
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier: 9iAdCG+UXxgcgvqV6+Kozt5wEsvayyFASR6mFZlYEak=
Subject key identifier: 16:CB:B0:2F:FC:05:31:49:70:F1:97:F7:1D:92:B7:70:52:A5:81:6F
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number: 6F
Signing time: Wed 25 Mar 2026 07:03:37 +0000
Manifest this update: Wed 25 Mar 2026 07:03:36 +0000
Manifest next update: Wed 01 Apr 2026 07:03:36 +0000
Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: KjopxIXNkU4M0VFnyJgVpvn45b77P6tTPfrluiN+0+8=)
2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: BOcoiAspHCwkr5azVOhAvR+BAnY8G++2Bq7+nnR+vDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Validity
Not Before: Mar 25 07:03:36 2026 GMT
Not After : Apr 1 07:03:36 2026 GMT
Subject: CN=69c388c8-cd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:57:e2:53:e0:93:03:52:0b:16:4b:1a:cd:
2b:d4:88:b6:72:5a:a2:53:79:f2:8f:91:23:d9:74:
cc:78:52:bc:6a:11:da:2a:48:44:32:bf:b1:55:0a:
4d:f9:d5:98:b5:f2:a9:7f:fe:81:16:60:c3:1a:32:
ff:12:f9:39:76:92:14:9e:e2:77:87:e3:17:f1:68:
c1:74:ce:c8:ab:55:cb:86:f5:75:60:dc:c6:1f:9e:
51:07:34:eb:d0:2f:54:cf:8c:31:bb:66:a2:6b:30:
a9:c2:f3:8d:12:78:6b:46:51:12:d3:a9:3c:a6:ad:
f6:2a:30:52:ce:5f:ce:6b:17:32:a9:1c:93:5d:d9:
32:a2:df:f6:44:7d:98:b3:8c:4c:01:38:96:80:2a:
02:c3:e1:67:df:43:b4:50:dd:39:7d:17:55:43:04:
20:e6:fd:f8:b9:1f:40:5c:9e:8b:89:fc:da:e1:e5:
4e:bd:42:71:04:7b:f5:1e:0c:15:85:2e:bb:ec:00:
74:11:f9:4d:64:3c:92:9d:78:6f:eb:b6:c7:cc:24:
2d:50:ae:d5:84:3b:68:cf:63:f4:0d:4b:49:7c:9f:
b2:9d:fb:6a:f4:36:73:67:2b:96:0c:4d:8f:c9:6b:
81:e8:53:94:f8:67:1d:8d:01:c7:3c:6e:de:65:e3:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:B0:2F:FC:05:31:49:70:F1:97:F7:1D:92:B7:70:52:A5:81:6F
X509v3 Authority Key Identifier:
keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:12:4c:d4:6e:27:15:02:21:da:1e:54:1d:f1:aa:f1:9d:
31:f8:50:09:53:ea:4f:11:a6:18:b7:1a:75:bf:79:5d:05:6c:
7a:5e:d5:bf:fa:4f:18:b8:1c:2c:0a:fd:f8:c2:97:17:06:0d:
1a:7a:6a:14:b9:d3:20:08:40:f5:2c:98:e9:1d:8d:a2:32:86:
8d:83:ff:40:e8:8b:8b:e4:4c:a1:f1:51:ea:70:fb:73:a0:16:
73:be:43:24:bc:60:02:e4:28:f0:91:1e:43:e0:fc:75:19:13:
ea:d6:3e:e8:1b:9e:cb:90:1b:f9:6e:a1:0c:79:44:09:44:1e:
3f:e7:e8:66:5d:11:46:66:57:98:f7:7f:9b:85:84:24:06:09:
ac:fd:90:3a:22:61:d9:b7:0c:dd:87:e8:aa:e5:38:21:e5:6c:
cb:b6:e0:8c:92:76:fc:a5:f9:6e:17:13:c9:19:a0:24:b4:87:
84:e9:b1:41:2f:87:3a:c5:7b:d6:61:8b:1f:c2:ac:a6:36:dc:
2b:04:0c:65:66:c8:1e:1f:b3:4d:a9:b9:04:12:01:31:c4:99:
06:70:a0:19:c5:09:ca:cd:71:d5:06:6e:2d:30:e4:f6:20:da:
03:07:26:a1:3e:d3:39:9e:08:42:a7:cb:d1:d2:be:01:27:ee:
77:91:e2:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Nzc2MDExMC8GA1UEBRMoRkU0OUNGMzNGQkU0MjQ3QjJCQTFFRTlBNTQ4NEE3NDBB
RDNCNkUwRTAeFw0yNjAzMjUwNzAzMzZaFw0yNjA0MDEwNzAzMzZaMBgxFjAUBgNV
BAMTDTY5YzM4OGM4LWNkMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCk1FfiU+CTA1ILFksazSvUiLZyWqJTefKPkSPZdMx4UrxqEdoqSEQyv7FVCk35
1Zi18ql//oEWYMMaMv8S+Tl2khSe4neH4xfxaMF0zsirVcuG9XVg3MYfnlEHNOvQ
L1TPjDG7ZqJrMKnC840SeGtGURLTqTymrfYqMFLOX85rFzKpHJNd2TKi3/ZEfZiz
jEwBOJaAKgLD4WffQ7RQ3Tl9F1VDBCDm/fi5H0BcnouJ/Nrh5U69QnEEe/UeDBWF
LrvsAHQR+U1kPJKdeG/rtsfMJC1QrtWEO2jPY/QNS0l8n7Kd+2r0NnNnK5YMTY/J
a4HoU5T4Zx2NAcc8bt5l45DnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFsuwL/wF
MUlw8Zf3HZK3cFKlgW8wHwYDVR0jBBgwFoAU/knPM/vkJHsroe6aVISnQK07bg4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzdENTMxNDIwN0Uz
RjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2Jn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX2tuUE1fdmtKSHNyb2U2YVZJU25RSzA3Ymc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
NzYwLzdENTMxNDIwN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhz
cm9lNmFWSVNuUUswN2JnNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBO5hJM1G4nFQIh2h5UHfGq8Z0x+FAJU+pPEaYYtxp1v3ldBWx6XtW/+k8YuBws
Cv34wpcXBg0aemoUudMgCED1LJjpHY2iMoaNg/9A6IuL5Eyh8VHqcPtzoBZzvkMk
vGAC5CjwkR5D4Px1GRPq1j7oG57LkBv5bqEMeUQJRB4/5+hmXRFGZleY93+bhYQk
Bgms/ZA6ImHZtwzdh+iq5Tgh5WzLtuCMknb8pfluFxPJGaAktIeE6bFBL4c6xXvW
YYsfwqymNtwrBAxlZsgeH7NNqbkEEgExxJkGcKAZxQnKzXHVBm4tMOT2INoDByah
PtM5nghCp8vR0r4BJ+53keKk
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:42 2026 by rpki-client