
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier: d7d+eIxgLE9kQkGl1Nh8kO1NwOcRsdXSMxRaHjpfnqg=
Subject key identifier: 87:A8:FB:49:4C:89:1F:B0:F4:F1:7E:34:DD:9A:BC:EC:50:AE:79:89
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number: 016E
Signing time: Thu 23 Jul 2026 06:18:59 +0000
Manifest this update: Thu 23 Jul 2026 06:18:59 +0000
Manifest next update: Thu 30 Jul 2026 06:18:59 +0000
Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: Xnfjo1/b0Hl8MSafwiM3XCAFC8WM1D7DEPq+mgQJ2JQ=)
2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Validity
Not Before: Jul 23 06:18:59 2026 GMT
Not After : Jul 30 06:18:59 2026 GMT
Subject: CN=6a61b253-2721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:69:21:7f:00:81:7b:1f:8d:0f:42:3c:d9:
7c:a5:56:59:2e:00:06:d7:dc:92:24:3f:9e:de:1e:
58:b8:96:b5:6f:7e:6e:43:4e:d4:8d:db:fb:4d:37:
2d:dc:d0:ce:a5:42:8a:4f:cd:46:39:a8:f6:d8:88:
89:ce:36:b0:21:d1:fe:af:c3:63:22:d4:16:32:26:
40:f1:0d:7d:7e:c4:0a:39:36:99:a0:df:9d:60:31:
52:e1:af:e1:21:67:17:97:ac:35:0d:07:9e:f2:0c:
5d:84:46:07:87:fd:ea:dc:26:fc:cb:aa:46:cc:50:
c1:e8:dd:f7:5a:09:c7:31:b5:ba:fb:3a:19:48:91:
21:ee:ec:82:b2:74:a2:9e:03:a6:dc:d4:75:e5:c6:
ad:cb:2e:21:49:be:12:89:37:87:8d:71:36:8c:69:
9c:88:6b:e1:40:3e:1e:9c:ae:62:2e:0e:19:c0:ba:
eb:12:99:45:88:ce:db:81:1c:d5:5f:3f:ed:f6:ba:
c1:cb:47:7c:9e:7c:c9:fc:71:f9:cf:0d:fe:58:ce:
e8:1a:97:c4:db:86:31:60:dd:47:e6:40:a2:01:82:
06:73:d1:0f:02:aa:c7:38:9f:b7:47:d8:35:10:dc:
ea:ea:93:93:55:56:60:9e:b2:da:8f:88:a5:f4:4b:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:FB:49:4C:89:1F:B0:F4:F1:7E:34:DD:9A:BC:EC:50:AE:79:89
X509v3 Authority Key Identifier:
keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:55:37:fc:85:b5:3d:58:63:35:87:4b:5f:47:f7:c7:bd:8c:
6e:75:62:7b:86:4a:8d:74:bb:ff:66:88:f8:c2:81:4f:2a:df:
4f:cc:d4:a2:ce:e6:84:71:33:ee:dd:6c:c3:55:70:ce:03:84:
6b:3f:de:28:df:c3:13:30:94:59:f1:eb:6b:8c:39:0b:ea:bc:
3a:eb:95:50:e3:69:dc:76:aa:8e:a0:2a:78:ac:50:b6:44:7f:
b1:82:e4:ae:8d:df:a9:90:f2:4c:14:83:b7:da:be:1a:0c:f8:
85:60:81:0e:db:08:ce:be:fb:bd:78:98:da:4e:2b:b2:6f:a1:
54:53:85:a7:e2:f4:0e:6b:6b:ef:98:80:db:b4:39:31:05:69:
53:da:b5:86:20:96:90:de:f5:06:e3:84:a5:f6:81:81:6b:44:
c5:db:fd:1c:16:8c:ef:cd:7a:79:f2:45:81:b6:68:69:08:a4:
de:03:1a:96:f2:23:3a:1d:63:d3:8c:c1:b7:89:81:a3:00:90:
69:d6:b3:ea:5e:b4:d3:43:d2:ae:91:5a:34:fe:cd:84:30:a5:
f6:23:b4:8c:cc:43:3a:41:d4:b3:b7:02:24:d4:39:8f:4b:e2:
3c:8f:de:ff:7f:49:b1:77:e1:cd:30:1d:bb:67:ab:d0:a1:8b:
b1:ed:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:27 2026 by rpki-client