
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: ycNHmAlF9IEIW7UTdWiYlwV98AxZZobbqd+XbeioXqI=
Subject key identifier: A8:5B:6E:73:75:81:F2:30:F8:EF:28:92:AD:F9:61:A6:A6:AB:16:72
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0D29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0D21
Signing time: Tue 22 Sep 2026 18:07:25 +0000
Manifest this update: Tue 22 Sep 2026 18:07:25 +0000
Manifest next update: Tue 29 Sep 2026 18:07:25 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: 4ssft7Ui4kB161ijPw97Wm4tNNyBxJ3sGK7vrzSgB6k=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Sep 22 18:07:25 2026 GMT
Not After : Sep 29 18:07:25 2026 GMT
Subject: CN=6ab2c3dd-fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:e0:e8:51:34:70:85:99:bf:9e:0f:fe:21:
67:dc:53:cf:ea:9d:c2:27:fa:f4:78:d7:0c:62:d4:
2f:f1:7e:ed:19:65:d7:0b:86:47:ac:4d:d6:d8:88:
e8:8a:de:a0:ec:74:79:dc:a7:0e:27:bb:4a:de:a0:
5d:79:98:92:de:de:b7:08:80:34:92:6c:a3:9c:05:
7f:ba:38:a0:14:ca:d4:b2:01:20:f4:6e:13:df:55:
27:f9:69:e5:ac:aa:b7:f2:cd:eb:31:da:7d:05:86:
fb:96:d1:10:2c:b3:c4:76:52:eb:3a:7c:7e:62:4e:
99:51:2d:77:57:d4:c7:73:72:36:26:d8:f9:cc:38:
d2:4e:96:5d:f4:62:58:af:23:a4:47:5f:09:ae:9e:
f4:b5:a8:68:0f:44:32:49:3e:0d:f8:36:8c:57:0b:
58:c2:79:95:a4:3b:66:77:33:cb:1a:d9:af:6c:33:
19:5a:8e:4b:76:7a:71:bb:15:61:b7:1a:ea:99:09:
93:a2:e8:85:1a:d2:a7:62:d1:97:5d:3d:76:b4:4d:
f7:3b:3f:d0:88:ff:75:cc:46:ff:ad:b9:c9:3c:20:
48:85:ce:f3:c1:b7:1c:2b:38:0e:41:1e:7a:56:33:
3d:77:00:78:68:57:03:6f:fe:87:ee:41:80:d7:93:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5B:6E:73:75:81:F2:30:F8:EF:28:92:AD:F9:61:A6:A6:AB:16:72
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:6f:c4:6e:cc:6f:c9:c2:28:86:60:96:7e:51:e4:1f:f8:97:
ab:8d:cb:ce:39:43:84:d1:78:fc:50:b9:2a:c4:df:b2:dd:ec:
3c:20:59:04:84:ef:6f:5d:8b:9f:18:22:30:1d:af:2e:8c:5f:
ea:6a:d7:3b:2b:4c:90:21:53:a7:f4:01:fa:d9:be:27:d9:f8:
e7:ff:4f:a8:0d:01:4d:aa:3f:70:83:be:53:1b:a3:3b:45:4b:
f6:20:b3:fe:8b:76:41:06:2d:e1:3f:91:d7:8a:0d:d3:38:6a:
8c:21:20:e9:3d:0e:5f:56:75:da:46:9e:3d:9b:04:b1:1a:16:
6f:c3:e4:68:47:c2:a4:e2:14:b0:00:1d:3f:cf:c9:ac:af:eb:
10:8c:6e:a8:56:56:40:b1:66:e7:cb:29:2b:1d:8f:e1:3a:0b:
49:35:db:30:0c:21:07:e2:7d:ba:0d:aa:65:08:3e:10:25:48:
84:d8:6d:80:d3:25:16:b2:89:06:2f:40:25:5b:a3:3d:c8:3a:
6b:67:ea:dc:fa:d0:c0:9c:f9:54:c0:25:be:f4:3c:ed:2d:d9:
e0:0e:93:62:5d:b8:74:6e:19:65:20:22:16:0f:80:3a:5a:5a:
be:43:36:c1:60:f9:2e:03:de:d6:9f:73:4e:f6:a8:8a:44:4d:
90:a8:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:19:05 2026 by rpki-client