
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
File: kFJUC21MqMzkC0GIThQSoE6hRRA.mft (raw, json)
Hash identifier: E3yBfM3iWpz3LFYZKpjwH8Jshle6quHfjNHiuMY27NE=
Subject key identifier: EA:C6:CE:9F:EA:2B:C6:CE:8A:65:4A:F2:3E:9B:91:09:AB:2B:A9:D9
Authority key identifier: 90:52:54:0B:6D:4C:A8:CC:E4:0B:41:88:4E:14:12:A0:4E:A1:45:10
Certificate issuer: /CN=A911F03D/serialNumber=9052540B6D4CA8CCE40B41884E1412A04EA14510
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFJUC21MqMzkC0GIThQSoE6hRRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
Manifest number: 10
Signing time: Sun 27 Sep 2026 09:43:54 +0000
Manifest this update: Sun 27 Sep 2026 09:43:53 +0000
Manifest next update: Sun 04 Oct 2026 09:43:53 +0000
Files and hashes: 1: kFJUC21MqMzkC0GIThQSoE6hRRA.crl (hash: DFB1zp78FbgKhyxkNi3Dj9AP6MTyVW5BTodnUTd/K9w=)
2: 5ZHbGzaHhO5vmkIc_2cuAO4e23Y.asa (hash: G0qmKjNTr8jIZ/n0FiAPLYGNkkaaeUO02BWo2C6Q9tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.crl
rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFJUC21MqMzkC0GIThQSoE6hRRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F03D, serialNumber=9052540B6D4CA8CCE40B41884E1412A04EA14510
Validity
Not Before: Sep 27 09:43:53 2026 GMT
Not After : Oct 4 09:43:53 2026 GMT
Subject: CN=6ab8e55a-c594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:ea:87:3a:95:d6:90:da:d9:98:16:06:ab:
dc:f1:8d:37:fa:eb:d5:00:d3:2d:b4:40:ac:0f:02:
df:f1:c9:97:00:fa:35:3b:d8:f7:9c:66:3e:c0:65:
b4:67:89:17:f0:7b:91:ed:00:2f:b1:b4:bf:45:63:
06:84:69:1c:15:33:f8:72:6f:f0:a3:50:ea:9d:88:
9b:cf:75:3e:8e:f5:4e:54:97:34:31:96:76:ac:f5:
4b:56:fd:28:2b:6d:e0:92:9f:6b:84:1c:27:60:b5:
a5:f4:bf:1e:28:2a:4e:d0:d0:d4:12:2a:3d:9c:0e:
c2:39:88:ea:46:0e:6e:8d:dd:03:1e:58:01:40:78:
ae:f6:ed:0b:29:78:6d:7b:82:a5:08:62:99:a1:05:
fe:82:e4:7c:6a:27:47:24:d0:34:92:10:88:c3:03:
66:95:54:25:89:34:69:af:46:fb:b2:20:be:ed:a3:
e7:8d:28:ad:f5:ff:be:ce:d9:b5:46:22:a0:22:83:
7b:d2:e4:10:54:e3:0e:22:09:a7:2a:9b:83:07:fc:
fe:00:79:52:8f:a7:b1:31:ce:16:ad:2b:14:19:13:
c5:1b:af:2b:2d:2a:84:75:12:c6:0f:af:32:cc:84:
49:08:de:da:6a:6d:c3:68:e0:76:4a:0a:b7:1f:e1:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:CE:9F:EA:2B:C6:CE:8A:65:4A:F2:3E:9B:91:09:AB:2B:A9:D9
X509v3 Authority Key Identifier:
keyid:90:52:54:0B:6D:4C:A8:CC:E4:0B:41:88:4E:14:12:A0:4E:A1:45:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFJUC21MqMzkC0GIThQSoE6hRRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:e1:14:4c:c8:44:c0:e4:9c:ac:03:1a:80:0c:fa:41:c8:af:
bb:e2:64:1e:74:21:ca:75:fb:2c:ed:8b:0d:b8:9d:89:97:3c:
71:67:bb:4d:e1:f9:08:61:0a:13:33:9b:94:fd:06:e2:57:69:
3c:30:43:ce:7f:64:38:2a:45:be:8b:45:2f:c5:1a:4b:14:74:
16:e5:9e:17:c5:3f:7e:63:53:0e:79:0a:48:ae:c8:9c:46:bb:
18:8f:00:57:ab:af:d4:66:4b:be:21:44:bc:d7:11:d7:ba:41:
13:ff:14:c5:92:28:d9:12:ee:5a:c3:3f:06:f1:fc:a9:e4:92:
cc:3f:09:df:46:9f:a4:82:7d:57:8c:b6:6d:fb:90:a7:07:64:
91:d9:cf:4d:62:42:e8:70:fa:1c:bd:52:f5:ab:b7:12:fc:4c:
2a:90:59:00:29:2e:68:28:45:8f:b6:45:62:dd:27:a8:d3:c7:
8c:32:22:ca:57:7c:bd:ca:e0:82:4b:65:54:cf:fa:76:8b:ba:
37:40:e1:e3:28:14:40:4a:59:cc:ba:c2:bd:83:19:b4:c4:02:
54:a1:8b:73:c6:b2:bd:55:66:c5:6f:68:d0:1b:34:96:05:df:
ef:94:a2:ab:77:5b:43:0a:b9:76:dc:5d:ee:13:aa:f7:72:17:
3d:af:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:41:47 2026 by rpki-client