
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json)
Hash identifier: EnEQ1cFEpMfZmQamSXpA7WwORr34yf6/AFGyNazLEaw=
Subject key identifier: BB:1B:AD:F5:B0:F4:0D:B9:D5:51:C2:F6:92:18:7B:9E:D6:E8:08:D5
Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Certificate serial: 0F13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
Manifest number: 0F08
Signing time: Tue 12 May 2026 17:37:42 +0000
Manifest this update: Tue 12 May 2026 17:37:42 +0000
Manifest next update: Tue 19 May 2026 17:37:42 +0000
Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: yE4L3eLAxkdgSPKBy/OPISP0X2n4aPAo78IYLRxry5A=)
2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3859 (0xf13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Validity
Not Before: May 12 17:37:42 2026 GMT
Not After : May 19 17:37:42 2026 GMT
Subject: CN=6a036566-71c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:28:7d:7b:68:b7:66:a9:99:94:68:58:e4:
95:a2:03:6c:a3:c3:3d:0a:4b:f1:ba:e1:69:27:98:
ab:fa:3d:fe:42:45:e4:a3:a1:25:bf:d6:41:4b:97:
70:74:da:fe:6f:6e:6d:4b:82:75:8e:a2:c7:5b:5f:
35:6e:98:2e:d7:4a:c1:3c:5d:09:d3:dc:e7:05:27:
96:a0:2d:f7:a0:c3:fa:7d:b1:ff:7f:99:45:06:26:
87:46:b1:87:dc:80:a8:6f:de:98:84:16:ab:e2:58:
39:d0:53:fb:a3:6f:07:87:8e:05:5d:d7:e8:db:3e:
f9:50:71:20:64:67:d5:57:1d:01:e2:3e:78:a6:55:
07:36:ab:5e:3c:ca:59:77:cf:2c:cd:3e:b1:f1:f7:
cd:ec:74:9d:78:a1:2b:63:a2:55:62:5c:76:df:d9:
dd:87:b4:7d:01:2d:09:ce:e8:9d:d2:35:e1:c2:76:
9b:34:7c:7f:80:20:f4:f2:27:80:e9:35:d8:7d:d1:
81:32:3e:a6:b9:f1:c1:bb:ed:06:8b:21:ea:d6:09:
47:82:af:96:fd:be:aa:db:c8:22:b8:e1:b4:8a:84:
14:2a:8c:45:6d:9a:f9:16:19:9a:e2:e6:2f:4a:35:
d2:e5:e2:e3:0e:b9:d1:59:6b:aa:28:e0:cf:31:a3:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1B:AD:F5:B0:F4:0D:B9:D5:51:C2:F6:92:18:7B:9E:D6:E8:08:D5
X509v3 Authority Key Identifier:
keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:a4:9f:34:b1:ac:45:27:d3:d0:5c:7a:91:b0:34:e0:fe:
8d:e7:a5:7d:cb:62:08:11:d5:6f:95:d5:d6:e1:33:75:af:21:
26:43:44:ea:21:69:57:fd:cd:c5:6d:25:81:93:2d:e0:bf:70:
56:8b:e4:cc:28:4f:06:0a:3e:48:a6:73:a9:29:e0:ac:cc:4f:
95:92:6a:4f:20:41:d3:99:84:48:dd:c2:d7:0d:9f:d4:bf:e9:
1b:be:44:46:06:5e:c6:4e:1e:4c:fc:de:a4:48:ab:c2:16:e5:
b9:d2:b3:86:2d:e0:4f:eb:76:ba:2f:a7:8c:90:46:e0:79:3d:
99:00:df:0f:cd:a9:d4:8c:e1:b0:f4:fa:04:97:cc:ff:40:8b:
cb:33:ab:9d:31:38:3d:6b:a8:2a:44:56:1b:e8:fc:52:7e:11:
e5:f2:cd:45:dd:d7:3a:d0:92:aa:de:1a:e2:1a:da:55:41:19:
29:0a:f2:8b:a9:e4:d1:c1:65:a9:b3:a4:1d:f1:1a:c4:a7:99:
4b:88:69:a8:b2:46:c8:24:92:b7:12:a3:54:8f:53:e0:da:67:
74:30:d3:6b:c2:5f:7c:4c:2d:48:47:59:57:14:49:37:a3:d1:
8e:17:36:95:08:fd:0e:9f:30:bc:67:01:9d:0b:5f:9d:af:6e:
9c:a2:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:28 2026 by rpki-client