
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json)
Hash identifier: 1rt9u9sdRJI5xH8JMGdpSIyTWzfJcoysB71t4AUW3ac=
Subject key identifier: BD:1E:9D:8A:B6:EB:78:49:3D:8E:A9:BC:4A:2A:86:A8:23:99:72:7E
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial: 083E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
Manifest number: 081D
Signing time: Tue 12 May 2026 21:11:50 +0000
Manifest this update: Tue 12 May 2026 21:11:50 +0000
Manifest next update: Tue 19 May 2026 21:11:50 +0000
Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: K/yN8mH7ca5pOwSBGkF/pZFnu93+iXfRtFj33Ee+mjc=)
2: FF7010DCAE9811F081180758C4F9AE02.roa (hash: m6dAjh3VRiywp2YYqFbpA9pqC5UWocmOlzdiWn/0Kkc=)
3: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: rbytNq7zSMq3A/PgT/ftfqGJmoj9sr47JEvc0Ik+KVQ=)
4: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: mlM1LcCow/OwFUOHCekedTzL1znm7NAJ6YdDLrO7EAA=)
5: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: fvpqpUzd6orBmYsM2LQ9LVbe6tQGwosd6BH+YSEYAM0=)
6: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: OuNbUML34/9s/CXrZPGm/r79NOrwg5tKWUZilkojMKg=)
7: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Validity
Not Before: May 12 21:11:50 2026 GMT
Not After : May 19 21:11:50 2026 GMT
Subject: CN=6a039796-75be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f4:31:10:c5:ed:ce:88:b8:fd:20:2a:ca:58:
51:7a:41:d6:ab:b3:40:e7:1a:a0:5f:e1:80:23:99:
8d:7a:71:f9:e8:be:9e:4d:85:7e:a5:f2:0f:d9:8e:
0c:8c:18:bb:00:16:b0:3a:34:e4:5a:e9:1d:63:10:
b4:ee:d7:5d:44:66:40:f7:b7:88:83:2b:b6:9d:47:
78:eb:16:8e:5d:95:07:9a:f1:92:ce:ed:99:f4:3a:
3f:ac:c2:af:50:fe:95:de:cf:1c:7d:89:57:1e:54:
16:ee:03:e7:16:ae:41:70:22:5b:09:57:d3:b4:f7:
81:ce:42:d2:aa:eb:6e:71:f2:f4:05:a2:f7:f1:4e:
3e:f2:81:32:51:04:2b:0e:ec:90:0f:5e:63:32:46:
2a:56:da:14:f9:67:ef:37:e5:68:9d:9f:88:43:4c:
1a:ef:c7:df:4b:9a:80:43:15:a8:9c:59:20:1a:13:
36:4e:9d:44:1d:32:4f:86:0d:c3:87:ff:b5:d5:f1:
b2:df:b5:33:e5:9a:23:14:78:2e:95:cc:7c:50:ae:
a6:07:51:fa:74:fc:25:01:a3:5c:2a:88:36:59:7c:
d4:e7:69:a6:98:46:e9:7c:15:13:7a:cb:f0:8e:74:
b5:87:93:27:d6:ba:bc:89:95:2c:51:3f:eb:eb:69:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:9D:8A:B6:EB:78:49:3D:8E:A9:BC:4A:2A:86:A8:23:99:72:7E
X509v3 Authority Key Identifier:
keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:18:4e:c9:4c:5d:e5:24:e2:62:ee:be:f7:51:8d:2c:41:
51:63:84:37:3c:8d:29:06:63:fe:f0:3e:43:21:2f:f2:04:b6:
d8:d3:9c:b3:5e:71:ca:45:78:6f:f7:0b:59:97:1a:b8:d9:13:
a9:1e:3a:40:ef:a9:00:de:0b:4b:34:ec:88:7c:1e:1d:cb:44:
8d:55:62:fa:cc:37:02:b7:1a:30:49:6b:18:4d:f0:d0:c3:d3:
33:22:ba:23:19:63:33:35:4b:8e:35:ce:a5:a3:5e:9d:f8:e4:
d0:0d:af:26:96:f0:34:8d:1b:44:62:6a:50:a6:ca:b7:1c:24:
ea:bf:6e:02:70:7b:cf:73:e4:f5:8c:d1:8d:25:42:57:c6:02:
eb:32:ac:86:eb:8d:bf:23:e2:39:6f:a2:d5:5a:c4:36:dd:5c:
68:e8:1a:2e:95:4c:ca:4a:bc:bc:0c:9e:1f:ba:af:2e:25:14:
ca:65:1c:0a:69:f8:12:e3:05:67:29:b9:03:04:e9:94:52:b7:
28:57:49:7c:02:0b:b9:24:ed:65:75:86:68:ae:ed:55:b9:11:
bc:f8:1f:bc:79:e2:54:be:73:0e:40:e6:d5:fa:95:6b:9a:a9:
f9:3b:4c:c5:a9:14:06:8e:63:49:53:9c:85:e4:00:34:74:75:
5b:66:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:37 2026 by rpki-client