
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: sm7LhMqIrVRnrcBQoxMrbkEBxoqYwc7Xyap0pyfHULQ=
Subject key identifier: A2:CC:D7:F8:5C:4D:D2:44:E6:BF:4F:1F:F8:6F:E6:E0:DA:D7:17:C5
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: D8
Signing time: Mon 11 May 2026 06:50:58 +0000
Manifest this update: Mon 11 May 2026 06:50:58 +0000
Manifest next update: Mon 18 May 2026 06:50:58 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: rGMqX+K1gkanOcjXS9Isd3A3hEBqx+BCsLEeQd9+ht8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: May 11 06:50:58 2026 GMT
Not After : May 18 06:50:58 2026 GMT
Subject: CN=6a017c52-eb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:d6:c6:50:8b:39:28:5b:9e:c7:d2:72:03:
c1:55:38:1f:5b:67:50:5c:b0:9c:c8:aa:46:6c:9f:
9c:a9:fd:f2:db:c1:7a:27:b7:64:36:4e:f6:f8:7a:
a3:fd:9e:69:f0:0f:2c:61:e7:b9:1c:49:01:ce:fe:
4b:e2:96:92:fb:75:0a:3a:87:72:15:a0:f5:e6:f7:
71:67:e3:1e:2b:b8:bc:e4:ee:66:a2:80:39:a1:1a:
d3:9c:81:0b:45:5e:f4:94:b5:48:9d:44:f0:77:89:
a7:7e:d5:7f:b5:f9:07:d6:db:f4:b6:52:d6:d0:3c:
cb:57:0d:35:16:cc:f9:39:3e:ef:d4:6d:59:54:e1:
4d:83:2a:b3:e4:9f:4d:cb:55:c5:12:40:5d:d7:ae:
aa:38:78:7b:47:b9:26:78:c7:b3:25:77:1a:91:2c:
69:e0:01:f5:1f:cd:56:1e:af:ec:7b:10:28:7c:17:
99:d3:41:92:a2:ae:4d:83:b8:22:6e:50:ad:f2:de:
54:ae:2a:8b:a7:fa:6e:8a:13:82:90:51:23:3f:2c:
0b:d1:85:ed:7f:41:97:06:8e:8b:f9:56:76:1f:0d:
fb:b6:26:ce:02:4b:ee:8e:78:f9:c5:ef:12:a0:20:
1e:57:a8:a6:1d:af:0c:2a:57:64:8a:ab:ea:9c:84:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:D7:F8:5C:4D:D2:44:E6:BF:4F:1F:F8:6F:E6:E0:DA:D7:17:C5
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:f4:5a:9e:1f:e1:2c:d8:55:d3:53:08:ff:5c:56:3e:81:20:
59:54:40:74:e0:2f:98:4b:c8:07:da:b2:51:39:2e:b7:df:48:
7b:6e:a1:d2:33:c6:a4:f2:94:b8:34:6e:90:54:03:80:35:dc:
e7:37:e4:c0:62:57:ff:75:9b:9f:f0:c2:69:ff:c2:bf:a2:b5:
95:bf:25:eb:04:67:2b:3d:3d:25:77:03:a2:ab:5c:66:47:df:
9e:8d:b5:23:4b:d7:75:f4:7d:aa:3c:cb:6e:c0:35:45:d0:16:
c5:ce:49:87:34:77:cf:90:0c:a1:0a:35:f8:11:16:d4:d5:a5:
9b:8c:d6:cc:e2:e8:37:8d:1e:3a:50:63:e7:e1:f7:37:af:14:
5f:35:9f:ff:a6:e9:bd:7c:67:d6:b7:e6:c4:a7:90:d4:db:87:
29:e9:47:50:12:ab:fb:be:06:85:75:db:0f:00:0e:81:fa:26:
39:a6:49:10:21:97:09:b4:ab:75:1e:e4:01:44:c1:f7:bc:7f:
7e:84:78:c0:39:41:cd:60:40:32:2c:e8:9e:15:ab:df:38:eb:
c6:ca:c2:4f:8c:33:5e:62:64:1c:9b:cc:c7:2b:77:3a:b8:fd:
8c:48:b5:c2:54:1a:82:96:21:f2:82:c5:9a:43:81:48:1c:c7:
83:61:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:44 2026 by rpki-client