
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier: mKsR9mE4wx8zj9RLOQ+A+YNWws8MH8jDHDGGYmyYuAM=
Subject key identifier: FB:77:08:33:83:85:A1:43:9C:41:B3:0B:0D:64:22:B6:09:3A:7C:0D
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial: 0968
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number: 092D
Signing time: Tue 12 May 2026 20:19:48 +0000
Manifest this update: Tue 12 May 2026 20:19:47 +0000
Manifest next update: Tue 19 May 2026 20:19:47 +0000
Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: heB6m3m6wuNi68lV9BUSKG/00tNPUA02e3SzDSfpWhg=)
2: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: KT7zEvJNVvs97oYvIe5jqgLfgSdT+s+2AedPsqQHGgo=)
3: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: FXMw4gU7m6cMDVIFR2ioRmioqgFmxJcgor2Nog9jRxk=)
4: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: pwTpLqoix1ml/iDyvZtQl2PM0Bjf1ih1Kt+rjQ1/6gY=)
5: C6E6A146171011F1BE8A5674053D8C67.roa (hash: giIRr2ar8YF7Sh/tonFBshlOwMtWsPmV9SJJhoV2jPo=)
6: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: pHl2UlpqvRYqNzqgzVyVtJS995yGr9GKW6dkHakGY/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Validity
Not Before: May 12 20:19:47 2026 GMT
Not After : May 19 20:19:47 2026 GMT
Subject: CN=6a038b64-abf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:ef:ba:dd:f2:18:68:b9:8e:90:8b:88:6e:
ae:1c:e0:aa:b5:7c:ac:9f:13:66:67:d0:25:68:ae:
34:1a:c2:ed:22:8e:57:42:d8:4a:40:d1:f5:cf:4a:
76:b5:2d:22:2e:a5:01:72:82:e1:02:c9:b2:5f:47:
58:a2:14:48:fe:6c:46:96:d6:6d:9b:52:3a:f1:1a:
4d:79:a1:bb:d1:76:e1:c4:98:24:7f:50:82:2c:17:
db:a5:e6:53:6f:c0:e4:2b:cc:2c:34:5b:18:b0:8e:
4a:95:25:63:d4:df:b6:9c:25:40:a9:c4:ad:e0:c3:
e6:62:b9:d6:01:ec:6a:27:52:8e:dd:7b:06:b6:b2:
fd:bb:d7:3f:e3:58:f5:a1:00:06:64:ec:25:6c:06:
e0:35:3c:36:56:e0:39:ef:96:6f:0f:2d:bd:88:a4:
04:14:ce:f7:9d:67:2b:04:60:a2:5e:72:64:86:c4:
c8:b9:c0:1d:d7:11:47:3f:85:ef:bc:d6:c4:81:7b:
b9:78:86:96:05:ae:ae:84:3f:c9:e4:5c:ca:50:e6:
48:44:48:62:99:96:cb:8d:6d:ca:ae:00:a7:62:b3:
43:a1:6d:be:6b:f2:36:32:d0:a6:2e:2d:a5:a3:7d:
6f:01:fc:47:58:68:b0:e3:6a:57:33:c7:9f:0e:96:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:08:33:83:85:A1:43:9C:41:B3:0B:0D:64:22:B6:09:3A:7C:0D
X509v3 Authority Key Identifier:
keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a7:3e:69:50:09:b8:c2:fe:63:d4:15:61:fc:4d:08:9e:9f:
b1:d7:27:74:cc:87:52:35:9f:77:6f:45:90:6e:6f:80:69:70:
93:24:e4:64:be:92:aa:e4:f2:1c:49:35:73:dd:20:5a:f2:27:
71:5f:c6:fe:89:e4:99:51:1e:82:de:bc:ba:fe:68:b6:b0:72:
00:75:96:aa:b2:7c:09:ef:20:1b:c8:35:44:57:f7:58:ee:33:
f2:61:24:27:3a:75:42:a8:5d:cf:22:f9:cb:9e:23:b0:c8:40:
a7:4c:fc:9a:cf:38:4b:24:1a:b8:e2:f2:f9:b7:0d:66:9c:34:
e2:8f:12:0c:e8:ec:ec:d1:cc:e1:23:96:19:33:d2:d5:0a:2c:
27:54:ca:d7:5c:c4:6d:00:2e:7f:81:ce:53:7c:da:d7:57:21:
d4:61:e8:fe:f5:55:61:50:54:66:05:41:a9:11:0b:43:f6:c0:
a8:56:a0:05:ef:71:e3:5f:10:75:3c:8d:b4:33:e6:a2:f5:5b:
8e:01:c9:d4:b0:f6:1c:43:75:81:e1:a3:6a:79:30:e8:3c:21:
7a:25:a8:80:c2:91:aa:31:f0:6e:f8:e8:54:32:cf:0e:4c:52:
ab:90:3d:fd:85:e3:5c:48:6e:0b:45:8c:35:4c:29:7c:cb:72:
86:75:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:28 2026 by rpki-client