
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier: uRaxTYKsRX/SIu6Wu9z/uaKqUIXX0avirjPJRtToAVs=
Subject key identifier: ED:1E:5B:F8:F4:3F:A3:27:37:1A:3C:72:67:6C:57:CB:DD:0A:96:24
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number: AB
Signing time: Thu 23 Jul 2026 08:59:37 +0000
Manifest this update: Thu 23 Jul 2026 08:59:37 +0000
Manifest next update: Thu 30 Jul 2026 08:59:37 +0000
Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: KGmdIIm0c+NoXj9URU8M88+WPLG96xlQm9C+OnXVCrI=)
2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: BOcoiAspHCwkr5azVOhAvR+BAnY8G++2Bq7+nnR+vDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Validity
Not Before: Jul 23 08:59:37 2026 GMT
Not After : Jul 30 08:59:37 2026 GMT
Subject: CN=6a61d7f9-a00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:54:bd:49:08:de:6e:c8:5b:1c:93:8a:16:
2d:6d:98:ff:e4:d0:f6:8b:b5:21:a0:4b:81:02:d8:
53:f8:83:aa:ea:db:84:7b:e2:ab:1f:11:76:88:e5:
04:84:c9:58:fa:bf:9d:7d:be:c3:af:9c:83:27:ee:
a6:15:e7:ed:3a:86:28:8f:18:e2:12:c7:3b:8f:19:
40:e0:6a:e8:41:c0:87:7b:3f:3a:22:4b:73:62:e1:
a8:df:62:d5:17:d4:82:a2:88:b8:03:4a:29:5b:6f:
5e:b7:dd:5e:ac:57:34:43:ce:1c:13:2c:90:78:1d:
41:6b:c6:94:51:12:2b:2e:b9:3d:7d:24:8d:67:fb:
1e:aa:a6:64:a6:db:7d:de:b3:65:ff:42:4e:19:e8:
2f:64:5d:b1:d2:69:3f:ba:c4:d2:5f:5c:eb:8c:35:
cd:1b:67:24:e1:7f:5f:41:ec:4f:72:9f:ab:dc:0f:
9d:9b:b5:9a:3e:9a:a6:95:4d:89:43:47:9b:27:fd:
c4:86:eb:68:d2:75:c7:6f:30:62:63:9a:40:a1:9e:
41:76:6c:84:d5:0d:81:0e:c5:02:9e:43:cf:89:db:
a2:8d:ef:0c:56:60:00:c6:22:1e:66:57:c2:b8:5e:
60:91:86:f2:b4:2b:c9:7e:84:c5:f0:7a:17:07:de:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1E:5B:F8:F4:3F:A3:27:37:1A:3C:72:67:6C:57:CB:DD:0A:96:24
X509v3 Authority Key Identifier:
keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a7:15:6a:e5:b4:48:13:26:c3:76:9c:3a:0e:e5:5e:a2:f3:
72:f7:1e:26:fc:c3:14:f9:95:a9:43:48:97:a7:6c:f8:4c:69:
12:f1:14:91:d6:1a:39:71:83:95:ef:3c:3b:53:10:98:23:b4:
cf:93:fa:b5:4e:4a:a8:44:5e:d5:12:54:7b:ce:5e:c5:fb:73:
40:8c:2a:f4:cb:0c:54:e6:90:31:f2:94:06:17:6a:58:90:d7:
23:29:68:dc:41:20:9f:fc:88:2f:1c:17:c2:f7:a3:1f:e5:75:
47:b9:e6:63:fe:b2:13:90:37:23:cc:ca:58:dc:4a:49:ee:66:
24:0c:ed:dd:2e:b7:6b:4b:7b:98:f7:3e:24:59:92:7f:f2:38:
88:2d:88:55:eb:b2:58:67:46:1f:c5:c9:98:27:1a:5c:3f:8a:
db:72:0c:02:6f:1c:c1:4b:72:8c:13:e4:58:ad:ab:f5:c1:7d:
48:b3:a8:1d:8a:e6:d9:7c:e1:3f:6d:d8:c9:b2:cc:d9:cc:3f:
cf:6c:d7:f9:88:eb:ad:f5:dd:8a:1b:ec:66:72:e0:15:a2:52:
64:6b:5b:94:79:3b:4b:3b:6c:33:23:19:2f:ea:1b:d1:c9:3d:
c8:28:ba:a1:20:12:70:77:32:c1:d9:83:e0:d7:30:2c:09:33:
65:89:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:05 2026 by rpki-client