
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: ZKHeAko9Vbc7ObqJlt7SSuMxZ/Se/rsasc/Yke7OKtY=
Subject key identifier: 53:39:78:42:76:A5:0C:AF:28:95:03:7D:1E:EC:58:C5:10:B6:F7:71
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: C0
Signing time: Wed 25 Mar 2026 06:13:04 +0000
Manifest this update: Wed 25 Mar 2026 06:13:03 +0000
Manifest next update: Wed 01 Apr 2026 06:13:03 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: tSABLafHMsNMjwCeinGp8vZapiueFr+LLgF+E2qMkLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: Mar 25 06:13:03 2026 GMT
Not After : Apr 1 06:13:03 2026 GMT
Subject: CN=69c37cf0-8e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:26:b7:c6:eb:66:64:a7:02:7e:0f:49:89:
ac:5b:e6:be:2b:b5:53:cf:c9:54:fa:88:97:04:c7:
d3:df:6d:29:aa:4a:33:d4:5c:1e:64:95:91:18:66:
8c:92:28:f9:ce:89:7c:dc:c5:5f:e0:f0:82:5b:ae:
18:3e:a2:13:20:95:68:12:97:35:37:d6:a5:ca:be:
b4:94:45:15:61:7c:d8:2a:1d:ea:c8:3b:87:9d:04:
c8:c2:59:20:04:cd:6e:9f:45:56:4f:6a:2c:46:22:
e9:1c:e5:55:8c:96:c3:e9:1a:07:96:b3:f8:a4:87:
3f:d7:ed:52:c4:a0:46:08:76:78:e8:1d:a8:7d:b9:
9d:4c:4e:8d:43:20:11:94:fe:41:58:30:03:f8:d1:
23:09:76:6b:9c:a2:ef:40:3d:59:c9:94:27:ea:d1:
8f:fb:32:90:d1:48:45:a9:6d:8b:b4:68:4a:44:2a:
13:13:6c:24:b9:0b:ec:79:92:32:72:d7:d7:b3:21:
3d:82:57:57:ee:c1:0f:76:fd:c4:4a:1c:6e:fe:5f:
4e:fd:b7:98:35:97:d0:a9:05:d6:0d:84:e2:19:66:
af:96:ec:ae:6e:c1:15:6a:cb:9e:c8:97:10:4a:9d:
2f:80:03:40:55:54:67:df:84:62:1b:14:7f:1f:b9:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:39:78:42:76:A5:0C:AF:28:95:03:7D:1E:EC:58:C5:10:B6:F7:71
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8e:a8:85:06:34:6e:bf:d1:d7:31:36:ab:d6:c2:d7:c2:0a:
a8:d5:51:ca:0b:1e:a1:eb:df:57:1f:9c:8d:ee:2e:4a:2c:16:
cf:bf:59:b6:a1:df:54:0d:67:6c:1e:6b:1c:a0:52:ab:16:52:
51:78:25:6e:5a:1b:94:10:5b:17:12:80:b9:0d:8d:f9:92:93:
ce:fc:6c:10:a2:11:0c:43:f1:f1:6a:13:c2:1a:f9:6b:6a:58:
ed:82:77:43:d6:ba:9c:f1:e8:06:03:53:8f:97:ea:b8:0a:8d:
67:4a:67:4f:04:e4:a0:74:f0:00:a2:81:05:84:95:4c:8a:04:
fe:c5:e4:dd:32:79:82:ac:de:72:f4:13:ad:3a:00:3c:15:72:
a3:1e:4a:fe:1e:f5:ae:34:4f:53:a5:73:9f:b0:e3:a2:17:53:
88:34:6b:eb:0f:b3:bb:b5:f0:a8:fe:4f:27:42:f6:b6:ff:03:
5f:6c:8c:fc:93:77:68:62:ec:08:4b:27:e4:1b:a2:8f:48:84:
c6:4a:dd:1c:3b:50:95:7d:cc:f5:fd:3d:f3:51:1f:86:58:e9:
bc:46:cd:5d:b8:97:8c:f9:79:c3:8b:e4:b0:a0:4c:57:c0:75:
14:c8:17:41:bb:ec:b4:b7:3c:13:f5:ff:41:ab:bf:8f:05:a0:
5c:4a:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:12 2026 by rpki-client