
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
File: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft (raw, json)
Hash identifier: MzMLYuT3yzLKSNxAUsbsLEp87eWvkiFOPcu4zJ5uz8M=
Subject key identifier: BC:9F:E3:60:8A:58:07:BE:D9:E3:6B:BF:10:C1:B2:38:2A:4F:EF:84
Authority key identifier: 90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53
Certificate issuer: /CN=A9142706/serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
Manifest number: 56
Signing time: Wed 23 Sep 2026 07:57:24 +0000
Manifest this update: Wed 23 Sep 2026 07:57:23 +0000
Manifest next update: Wed 30 Sep 2026 07:57:23 +0000
Files and hashes: 1: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl (hash: ZdxPjpycTGKTSnqq2SIh0MABXJ177wi/gO36mM9OEMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl
rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142706, serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53
Validity
Not Before: Sep 23 07:57:23 2026 GMT
Not After : Sep 30 07:57:23 2026 GMT
Subject: CN=6ab38664-9c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:5e:b3:e2:b1:b4:d2:a1:8f:54:e5:89:a4:
ca:df:ee:56:c1:5d:a5:f6:e8:8f:1e:bb:3b:8a:6f:
4c:e4:db:5b:91:c5:68:60:4d:00:e6:17:36:e1:b2:
d3:3c:eb:72:d2:e0:42:32:7f:1c:ea:77:b5:af:82:
71:45:10:2d:a4:6c:f8:1b:50:9d:63:e9:a2:f0:8e:
77:20:8e:d9:6c:44:82:63:6c:84:2b:9c:30:2e:72:
3a:07:5d:ab:aa:2a:a2:36:f8:84:fb:9b:3a:3c:67:
f2:38:b4:0d:d4:80:fc:f2:8e:16:11:dd:72:7d:9a:
5b:b9:48:30:d1:09:7e:04:57:78:b5:41:da:6b:8d:
1d:e4:20:a0:4c:82:af:78:47:79:19:cb:39:6f:98:
a6:cd:b0:6b:1b:f1:ba:f3:ba:54:b3:de:98:89:15:
07:e9:e8:6f:07:f1:94:6d:7e:7f:f2:0d:b3:00:d3:
ee:bc:52:64:be:37:fa:45:45:04:60:ec:ce:bc:f4:
a3:ac:99:76:a5:57:6c:3f:3d:a6:df:80:67:b2:f7:
f4:9c:44:73:b9:6f:06:1a:44:e1:8e:15:5a:aa:a6:
89:98:7f:06:1e:d2:e4:5a:13:5f:d8:38:2d:91:f9:
a4:6e:a1:ba:0a:c2:f2:df:ca:80:06:aa:83:c1:c6:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:E3:60:8A:58:07:BE:D9:E3:6B:BF:10:C1:B2:38:2A:4F:EF:84
X509v3 Authority Key Identifier:
keyid:90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:57:79:b2:e2:83:c4:8b:53:ac:e5:29:cc:5d:98:ef:f6:5b:
8c:62:50:85:4c:24:3c:40:cf:5e:e4:4b:08:98:00:32:1c:f7:
8a:e9:b0:2c:fd:b7:99:96:7c:3f:79:f0:5a:e1:fd:d8:6c:14:
fd:e2:bd:fe:77:56:be:12:72:0b:fb:db:0e:b0:2b:51:2e:d5:
b1:2c:fb:12:38:9c:50:2d:e5:ad:bc:af:f9:fb:25:e5:44:fa:
ad:23:97:83:6d:7d:cb:4a:7b:2b:0a:c6:d5:ee:72:6a:3a:ea:
1c:1a:82:02:b4:08:80:8a:a1:54:f1:d8:fa:73:8b:4d:7d:0f:
2e:4a:da:d8:1e:3b:a0:0f:82:b6:c8:5a:8b:13:9c:62:5b:ec:
36:ff:6e:21:be:af:49:6e:35:cd:3d:75:53:82:49:55:3b:c2:
05:b1:22:5b:3a:57:ab:3c:58:a1:06:3c:1c:3f:dc:c0:2a:4c:
91:fe:26:24:94:74:d8:ce:2a:b6:1f:7a:24:7b:d5:77:0f:a3:
99:28:f6:3d:60:7c:ae:3c:5c:4a:28:0a:81:6a:d9:42:09:2b:
ea:26:6f:4c:c7:a2:38:cb:ed:bd:6e:d0:55:3d:52:18:45:13:
45:fe:fe:1d:a6:cd:42:f1:b1:83:40:70:b0:fd:11:21:b7:06:
0e:5f:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:54:06 2026 by rpki-client