
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
File: k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft (raw, json)
Hash identifier: tiKp5SKQf7U6sOlmdQ2aLJDI0s/7GV3uYOW5UtdPOVE=
Subject key identifier: E3:D3:5B:C0:EE:9F:E6:AE:DB:FC:2A:92:5C:CD:78:3B:DF:9F:5A:5D
Authority key identifier: 93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
Certificate issuer: /CN=A912A3C4/serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
Manifest number: 14
Signing time: Wed 22 Jul 2026 20:23:54 +0000
Manifest this update: Wed 22 Jul 2026 20:23:53 +0000
Manifest next update: Wed 29 Jul 2026 20:23:53 +0000
Files and hashes: 1: k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl (hash: YpalStCwLy9yeS/PMa9X5N52duAFWJH2oop4lyGAjCM=)
2: 39E2E2326AB211F1AD02B3F4A147A888.roa (hash: G1Hlr/rHIQ0S04hSoxt84tCzDTSCe59VGh3JefnKY08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl
rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3C4, serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Validity
Not Before: Jul 22 20:23:53 2026 GMT
Not After : Jul 29 20:23:53 2026 GMT
Subject: CN=6a6126da-32a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:79:af:32:82:18:5d:5e:f0:bb:4b:ff:73:
93:62:8a:37:8e:62:ec:1c:77:16:aa:68:a7:ae:79:
52:fe:82:6f:b8:0d:da:c2:a5:6c:08:90:bc:a3:20:
66:b9:38:b1:c8:cc:61:12:ee:d6:6a:ac:fd:2f:73:
13:8a:dc:01:89:5c:b2:94:5d:b2:59:3d:b0:07:6e:
b3:d3:37:dc:30:38:30:8f:5c:4f:02:50:29:e3:6a:
c2:32:ff:31:92:7e:b8:23:65:b2:2e:4e:de:8e:4c:
6f:f2:82:d5:53:27:57:e5:1d:09:6f:f9:13:e0:9f:
87:71:8e:00:f0:2c:3a:a7:de:63:25:1e:81:29:70:
e8:83:8b:bb:20:0c:fa:bd:5f:ee:07:da:03:0d:f2:
01:fb:58:bb:62:ee:ab:3f:f0:32:39:34:3f:70:e3:
cf:81:40:d2:12:33:7b:25:c3:00:df:7b:a4:bb:21:
42:75:e6:ff:fb:63:c8:79:2f:a7:b5:bf:de:3b:c8:
93:49:5f:95:82:cc:0a:73:8a:06:56:0d:f7:62:c1:
7e:60:88:60:28:b1:70:d3:3b:94:7d:02:29:83:28:
5d:49:74:05:c3:0a:0b:89:a7:99:70:7d:81:2c:d5:
05:f8:08:e9:01:b7:43:77:79:d9:5f:33:2e:d9:0b:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D3:5B:C0:EE:9F:E6:AE:DB:FC:2A:92:5C:CD:78:3B:DF:9F:5A:5D
X509v3 Authority Key Identifier:
keyid:93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:2c:a9:4a:18:a6:69:1e:d7:af:a7:97:9c:d2:b0:59:aa:87:
30:e2:ae:7c:4f:77:87:9c:d5:f4:46:0f:0f:29:9f:57:75:4b:
18:58:89:c5:32:6a:bc:03:98:1d:90:b2:e1:d9:a1:e8:07:81:
a3:9f:04:8f:f6:be:55:cb:95:d2:d1:2f:a6:9d:0a:eb:fd:4d:
b7:4b:24:1d:b8:ba:31:22:d8:a1:49:e3:ff:b1:ca:8c:65:b9:
0a:43:a5:ca:25:31:bd:fa:4c:8a:cf:03:50:3b:7f:83:1b:81:
9e:45:c8:e4:42:e1:ef:58:1d:6f:96:b3:ab:86:22:b5:44:85:
d4:48:aa:58:c4:43:7a:24:c9:3a:e5:0d:f5:78:58:3d:92:8d:
e9:d1:06:d5:98:15:ed:2c:76:05:d7:5b:59:c9:b5:bc:f7:ce:
ce:04:18:29:c4:d4:c8:d7:fb:d0:ab:26:82:cf:99:c4:4a:10:
6d:d7:a5:5c:cf:4d:e5:ef:b3:a2:23:2f:42:42:15:ab:7f:d5:
fd:cf:c7:e2:ce:e7:b8:9d:f6:e5:c5:44:f3:25:e4:8b:f6:fe:
65:d1:8a:db:70:c6:fa:a6:db:84:54:da:24:70:b8:fc:42:52:
ad:d3:9e:1b:9c:15:b7:1f:43:3f:ee:fc:eb:35:1b:16:c2:ce:
f2:bf:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:03:02 2026 by rpki-client