
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier: mKlwGQ9snzK4p3t5OlsWhGIcT0O82kNPj+/Rb/z3R40=
Subject key identifier: 56:CD:41:6B:5C:B8:38:8E:FC:E3:DF:2F:14:BE:B2:66:C2:55:29:92
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number: 0123
Signing time: Fri 27 Mar 2026 05:12:12 +0000
Manifest this update: Fri 27 Mar 2026 05:12:12 +0000
Manifest next update: Fri 03 Apr 2026 05:12:12 +0000
Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: tenrGHhwpYhyBErcspm8/JW6+x4JC7CraLlTmMRj09Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Validity
Not Before: Mar 27 05:12:12 2026 GMT
Not After : Apr 3 05:12:12 2026 GMT
Subject: CN=69c611ac-4ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:a6:42:02:bb:29:5e:0c:8a:00:c0:e9:6a:
68:23:0c:cf:4a:89:8e:b6:7e:cf:47:84:c9:41:eb:
d0:7b:e0:7a:b8:99:96:24:18:88:3a:4e:57:ab:a3:
79:09:ed:16:95:76:fe:4c:f9:67:f3:75:30:4a:ce:
3c:b5:a7:40:5c:76:8e:bd:fe:c6:f2:1e:03:7c:1e:
ee:3e:2f:27:6a:5b:33:cd:ef:f7:bf:17:ed:fc:99:
9c:64:8e:29:3c:71:22:ac:b6:e1:ae:40:dc:c5:4b:
33:17:7c:38:ec:a4:c5:9a:37:58:d1:34:5e:67:f3:
6d:2d:5b:a1:73:d7:ba:8d:f7:62:65:e8:e3:57:09:
58:2c:bc:81:b4:0b:28:e8:f7:d7:b1:c6:6d:74:dd:
89:c9:0b:8f:9c:1d:24:7d:b3:9f:85:dd:98:9d:cc:
81:e1:a2:59:79:e9:6e:51:98:3b:64:62:ad:5e:82:
08:ab:6f:57:88:18:f1:4c:ed:ed:89:b6:71:cb:dd:
dd:93:ed:61:fa:0c:e3:7d:a3:c4:3b:99:b0:ea:c2:
7f:ed:34:20:97:48:37:66:ec:e6:08:bd:5a:89:f1:
1e:57:de:89:40:27:96:84:17:2a:8c:e5:99:d0:3e:
ed:63:5b:59:88:d1:e8:39:d6:aa:3b:df:0e:8a:55:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:41:6B:5C:B8:38:8E:FC:E3:DF:2F:14:BE:B2:66:C2:55:29:92
X509v3 Authority Key Identifier:
keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:aa:ac:c9:3a:ac:26:e6:5b:42:07:d4:1b:57:55:6b:dd:
b4:16:04:df:a9:14:07:8d:88:72:1d:89:5c:27:2f:ad:aa:b6:
30:45:50:db:a6:dd:f7:0b:2a:5a:dc:a9:0a:33:30:29:e8:79:
be:a6:0a:ef:4a:4e:9d:ee:19:d6:d1:a7:eb:4d:d1:11:3c:99:
0d:65:88:16:fb:cb:83:87:5c:8e:cf:d2:26:f7:4c:2c:7c:27:
f6:93:48:f2:ef:e7:71:b0:3f:9b:ff:d6:a1:6f:00:e8:1f:e2:
01:95:9e:ab:02:d6:94:82:aa:c2:ea:38:d4:41:f3:5d:d1:a8:
28:26:6d:e7:72:48:c4:b5:aa:ab:1d:9c:2d:fc:85:2a:4d:c4:
02:f9:18:c8:cd:62:63:3d:24:3c:31:a3:31:a5:c5:73:34:c7:
78:bc:0c:7e:ce:de:74:d8:00:21:66:17:2d:3c:51:1c:4d:71:
d2:cf:0f:6a:12:cc:cd:b3:57:b5:23:07:ba:41:e0:dc:97:e4:
d3:55:d1:8e:8e:be:f4:81:89:8f:8c:ae:7d:27:a9:de:e9:a5:
b1:c3:20:e7:43:e9:e1:5e:61:5e:3f:f9:71:e3:d2:8e:42:c5:
75:3c:bd:df:56:9a:dc:70:7b:c2:83:a8:a8:ef:8e:25:32:f9:
7e:b0:a3:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU4MDYxMTAvBgNVBAUTKDkxNDZCNzgyRUI4MjQ2N0IxOUQ4QjQxRDFDQzQwRUJG
MDQ4OTkwNjYwHhcNMjYwMzI3MDUxMjEyWhcNMjYwNDAzMDUxMjEyWjAYMRYwFAYD
VQQDEw02OWM2MTFhYy00YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkyumQgK7KV4MigDA6WpoIwzPSomOtn7PR4TJQevQe+B6uJmWJBiIOk5Xq6N5
Ce0WlXb+TPln83UwSs48tadAXHaOvf7G8h4DfB7uPi8nalszze/3vxft/JmcZI4p
PHEirLbhrkDcxUszF3w47KTFmjdY0TReZ/NtLVuhc9e6jfdiZejjVwlYLLyBtAso
6PfXscZtdN2JyQuPnB0kfbOfhd2YncyB4aJZeeluUZg7ZGKtXoIIq29XiBjxTO3t
ibZxy93dk+1h+gzjfaPEO5mw6sJ/7TQgl0g3ZuzmCL1aifEeV96JQCeWhBcqjOWZ
0D7tY1tZiNHoOdaqO98OilV0KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbNQWtc
uDiO/OPfLxS+smbCVSmSMB8GA1UdIwQYMBaAFJFGt4LrgkZ7Gdi0HRzEDr8EiZBm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9EMEM1RjRFMjZF
OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Juc1oyTFFkSE1RT3Z3U0pr
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTgwNi9EMEM1RjRFMjZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Ju
c1oyTFFkSE1RT3Z3U0prR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiOuqrMk6rCbmW0IH1BtXVWvdtBYE36kUB42Ich2JXCcvraq2MEVQ26bd9wsq
WtypCjMwKeh5vqYK70pOne4Z1tGn603RETyZDWWIFvvLg4dcjs/SJvdMLHwn9pNI
8u/ncbA/m//WoW8A6B/iAZWeqwLWlIKqwuo41EHzXdGoKCZt53JIxLWqqx2cLfyF
Kk3EAvkYyM1iYz0kPDGjMaXFczTHeLwMfs7edNgAIWYXLTxRHE1x0s8PahLMzbNX
tSMHukHg3Jfk01XRjo6+9IGJj4yufSep3umlscMg50Pp4V5hXj/5cePSjkLFdTy9
31aa3HB7woOoqO+OJTL5frCjEQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:13 2026 by rpki-client