
$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier: G/5VUzayDvsK0q75OoUNuUXUw+JAEqhzdyCMIo7PS0U=
Subject key identifier: 61:51:73:2B:75:68:E9:8C:80:AC:71:DA:90:4E:12:7C:42:65:E3:99
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number: 06F2
Signing time: Wed 22 Jul 2026 22:52:26 +0000
Manifest this update: Wed 22 Jul 2026 22:52:25 +0000
Manifest next update: Wed 29 Jul 2026 22:52:25 +0000
Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: RsD0QEXBgV07UH3exkSItVahVAc5+uXon77wAIW58e4=)
2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Validity
Not Before: Jul 22 22:52:25 2026 GMT
Not After : Jul 29 22:52:25 2026 GMT
Subject: CN=6a6149aa-a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:d9:b9:e9:06:ef:0b:5a:7a:26:76:0f:b1:
db:11:9f:ae:9e:71:75:5e:c0:74:54:08:df:0e:46:
54:a3:6e:f4:dc:fb:39:c8:e8:e0:66:d3:28:dc:d6:
38:29:d9:3e:14:8d:f9:66:29:b9:36:9a:10:c9:db:
a7:69:76:0a:3b:7e:1b:af:ab:25:e3:4d:31:dd:70:
e8:8b:68:80:3b:b0:dc:df:9e:c5:b0:b8:5d:8f:4e:
34:5a:f8:ec:4a:cb:93:1d:c8:80:c5:c9:f4:24:0c:
2c:48:be:6b:13:c8:e8:2b:7b:1f:1c:0d:dd:c5:63:
f4:a6:04:16:9e:aa:a6:5e:9d:8c:83:80:3b:8d:0a:
5d:5c:0e:ab:4f:87:12:cc:c2:96:49:25:15:29:3b:
ca:16:0b:4a:5e:65:b1:a4:7c:47:3b:17:6b:df:ae:
40:a4:09:0e:b2:9c:6f:49:7d:35:e8:e0:f0:ea:25:
4a:e1:7b:89:b5:b1:41:91:3f:40:2a:4d:df:4e:0e:
d1:47:16:a5:ae:c3:36:82:51:e6:12:04:fc:5c:56:
70:79:24:a0:a0:96:73:ed:53:1c:14:17:6f:45:ee:
53:1d:6f:36:30:85:3e:ee:20:0d:19:04:a3:e2:d3:
2a:6c:7a:bb:65:d0:d1:28:63:88:c9:29:e7:13:55:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:73:2B:75:68:E9:8C:80:AC:71:DA:90:4E:12:7C:42:65:E3:99
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:07:e7:81:56:eb:81:d2:41:27:7e:8f:fa:22:c0:58:f3:
35:72:8f:50:33:1c:33:f3:f9:77:bb:d1:f4:72:65:53:0c:a8:
11:04:3e:4a:5e:fc:64:c6:a4:17:0b:d7:f8:da:8f:d5:fc:49:
38:b6:3d:23:9c:43:de:91:7e:19:9e:c5:ad:29:92:37:51:e5:
d9:8f:76:40:68:31:c9:3f:25:75:ae:c0:71:d1:39:7c:d1:f6:
77:a7:07:3b:69:1b:a2:1f:b7:2e:52:b6:06:a3:08:25:c6:13:
e1:88:a1:2a:84:1c:36:65:ed:93:2f:11:af:8f:b1:e9:30:51:
08:cd:8d:8a:60:50:57:91:e1:44:a0:1f:dd:4e:50:f0:88:4d:
31:4a:40:08:4f:ce:43:88:32:09:a3:5f:98:fd:07:bc:58:53:
f6:ed:78:2d:e8:80:15:7c:7e:34:e5:89:68:ce:9a:c9:ec:4c:
9a:62:b6:f7:d7:dc:d2:aa:8d:f3:3c:19:7a:71:6d:2e:ac:57:
fb:28:9c:63:8d:af:38:47:f3:25:c3:11:90:cf:1c:1c:df:cd:
0f:7e:77:c7:bf:fe:a8:0d:9b:eb:5a:98:49:a7:31:a1:70:c0:
c9:88:18:9a:88:c1:55:a5:14:1b:0c:a0:e2:a1:d9:67:95:de:
7c:3b:64:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:05 2026 by rpki-client