
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
File: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft (raw, json)
Hash identifier: Mw+nXhIgfe6aeqS9GdPHR/U8yAkh3pVgwBwcE/AHCDI=
Subject key identifier: 1C:B7:62:5D:B7:A4:3D:22:83:8C:01:0E:76:A2:44:BC:11:80:09:AC
Authority key identifier: 90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53
Certificate issuer: /CN=A9142706/serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
Manifest number: 36
Signing time: Thu 23 Jul 2026 10:37:02 +0000
Manifest this update: Thu 23 Jul 2026 10:37:01 +0000
Manifest next update: Thu 30 Jul 2026 10:37:01 +0000
Files and hashes: 1: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl (hash: ytnQ0OKK9Ek91ABf2uWvnQnPwYdY3qjLGub6PUiHnNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl
rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142706, serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53
Validity
Not Before: Jul 23 10:37:01 2026 GMT
Not After : Jul 30 10:37:01 2026 GMT
Subject: CN=6a61eece-58a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:5d:fb:42:88:c9:30:03:70:75:f3:85:ae:
1c:54:52:35:89:14:05:b2:81:23:c9:b8:0b:95:e4:
88:af:77:ca:99:05:63:cf:10:21:07:dc:7c:42:e6:
ce:f4:9b:db:bb:f9:3d:8f:35:c2:95:03:17:f5:6d:
48:c3:8a:e6:d9:e2:69:b4:56:9e:7d:99:bc:6e:f4:
42:9a:43:ed:d9:a4:65:56:6e:60:54:23:d0:eb:11:
d7:80:f6:ed:5b:8c:aa:3d:85:c3:3b:c3:77:8e:ed:
4a:5d:7b:53:fb:de:e8:6c:d0:62:d8:5e:1c:48:67:
09:65:8e:1a:2f:bb:13:ee:f6:a6:16:31:f2:35:c7:
e5:72:f5:7a:9b:71:1d:1f:19:42:fe:ad:b6:0e:6b:
3a:0c:78:73:b5:17:38:47:4c:64:15:fc:c0:42:e3:
d5:63:c5:52:bf:91:f6:8f:2c:ba:93:eb:01:d3:2e:
18:b0:e3:78:fe:48:d2:e3:68:ea:34:e0:02:39:5f:
b1:ff:61:f3:27:18:30:4f:6f:83:7b:be:2f:79:6c:
3f:02:f8:38:89:cb:f6:c3:57:c4:07:8f:7b:97:93:
c9:a7:22:89:fe:75:2b:19:ef:4b:48:b8:b5:b7:8a:
3f:dd:12:77:7c:67:c7:b0:fd:21:e8:21:2e:69:70:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:62:5D:B7:A4:3D:22:83:8C:01:0E:76:A2:44:BC:11:80:09:AC
X509v3 Authority Key Identifier:
keyid:90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2a:44:5e:00:27:23:06:9d:10:30:ef:14:c8:ba:56:9a:eb:
20:bb:10:8d:e3:89:80:c6:b8:f9:04:ee:11:5d:30:76:2b:66:
93:fb:d0:4d:30:e6:13:04:b8:70:16:fc:45:31:39:c9:73:1e:
00:a7:03:3c:8f:f0:6c:f3:55:01:d4:e7:65:80:45:b7:ac:97:
e8:bf:c7:87:06:eb:8c:32:0d:8f:aa:0d:04:70:0d:d8:f1:a9:
69:d5:41:62:e9:2b:f7:93:f6:ba:60:f9:97:ab:77:6b:57:f6:
95:a4:4e:c0:cf:37:e6:e0:b2:13:b7:ff:cc:bd:59:cb:49:d0:
35:1c:60:d0:03:44:18:9a:4e:a5:f7:e1:bd:73:d2:9b:02:7e:
a0:a7:90:00:ce:5b:3f:95:45:6d:2f:67:00:de:82:d2:2f:00:
dd:f7:9b:c5:03:ce:09:51:6f:6d:16:60:58:c8:50:f1:5f:51:
52:f1:a7:9d:1c:3a:0c:97:1c:33:32:8f:6e:fc:dc:64:d8:d2:
6d:f3:cd:72:05:bd:41:3a:49:74:40:d3:25:7a:5c:57:aa:b3:
6a:8f:a9:ec:af:2a:a6:cb:f0:bf:5b:f0:29:97:0a:ff:61:3d:
ef:0f:38:6d:c3:20:a3:37:5c:75:b0:52:0d:b0:30:ae:15:d0:
15:e0:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:16 2026 by rpki-client