
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json)
Hash identifier: p6enQ08oFrVNT1OjyngA75dSsFPS1Xn34cxVE4zqFto=
Subject key identifier: 3A:90:44:7D:E8:CA:CD:80:9F:49:2E:ED:39:E8:A7:47:A7:EC:CA:36
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial: 0623
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
Manifest number: 060D
Signing time: Wed 22 Jul 2026 23:38:09 +0000
Manifest this update: Wed 22 Jul 2026 23:38:09 +0000
Manifest next update: Wed 29 Jul 2026 23:38:09 +0000
Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: UMLdBzhZ8/NaarA+SnZl+C2OP+p4CLpOUGY4hr3rVR4=)
2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: rObNodnl4kiW2HwSgTl4V+2eGCn624eHu1NbbTBXI6o=)
3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: dU7VVF3QG8CRfa6WG2OEmnhKj0juHLcrGojTpDvzWz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Validity
Not Before: Jul 22 23:38:09 2026 GMT
Not After : Jul 29 23:38:09 2026 GMT
Subject: CN=6a615461-7dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:4e:97:eb:87:00:58:e0:b7:46:af:af:c1:
85:81:f3:5c:22:76:fc:a0:de:4f:48:a0:13:91:89:
ab:05:d2:48:42:cd:d5:79:ba:b6:57:a6:4b:50:7c:
f3:32:ac:b3:12:7b:a9:3a:f7:d9:01:f1:dd:e1:f2:
b0:cb:a9:8c:9c:db:54:53:44:78:9e:49:d4:49:37:
ed:48:22:54:eb:7e:6f:6d:8c:68:f8:fd:4b:5b:04:
1e:ea:ea:4d:32:d4:68:9f:8a:1e:07:ba:53:f1:03:
c5:4b:a2:f4:12:99:36:2e:cd:5a:04:d0:ab:93:5a:
a9:27:33:ac:18:67:ba:22:d3:26:3f:5a:3b:52:36:
ec:d9:a7:5e:d4:18:8f:e1:f1:22:12:b4:e6:5d:bd:
1b:5b:b1:87:ab:35:c3:a9:43:b5:f9:8d:aa:19:fd:
e0:9f:80:73:92:01:d7:0b:74:1f:54:c6:7f:eb:1e:
6e:46:18:c5:1c:7a:f3:6d:b5:94:fb:6d:70:08:e9:
84:a1:c4:3f:2b:ab:e4:a6:7f:5d:65:0d:cd:5f:1a:
3f:35:38:e2:12:2f:54:69:d3:1a:52:33:89:74:2a:
17:93:b9:82:3b:12:9a:3e:a6:81:cb:8d:52:b4:75:
a3:b8:53:ec:35:b8:9c:10:64:28:2c:16:52:b5:fc:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:44:7D:E8:CA:CD:80:9F:49:2E:ED:39:E8:A7:47:A7:EC:CA:36
X509v3 Authority Key Identifier:
keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:ef:7e:7b:ec:f8:80:75:d8:62:5a:d9:7b:77:12:60:0e:b3:
83:ef:b6:ae:c6:59:44:7a:73:71:71:29:d9:3f:1d:a0:99:c6:
cb:f3:87:cd:33:6c:80:11:c0:ed:8a:69:e7:f9:97:7d:e8:d5:
ec:55:61:45:8b:c2:d5:a7:fd:eb:84:72:60:4e:dd:ae:8d:a8:
e9:b5:a5:ae:c0:bf:aa:52:4c:32:f2:f5:87:57:f3:ea:cf:e8:
52:73:de:36:20:0d:86:da:88:6d:16:e7:46:02:c2:32:19:bb:
65:68:70:7c:3f:61:68:5f:be:8d:f5:95:84:0c:d6:52:7a:50:
a4:cf:35:91:9d:8a:29:cd:3c:11:53:ed:09:fe:63:9f:11:64:
a2:b1:a8:13:08:56:31:02:e5:04:8e:14:01:4a:55:fa:6d:75:
09:c3:1c:f8:b5:4a:ce:76:a0:89:41:b0:55:ff:66:85:e9:ca:
a8:7b:a5:f7:a8:f0:6b:72:d7:7e:ce:13:59:b0:80:c6:b8:d9:
93:23:b5:ae:a0:67:a0:ab:f3:81:95:a6:56:e2:1e:3e:48:d6:
e5:d2:20:30:0f:15:4e:15:fa:7e:59:e7:bd:3a:2e:6d:02:78:
b5:46:c0:b8:8e:3f:0b:2b:c2:37:cf:c6:3a:42:39:24:52:0e:
2c:b0:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:09 2026 by rpki-client