpuMB8GA1UdIwQYMBaAFJCNs/m3RvUgu7moTIU/aSbBXrm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8yMDlFRERDRTJB
MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlTQzd1YWhNaFQ5cEpzRmV1
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tJMnotYmRHOVNDN3VhaE1oVDlwSnNGZXViMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTkwOS8yMDlFRERDRTJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlT
Qzd1YWhNaFQ5cEpzRmV1YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcAJplG6grKwbj1Wgj+3QU8759w+iC4SH6xoYOwMNl3L1frHvGD+BVJ0LTHBb
TM9j+MDqQh6iUTi8p1+qRcWg+fw/Jn+VUxJu9UgrJSoYadWq8/Hp3bgcE4q915XA
F+xXtGdYcyYvxxvKR6M6fS8w4+hAiksPvaF/rkHk2X69dWyKA2x8nCubEEAcTk9+
TmAbHciPQBy499xVejuvsj/1owye3BcCWQ1yqj+rt7y+yPk/8QeI+94bYwvAVI6C
R4+Ui1ILaZNN/oQYSoz1Lt1ZKBj3H1DRwa602IxoYyFO2eApELdBbnBRPzRvvM2m
Mw4MR65llpn95CWakA3Vz7F3tw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:34 2026 by rpki-client