
$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier: GkRFjqlF6ay9YM1qEMZNROJDbr+ylqIds+P7M1fTlsE=
Subject key identifier: C2:9C:2A:99:5A:1B:15:62:03:CE:91:BE:7C:64:3A:94:8A:AC:F4:50
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial: 0CCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number: 0CC4
Signing time: Tue 24 Mar 2026 18:11:42 +0000
Manifest this update: Tue 24 Mar 2026 18:11:42 +0000
Manifest next update: Tue 31 Mar 2026 18:11:42 +0000
Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: UMf+UmN7a9N2jjvj5JuEHnm9AQ88n7in08MGOwAEJyg=)
2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3276 (0xccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Validity
Not Before: Mar 24 18:11:42 2026 GMT
Not After : Mar 31 18:11:42 2026 GMT
Subject: CN=69c2d3de-2ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:77:c7:73:31:42:ea:89:de:62:30:ea:c5:
c4:3c:0e:5b:93:b2:f7:18:ae:96:c5:9f:37:87:80:
f4:9b:3f:a6:41:4e:91:a1:f9:19:07:04:65:90:74:
40:8d:08:24:85:f9:e6:15:0f:85:f2:61:d6:37:b2:
23:2e:bd:24:ce:cc:b9:57:4a:d5:4d:5a:ac:ce:56:
08:14:a4:c1:ae:7d:b1:07:02:d8:87:0a:8a:bf:25:
e5:78:28:ed:0c:9d:96:2f:8f:67:26:75:87:b6:4f:
e1:01:ba:bd:27:fa:c8:9b:54:7f:00:e6:2e:67:64:
75:d7:fe:57:5b:d8:aa:38:89:2d:b9:16:72:d2:12:
ac:99:de:f7:f7:49:3b:c8:1d:f0:92:c8:2a:65:e0:
db:22:65:89:35:31:37:1f:ec:d9:06:80:18:b4:13:
af:c0:0d:9b:08:de:8e:50:91:8d:a1:55:fa:0b:06:
86:d9:0e:3e:b0:b8:19:e0:b3:1a:83:a8:29:cb:da:
da:20:b3:22:0f:71:cc:3f:2e:4e:64:1d:cf:7f:0b:
57:f6:fb:d4:12:03:4c:72:51:de:c8:e1:3d:48:af:
3c:2a:19:cc:2a:4a:bc:52:84:39:30:cd:0c:24:15:
4e:84:2b:19:7d:0f:8e:4c:3d:db:9b:de:ff:06:8c:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:2A:99:5A:1B:15:62:03:CE:91:BE:7C:64:3A:94:8A:AC:F4:50
X509v3 Authority Key Identifier:
keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:26:09:8a:b2:63:2a:3b:d2:95:47:34:0e:77:7e:bc:d4:
4a:b4:96:1f:0b:d8:f6:4d:3f:26:5a:e0:02:e6:55:56:82:dd:
21:31:fc:58:fb:c2:e5:7e:e7:84:4f:19:11:03:6e:7b:ad:89:
d4:c2:53:44:59:d1:02:21:19:23:d1:80:5a:b5:ef:91:b7:e3:
32:aa:96:2d:d7:8b:bb:dc:76:47:e2:83:d3:4f:5a:17:6d:87:
d4:64:09:9c:f6:38:a7:5c:ee:7e:4e:46:e9:b9:9f:8f:68:5c:
32:50:f3:b6:22:b1:a5:c4:33:7a:69:d0:0e:f0:b6:bf:57:42:
a8:21:f4:88:ad:93:b4:fa:2a:93:e1:ab:43:71:be:c3:ae:62:
da:15:96:de:48:2b:3e:44:d2:b8:18:b3:f1:f5:72:f1:14:9b:
79:d3:c4:a5:6d:b2:45:54:8a:30:0b:fe:6d:3f:c5:b6:32:97:
b7:0e:e9:87:b7:7d:d5:aa:7c:42:d6:46:5e:e3:04:fc:90:5b:
92:15:a1:ba:be:0c:8f:60:f0:cf:f3:ff:82:8b:3d:10:5f:4e:
6a:26:67:89:2e:d0:08:8a:c0:d9:05:22:54:da:79:41:0b:9f:
4a:0e:53:81:b9:03:9c:d4:bd:ea:5b:7a:67:65:59:dc:be:82:
17:fb:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:05 2026 by rpki-client