
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json)
Hash identifier: YjCKbdXio/t/ZLW82Zk390h19QmIAXoKMJtYS4mVkWU=
Subject key identifier: 50:EF:BE:FE:FD:00:8B:FF:82:00:B6:A2:76:67:49:D2:7B:36:62:01
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 2A62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
Manifest number: 2944
Signing time: Thu 24 Sep 2026 15:35:44 +0000
Manifest this update: Thu 24 Sep 2026 15:35:43 +0000
Manifest next update: Thu 01 Oct 2026 15:35:43 +0000
Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: BtMsv2aTd4Ob7f75UuupwvMA+wE0f2seunoClYuLlTI=)
2: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: sxDbznRMUEuDI6/LpS+5Ojyml9z10ADIy3GNXv2BLt8=)
3: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=)
4: 258E51CC8C1311F18E34296D4511F970.roa (hash: nMT7/65TS89J7OqSIX55li4nvbblWq1EDna13tE8Ghw=)
5: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=)
6: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=)
7: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: DC/CiNTewEy9AjzNKO1rCpeeQC3b7v2RZLNf6CbyhHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10850 (0x2a62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Sep 24 15:35:43 2026 GMT
Not After : Oct 1 15:35:43 2026 GMT
Subject: CN=6ab54350-adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:24:52:67:67:e1:0c:46:2e:da:05:c1:b9:
1f:c4:38:f5:c5:00:0c:f7:78:55:37:ef:b8:20:f3:
07:7e:15:da:59:06:4c:89:52:4c:12:18:a0:94:a4:
15:a4:84:70:33:36:5c:03:32:93:90:a5:cf:68:8d:
58:cf:e8:50:b4:9f:09:d3:ae:c1:17:78:06:20:db:
21:98:85:4e:19:b0:6f:5e:7a:75:40:52:7a:73:9f:
1d:dc:15:ef:5d:4d:d5:10:6d:a0:30:7c:f7:5f:73:
b5:99:2a:6a:5c:59:36:2f:d1:e9:c4:1a:cb:4f:83:
6e:34:ed:62:bc:1a:f5:cf:e8:c5:23:b7:f3:bb:2c:
97:c2:8c:34:a4:80:04:26:ff:f4:d0:7c:79:d7:37:
b8:ad:c7:05:ce:8a:91:a7:e7:8b:69:24:56:08:2a:
f3:01:ee:11:22:05:4b:c5:1a:a9:4e:91:8a:5f:0b:
6c:6d:d5:67:87:a7:de:ae:7f:50:d3:ef:e3:97:9e:
e3:5e:15:32:49:c5:3b:2c:13:3e:cc:87:da:8b:46:
89:d5:39:62:a8:e4:32:6d:8e:df:11:48:2a:02:ee:
59:40:26:d9:4b:0b:2b:f6:20:74:e3:a2:3a:53:f9:
ee:5f:c5:3f:3f:7a:41:c6:10:fb:28:3a:d9:7b:88:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:BE:FE:FD:00:8B:FF:82:00:B6:A2:76:67:49:D2:7B:36:62:01
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:82:e0:89:51:42:73:41:85:8e:4b:9f:79:5f:58:22:14:4f:
51:30:01:ae:11:3f:35:86:bb:93:0b:ed:47:23:78:53:90:76:
b6:56:86:aa:b5:87:77:06:b9:12:4b:2f:7a:ce:7e:b4:35:26:
b2:2c:0a:32:cc:d8:f6:8a:f8:da:03:cf:d3:15:1c:2c:ac:67:
3f:00:29:c0:0a:2e:38:6f:b3:23:96:65:31:17:3d:57:05:88:
b7:9b:66:e1:f9:83:77:c6:ce:e2:bd:84:17:2b:a3:6f:ef:4d:
8e:ae:7b:ce:b5:7d:d6:6a:dd:0d:29:37:ae:89:5b:5e:a3:cf:
56:e7:7b:8a:88:04:6c:5d:4f:b9:a7:32:86:e2:51:f9:8f:37:
a5:f9:76:4d:30:40:79:b8:f5:4c:bc:a6:df:92:41:7b:9a:bc:
6f:08:9c:ff:9d:eb:e3:3a:26:de:2d:68:39:ca:b2:52:69:d2:
11:ce:c1:c2:fc:a8:50:92:67:84:7d:a1:4d:e3:f8:e4:a9:fe:
34:fa:8f:20:e1:69:05:ed:41:05:8c:69:d7:0b:c3:66:04:b3:
34:cf:0f:97:df:37:d1:f3:75:b5:62:df:0c:7a:db:b1:f9:18:
95:ac:86:42:66:d4:43:28:f2:e6:16:52:32:2d:24:ac:28:92:
22:7f:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:48:50 2026 by rpki-client