
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier: jobdWnwdT25C6mNOpN7ifqD2uzGgfLqUszY40/KsUfM=
Subject key identifier: 89:FA:2E:C0:6C:A6:42:C7:0F:63:7D:4F:C4:50:EE:73:7D:62:DD:AF
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number: EA
Signing time: Sun 15 Nov 2026 06:39:00 +0000
Manifest this update: Sun 15 Nov 2026 06:38:59 +0000
Manifest next update: Sun 22 Nov 2026 06:38:59 +0000
Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: hyCE7M8qhzr8QxbjAt8Zjd3tJ6dOzS3e5vEAuac2eEs=)
2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: okHYiY+i6MMTwV1Ep1eaV172yLMQeGvbCo4Bg+Bacec=)
3: PYKheHolcObXv56oVaEsjKBkEwY.asa (hash: CjdTHSeU100/DOFlvWSJyA0VjWKaT/NuHuDVW9WZsH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Validity
Not Before: Nov 15 06:38:59 2026 GMT
Not After : Nov 22 06:38:59 2026 GMT
Subject: CN=6af95384-1181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:41:da:a1:90:c3:a8:cf:af:a6:a4:f4:db:
8d:a0:1e:91:d2:98:52:ba:d4:f8:42:30:79:e4:70:
54:cf:0d:5f:0c:89:59:e5:5d:50:b4:a7:b8:37:80:
f5:62:3d:e3:46:d1:13:7f:aa:e9:dc:46:16:35:9a:
3c:8f:ee:8f:44:d3:fb:c7:3f:80:2d:9f:84:f4:cb:
c8:a5:ec:2a:8f:c5:73:58:9a:d1:fe:93:a0:4d:a3:
37:e0:18:c0:80:80:b4:31:b2:a1:e4:e5:2f:87:68:
d6:76:12:ef:24:e6:fa:21:0b:31:1c:f7:6d:fc:c4:
c6:40:be:7b:72:4e:6e:ed:f8:88:87:66:8b:00:b2:
16:d8:32:45:20:28:dc:9e:1d:dc:64:86:34:df:31:
bb:ab:c1:4a:ba:cf:ae:b6:df:7a:76:13:65:88:94:
27:4e:2e:da:3b:34:2e:60:6b:8f:25:58:2e:cb:7e:
75:25:8b:61:dd:64:b7:6a:55:27:96:d2:b5:ce:70:
a9:a9:c1:6e:91:67:de:8a:f0:e1:48:d6:94:1f:0d:
d3:cf:4e:9c:be:ba:e1:37:6d:d1:a3:1a:4b:bc:84:
ac:76:cb:94:e6:60:a7:47:b2:94:cd:d8:e3:7b:aa:
90:b8:33:69:f0:bc:b0:f0:7f:00:43:9b:68:9d:9f:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:2E:C0:6C:A6:42:C7:0F:63:7D:4F:C4:50:EE:73:7D:62:DD:AF
X509v3 Authority Key Identifier:
keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0a:36:db:35:08:6d:ba:ab:a0:67:34:2b:99:da:2d:ea:c0:
09:42:7a:f1:6a:e3:de:a6:20:e1:95:f0:5f:8d:37:fc:b4:b5:
20:cf:90:d6:51:45:f3:04:b3:18:0d:f2:45:c5:5c:38:40:fc:
1e:f9:6d:b3:a4:e2:a4:95:79:64:e9:08:08:5c:64:d0:41:f8:
53:5a:46:b6:8d:07:11:7e:63:3e:65:74:5c:b4:34:2b:0c:6a:
91:e6:a6:89:1a:39:5b:1c:78:c4:e4:9b:45:f2:ac:4d:a2:bb:
d7:34:12:a4:c6:0e:3f:48:90:fa:c7:b5:91:f1:bb:b2:0c:ad:
62:e5:3d:bc:09:04:ef:25:cf:0a:b8:37:b1:44:09:b1:b3:d9:
7e:bd:14:e9:26:6b:7d:5e:19:2c:39:a4:bb:bc:bc:e1:0d:f9:
ed:3a:a5:75:f0:5c:9b:9a:3f:6d:38:72:ab:d9:51:35:30:89:
57:87:cf:3d:2f:e4:33:97:14:d2:46:aa:60:ae:94:4a:36:34:
65:93:d1:f9:9a:1b:4a:9e:36:52:27:ac:7f:fc:07:db:03:1f:
f7:59:fb:e9:78:f1:5d:85:86:47:32:20:f0:20:ab:ea:92:0c:
a9:ab:51:43:b0:30:e5:80:7d:52:bc:d6:8e:9c:8b:ec:e4:e0:
d5:3a:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:56:05 2026 by rpki-client