
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File: KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier: 6slKPFtmXe5kPIQ2URoj62/OO4vOH/Y4OjLRP8GloKk=
Subject key identifier: CC:5A:9C:77:7F:FE:73:5B:B6:E8:28:AD:96:DF:B6:CE:46:96:89:45
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial: 03E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number: 03CC
Signing time: Sat 03 Oct 2026 00:50:10 +0000
Manifest this update: Sat 03 Oct 2026 00:50:10 +0000
Manifest next update: Sat 10 Oct 2026 00:50:10 +0000
Files and hashes: 1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: W6gi4A2SUvRZrPr3lxr9H9iOocZS2602ZotnY8SpCHQ=)
2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: V7aBUIeHjnuFGSXcgQjlU9vZiTp/iM8MzCOM0K2/HNc=)
3: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: 8BhnI271pXtssKyoUU3+BWjfHdoZbJ1UUEIVs2VtNjY=)
4: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Kkc4FrDSL9TyqmO89DwT+TFSNidqWuKseH0zs4kx+8M=)
5: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: oiSsK2P8HRB4FPzmPdMZC05vhJRqZjFnda/dRmDD5yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Validity
Not Before: Oct 3 00:50:10 2026 GMT
Not After : Oct 10 00:50:10 2026 GMT
Subject: CN=6ac05142-6b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:c9:85:41:9b:aa:b2:f0:2c:f2:ce:70:8a:
15:02:1b:c6:f4:f8:f3:66:ff:57:6a:cd:35:f2:80:
65:33:2d:42:91:05:e4:40:09:b6:d4:22:62:00:4d:
1b:db:2a:d2:f9:68:74:71:87:c3:0a:9f:de:20:74:
a2:65:38:e7:23:ad:9b:c1:9a:d5:58:5a:10:06:41:
1d:d9:d3:8b:3f:e1:ce:49:2f:5d:ee:f9:ee:65:1f:
2c:9f:6b:d6:4c:c9:81:36:f6:5b:39:4a:4a:cd:97:
76:e0:5e:3a:d8:2d:2f:9e:53:19:84:6b:e0:b0:92:
65:b3:17:77:95:68:fd:98:a9:05:b4:7d:16:7d:d2:
c6:c6:56:e5:7f:cf:d3:01:c0:73:56:7d:63:2c:b0:
60:a8:0f:b6:e4:7f:06:e4:db:6e:01:80:61:f6:59:
a0:a4:85:ad:1d:e9:27:b4:2b:3d:c6:9a:7f:11:1c:
1d:0c:cc:65:19:58:6f:6a:39:f5:e5:09:10:4d:b9:
5a:5f:02:dc:9a:7e:b1:77:f5:f3:4f:b3:24:d9:29:
89:4d:ac:27:86:4e:03:d9:f3:f5:9c:ef:83:ad:51:
b9:19:3a:62:43:25:1b:03:f2:58:e1:af:76:e1:0f:
95:f7:39:10:e3:de:f1:10:4a:67:05:4a:17:56:00:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:9C:77:7F:FE:73:5B:B6:E8:28:AD:96:DF:B6:CE:46:96:89:45
X509v3 Authority Key Identifier:
keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:7c:f5:f2:8c:da:dc:c7:a2:e2:c1:3c:69:fc:32:d2:b6:32:
f1:72:58:ab:d6:39:25:7d:e9:8d:e9:97:00:95:5c:1e:89:79:
36:37:e0:11:0f:d2:1f:66:97:84:2c:35:e5:c9:3f:94:d6:cb:
2b:41:fc:07:3b:a0:35:5a:88:6a:0b:26:7d:80:79:b6:58:b8:
27:71:fb:42:6f:84:81:b9:2f:5b:f9:1f:1f:a5:ea:9a:72:09:
fb:e9:30:1c:e8:38:03:0c:ad:73:12:25:75:e9:37:82:27:1d:
4f:d9:bb:90:19:00:67:0a:ad:38:f0:a1:d9:75:18:2d:61:92:
03:33:16:54:48:e1:9f:db:dd:e5:8c:68:94:08:36:b5:07:e5:
d7:1f:b2:74:0b:6b:04:b7:30:b1:83:b5:b5:22:24:26:a9:14:
a7:37:e6:32:4a:ef:3f:35:43:5d:75:38:ee:6e:5f:81:e7:ad:
c9:38:0c:33:2c:4f:ce:d6:b7:f4:3e:59:24:f1:73:d1:09:9f:
07:46:d9:f8:81:b0:26:61:de:63:80:19:2d:6f:b8:33:59:65:
8b:1b:c1:2e:e7:ac:b4:6f:5f:31:ef:88:16:ce:1c:5b:6c:47:
cd:fe:43:93:b4:4b:c5:8d:de:05:29:4a:92:39:c6:a3:a0:5c:
91:ff:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:45:56 2026 by rpki-client