
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json)
Hash identifier: fXkd20Yngsps7OHmOnxlcNUlMfZDA5x5m0eUyBGKUzY=
Subject key identifier: 7E:FD:4C:2B:28:A7:89:F5:DC:FE:04:1B:2F:00:D0:4A:96:46:52:FB
Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Certificate serial: 0ED4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
Manifest number: 0EC9
Signing time: Tue 12 May 2026 17:42:21 +0000
Manifest this update: Tue 12 May 2026 17:42:21 +0000
Manifest next update: Tue 19 May 2026 17:42:21 +0000
Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: cM9zIHFyJUdtIBrkOarjcvx3zx7/kH8ZCqyttcu+6sQ=)
2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: I3a+AQK6qVCuGM8BlFl5ofUbKIxiO2UA8EiuLaXOEkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3796 (0xed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062
Validity
Not Before: May 12 17:42:21 2026 GMT
Not After : May 19 17:42:21 2026 GMT
Subject: CN=6a03667d-fa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:f5:f0:cb:0b:04:2b:20:6f:1f:ef:0c:ff:
e9:df:a5:42:5f:95:e1:f5:e5:26:97:26:45:49:f5:
54:80:07:77:84:cd:8a:90:4e:74:e0:97:9b:1d:6f:
d3:78:d6:cd:9d:7e:d7:8c:e1:4e:c4:b9:b6:bb:14:
1b:69:46:58:ed:0d:80:95:e3:03:02:73:55:1e:55:
34:91:9c:c0:ad:1e:36:b9:65:4e:95:59:7e:81:92:
4d:63:b9:bb:7e:e9:3f:19:b0:f3:eb:f3:ef:b3:7d:
a3:e0:ff:bd:2f:3f:6b:3b:40:fe:99:10:1f:fe:f2:
01:1d:5e:09:ec:a4:99:f7:cf:3f:f6:15:3c:5a:4f:
77:33:4a:55:e9:94:72:8a:01:9e:be:e3:a2:eb:46:
0d:0a:ab:26:98:23:28:d2:2a:48:e9:ba:e0:85:2c:
de:c0:cb:67:51:35:96:ed:dc:eb:10:68:5b:a6:a6:
2d:26:21:06:f9:32:1a:19:bb:ef:37:71:a7:0b:59:
43:7e:d8:7d:75:63:ba:61:cb:3a:25:3d:a3:d9:bf:
db:63:6c:71:8d:1b:f2:5b:38:a6:b8:72:78:6b:0c:
f4:2c:4f:be:05:8e:aa:e7:a3:92:8a:ca:d1:c9:b1:
74:15:9a:35:7c:4d:ad:2c:ee:e8:07:8e:f9:66:4c:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FD:4C:2B:28:A7:89:F5:DC:FE:04:1B:2F:00:D0:4A:96:46:52:FB
X509v3 Authority Key Identifier:
keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d0:4f:7c:bf:5d:53:82:24:40:5f:85:ba:94:f5:f6:bc:ab:
91:bf:e8:12:c5:bb:89:83:e1:59:63:d2:50:88:80:3c:b3:44:
a9:4e:03:4b:73:fc:27:78:54:f5:43:e8:63:e7:72:35:b4:9a:
57:f1:19:80:d9:e3:15:8f:c5:ab:42:e1:26:3d:4b:02:3b:72:
71:3e:66:3f:4e:97:a9:7d:06:a2:4e:08:66:1a:bc:f2:e8:ec:
d1:01:73:39:23:80:d6:18:0d:c3:d6:5d:90:53:7a:a8:61:5a:
98:e8:b6:3a:64:e5:ff:1a:6c:94:ed:72:82:e7:05:9b:06:8b:
50:93:47:56:61:7a:37:21:3b:f3:f9:ac:a7:75:12:8b:5c:56:
a4:27:d3:6a:ac:90:f8:a9:09:76:6c:cc:41:97:45:2a:8c:40:
c8:eb:be:2a:e7:6e:53:36:20:9d:95:e2:79:36:3f:06:48:65:
1a:53:5e:9f:e8:56:c8:94:f7:03:71:34:4c:4a:0d:80:3f:93:
16:50:83:1d:81:fb:92:f6:34:06:a7:b5:2d:e0:f7:d0:8c:9b:
51:ee:09:0c:95:1f:47:74:0c:15:cf:02:9d:e0:14:b6:10:3b:
2f:87:50:f4:0f:e7:92:b9:68:f7:a3:9c:0b:49:35:20:07:91:
c0:09:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:49 2026 by rpki-client