
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier: KoOT2XDjYX3oB4PwSp3XyQILDgZ1F1i483+saqO8TL8=
Subject key identifier: 97:45:6D:1C:A2:69:5F:A8:59:B0:D9:31:4B:9C:F1:09:B5:96:41:CB
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number: 01CE
Signing time: Thu 23 Jul 2026 05:04:28 +0000
Manifest this update: Thu 23 Jul 2026 05:04:28 +0000
Manifest next update: Thu 30 Jul 2026 05:04:28 +0000
Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: JAR1zsTfj4c73+NmJgRDZdsgBdbdmBLASUzAOM2jEt8=)
2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: lo4efARTvEcP2ve6/ixSUWQB1NQ99xWjC1uzkkmYqbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Validity
Not Before: Jul 23 05:04:28 2026 GMT
Not After : Jul 30 05:04:28 2026 GMT
Subject: CN=6a61a0dc-5d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:ac:12:b7:5c:63:fd:cd:2d:10:cd:11:e9:
a9:2a:2c:f0:19:3e:d5:9d:27:46:c4:38:88:ed:95:
f6:22:55:3f:5a:71:a5:f5:3b:2e:46:2b:c7:21:77:
93:c0:55:ea:20:54:5e:48:78:77:4e:1f:07:2e:40:
ec:b7:a4:f6:9f:00:ae:c6:a6:a5:a9:79:36:46:66:
95:c4:dd:bc:8d:5f:2d:76:a3:58:73:d0:b5:b7:91:
f2:58:64:ed:20:d5:45:8b:11:13:40:72:0a:d6:fd:
9f:4d:92:0f:1a:50:5c:12:bb:45:a3:75:9e:2a:8b:
3e:8d:70:cc:9d:e0:2f:36:3e:db:ba:80:9c:2d:2e:
80:e7:48:89:eb:bc:a8:97:8c:d1:12:83:26:dd:7d:
c3:60:18:9a:da:e3:2a:97:c3:12:8d:37:5e:c8:1c:
a5:dd:5a:60:56:d9:5c:97:f1:db:84:a6:ce:08:03:
65:51:cf:da:67:37:fc:ed:ce:58:5b:91:07:71:80:
55:01:ed:fc:19:2f:38:b7:c4:4b:7f:c5:d8:12:7b:
00:48:d1:fc:2f:47:54:30:ec:0f:99:cd:bf:5b:81:
3b:48:0a:52:86:61:e2:ae:66:9d:69:de:bd:d0:5c:
44:f2:14:4f:7f:d7:cb:79:f2:fe:8b:b8:4b:0f:c7:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:45:6D:1C:A2:69:5F:A8:59:B0:D9:31:4B:9C:F1:09:B5:96:41:CB
X509v3 Authority Key Identifier:
keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:0d:ff:e0:c8:ae:2a:9a:11:6e:18:c4:76:1c:ba:72:ca:d8:
f8:3f:bc:b9:a4:09:7f:1e:80:fe:7f:cf:0e:86:46:13:26:e8:
ff:48:d8:c5:da:51:15:7d:bb:63:4c:51:26:c7:6f:c2:c3:b6:
4d:8e:c1:69:12:95:91:e2:c3:df:8c:19:d9:f3:0c:ab:d0:b0:
d2:14:06:25:74:b5:c4:c2:53:70:34:02:3e:cd:02:15:14:bf:
c4:9f:07:f6:a2:fe:d4:6f:38:1a:ee:61:fb:e0:4d:ae:08:5c:
2b:c3:51:fc:d8:e6:19:d3:13:58:20:16:79:77:3a:28:6e:55:
07:b6:ec:4a:ed:56:04:6f:07:7f:76:32:1e:8e:4e:fa:cc:f3:
00:fe:5f:11:48:15:41:a6:ec:e5:e2:05:bf:54:f3:7a:31:34:
7b:e0:f5:d9:20:f8:fa:bb:29:0d:04:e6:2a:ba:ee:5f:1c:93:
16:df:a5:bb:5f:3e:4d:41:07:ee:e3:74:af:5e:84:c1:1b:b6:
1c:28:22:6c:59:f3:7a:76:3d:74:61:fe:3d:99:bc:99:d3:01:
e2:5e:ec:da:54:cb:79:25:57:aa:40:f0:36:00:6c:9e:2b:e4:
ae:2a:0e:00:c8:3d:ec:2f:f8:ed:e1:f4:3e:66:d8:7c:60:2a:
78:51:4e:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5
MjNBQTc1QzcwHhcNMjYwNzIzMDUwNDI4WhcNMjYwNzMwMDUwNDI4WjAYMRYwFAYD
VQQDEw02YTYxYTBkYy01ZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs8usErdcY/3NLRDNEempKizwGT7VnSdGxDiI7ZX2IlU/WnGl9TsuRivHIXeT
wFXqIFReSHh3Th8HLkDst6T2nwCuxqalqXk2RmaVxN28jV8tdqNYc9C1t5HyWGTt
INVFixETQHIK1v2fTZIPGlBcErtFo3WeKos+jXDMneAvNj7buoCcLS6A50iJ67yo
l4zREoMm3X3DYBia2uMql8MSjTdeyByl3VpgVtlcl/HbhKbOCANlUc/aZzf87c5Y
W5EHcYBVAe38GS84t8RLf8XYEnsASNH8L0dUMOwPmc2/W4E7SApShmHirmadad69
0FxE8hRPf9fLefL+i7hLD8fh8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdFbRyi
aV+oWbDZMUuc8Qm1lkHLMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1
NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6
ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARA3/4MiuKpoRbhjEdhy6csrY+D+8uaQJfx6A/n/PDoZGEybo/0jYxdpRFX27
Y0xRJsdvwsO2TY7BaRKVkeLD34wZ2fMMq9Cw0hQGJXS1xMJTcDQCPs0CFRS/xJ8H
9qL+1G84Gu5h++BNrghcK8NR/NjmGdMTWCAWeXc6KG5VB7bsSu1WBG8Hf3YyHo5O
+szzAP5fEUgVQabs5eIFv1TzejE0e+D12SD4+rspDQTmKrruXxyTFt+lu18+TUEH
7uN0r16EwRu2HCgibFnzenY9dGH+PZm8mdMB4l7s2lTLeSVXqkDwNgBsnivkrioO
AMg97C/47eH0PmbYfGAqeFFOOQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:25 2026 by rpki-client