
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json)
Hash identifier: 8sA6OJ7qlrdfbvHGgzjRu36xcsaSAdcIWxTNDxEBAxk=
Subject key identifier: 96:05:23:52:EB:30:D7:ED:2E:47:80:C5:22:E2:C1:E9:5A:E1:82:30
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial: 108D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
Manifest number: 107D
Signing time: Tue 12 May 2026 17:24:20 +0000
Manifest this update: Tue 12 May 2026 17:24:20 +0000
Manifest next update: Tue 19 May 2026 17:24:20 +0000
Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: e5ZWVUvMhm2tgagZU7ZYgNPRTxhIpH6M14lf/xfSiyo=)
2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: YOyhRNReWebICH9oX6oPZhIxKRKBfgETO6Jt4nNgxQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4237 (0x108d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Validity
Not Before: May 12 17:24:20 2026 GMT
Not After : May 19 17:24:20 2026 GMT
Subject: CN=6a036244-9678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:7f:7d:bd:8b:da:a1:14:30:f2:e9:3a:7b:
ad:d2:da:af:09:0d:4d:48:f4:a3:75:a4:96:21:ab:
a6:12:b1:60:42:4d:87:57:d1:a6:0e:3c:97:01:e4:
97:9c:7d:93:8e:3c:f7:3f:1c:79:98:eb:38:1b:37:
c8:a2:f4:02:0e:2f:05:c3:4d:99:34:df:fa:0d:0f:
90:ac:df:5c:45:63:20:a7:02:ba:ad:92:fa:20:b2:
c0:a8:cd:e9:9d:83:d8:5e:6b:be:60:9c:58:a1:51:
ad:9c:fb:c2:62:0d:e5:d5:47:a0:94:69:d1:f3:7f:
4d:02:44:b1:47:76:f3:ce:ff:71:ee:8a:f0:32:80:
ba:f0:7a:88:49:21:4c:f9:e8:42:f8:49:24:3d:8d:
53:a6:ce:08:33:01:4e:48:d8:6c:f1:8a:5b:00:3e:
7a:c6:5d:48:fa:0b:ea:7d:6d:c3:be:d6:92:7f:cc:
06:77:d7:a5:c2:9f:4f:42:e0:b6:eb:a4:0a:9f:2d:
12:fe:87:0f:74:5b:d8:f8:93:8e:1f:e7:5c:2e:1a:
0f:0f:59:f1:47:b1:a8:89:25:42:af:89:9b:39:97:
39:59:9b:33:37:35:fc:6d:ad:74:94:fb:04:2d:50:
18:64:ca:11:56:85:9b:a9:26:d3:f7:0d:3b:28:8a:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:05:23:52:EB:30:D7:ED:2E:47:80:C5:22:E2:C1:E9:5A:E1:82:30
X509v3 Authority Key Identifier:
keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:eb:4d:22:36:26:b5:08:cd:e3:f7:99:fe:9c:2b:75:c5:cd:
ab:88:e8:9d:89:a7:ea:b1:5a:2b:7d:73:36:b6:9e:b1:c3:b1:
2f:13:41:06:31:a5:1f:ec:23:16:e6:10:ff:5b:d9:91:b8:65:
33:66:94:d0:b5:0c:f9:99:2b:cc:ff:8d:f5:99:3b:8b:23:ef:
05:fd:4a:e1:c1:2b:00:1d:9e:ed:c1:5a:46:ec:33:79:da:a9:
f5:2f:c7:e7:de:37:05:81:93:45:3b:38:44:b0:26:78:f2:39:
95:93:87:12:4c:db:31:09:06:57:14:fe:aa:15:a9:87:d8:d5:
7a:80:fa:b4:b9:db:7b:b9:d5:c6:2d:f2:8b:f7:1a:f6:ce:28:
c4:80:74:ac:9f:6a:7e:03:33:09:6c:4b:08:98:c1:f5:7c:f4:
e9:8f:70:43:43:1d:7f:2a:4c:0a:4c:49:0e:72:3d:9c:b2:94:
be:e3:89:a4:0e:a3:03:c9:62:ca:71:ee:2d:9e:bd:50:03:7b:
78:98:93:d6:c2:a8:b6:31:56:e4:39:02:75:f3:55:d8:57:3f:
1d:17:9b:cf:6a:d5:c9:28:21:24:af:fb:8a:e7:21:3f:89:ea:
75:1f:67:37:cb:39:c0:3f:9b:e1:6a:d3:b6:78:16:cd:49:42:
cf:93:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:02 2026 by rpki-client