
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
File: KtPYi16OCwUUGjvJL4XkJzoFYqE.mft (raw, json)
Hash identifier: Kz0xS5WGYDqz3q7KMW/egSxmxEPnQHiqFXlurXyWkZE=
Subject key identifier: 22:35:49:B3:C0:7E:F8:80:79:AF:CD:DC:DF:34:EC:2C:42:AA:9F:6B
Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
Certificate issuer: /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
Manifest number: 01F4
Signing time: Fri 25 Sep 2026 03:21:55 +0000
Manifest this update: Fri 25 Sep 2026 03:21:55 +0000
Manifest next update: Fri 02 Oct 2026 03:21:55 +0000
Files and hashes: 1: KtPYi16OCwUUGjvJL4XkJzoFYqE.crl (hash: jdXtkIQbdStZTUkcnsOCPXsV4qwjtq3ObDJmy28zWUU=)
2: 1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (hash: KGc0TSSoFoKqnsUVoh0np4Cm7NUT/EBHE/n1p8DVqTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Validity
Not Before: Sep 25 03:21:55 2026 GMT
Not After : Oct 2 03:21:55 2026 GMT
Subject: CN=6ab5e8d3-ed6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:5a:75:69:2e:ee:5f:f3:55:55:9c:3e:a7:
a8:60:b1:70:8b:00:f3:80:0f:41:41:af:c6:53:46:
8b:6e:8d:34:ff:a8:07:0a:b9:4b:e5:e1:e4:51:be:
28:1b:a4:01:c7:87:c7:2f:07:df:82:81:09:f4:b6:
9a:12:6c:16:ee:8e:3c:60:4a:29:05:18:07:bf:ff:
de:ba:0a:ea:50:de:4c:84:86:01:76:f6:f0:f1:2d:
8b:9f:b3:de:ef:58:61:3b:47:73:f7:37:65:5e:0a:
ab:ba:3d:0f:87:ac:25:83:5e:3d:14:8e:bb:ba:92:
7b:e7:5b:b8:e8:c4:5c:10:95:f5:44:4a:28:2f:c4:
c6:ee:0e:55:25:81:e5:20:b1:55:5f:29:44:6c:6f:
73:9a:87:5f:92:5f:c0:37:6f:10:f8:d2:1b:a0:fd:
1e:bc:a4:de:dc:4d:03:22:db:ec:43:a6:7a:ec:9c:
be:5a:9e:bb:ae:bf:e7:48:ec:f6:14:91:50:37:1e:
d1:94:9f:09:c7:96:d6:ea:ff:48:1a:23:cb:25:d3:
12:5f:07:6e:d4:41:92:52:b9:de:8a:e0:1c:d6:e9:
33:1e:ff:aa:42:c8:fc:91:00:93:dc:0f:b1:50:29:
f8:1a:0a:4f:05:74:7f:48:f2:83:68:c8:c9:c7:dc:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:35:49:B3:C0:7E:F8:80:79:AF:CD:DC:DF:34:EC:2C:42:AA:9F:6B
X509v3 Authority Key Identifier:
keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:9c:da:3f:e3:e7:af:1e:26:71:28:04:00:36:74:31:b6:48:
01:84:6c:12:7c:f7:04:76:34:91:aa:dd:48:e9:cf:af:4e:79:
de:1d:47:0c:52:9b:83:98:e4:b1:88:f3:64:79:dd:10:b3:19:
1b:82:82:fd:16:b5:e3:04:ea:4f:bc:1f:dd:c6:de:45:7f:4f:
f9:c1:9b:f6:b0:a2:f4:46:00:d5:ab:18:b4:0a:66:4e:0d:d3:
82:bc:24:5f:cf:2c:69:18:7d:ba:3c:b1:4c:48:1d:09:25:ba:
35:f6:42:af:1f:cb:ef:90:71:3d:ce:f9:31:89:ae:7e:9b:6d:
e7:9d:6d:ea:b9:e2:25:fe:6a:cf:12:3d:9f:67:45:eb:e6:26:
30:43:d2:0b:c4:85:69:fc:9a:64:d4:2c:6b:a9:1d:37:c3:77:
80:c2:cd:70:b1:67:d8:a5:ba:83:d9:58:4e:ed:2b:ea:2d:29:
4d:bc:80:97:a8:bf:d5:20:87:49:15:e1:6f:50:1c:f0:51:af:
34:59:99:30:e5:9a:65:b7:d3:78:b6:c8:9d:ee:28:82:71:15:
2d:31:05:07:a4:16:5c:ce:b0:9c:6d:81:b0:fb:f9:8b:25:46:
58:41:2f:ac:6b:c2:0a:f8:d7:aa:01:25:e5:7a:f9:07:f8:7b:
d1:75:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:41:52 2026 by rpki-client