
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json)
Hash identifier: yTO5/dgNCCGZMmzDMcl0IBqFOYKtdQADPW5XEE2AmMs=
Subject key identifier: 11:D9:DF:3F:70:22:FB:B0:35:F2:87:15:B9:24:D9:F3:5D:DC:85:B5
Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
Manifest number: 01CB
Signing time: Wed 13 May 2026 03:49:12 +0000
Manifest this update: Wed 13 May 2026 03:49:11 +0000
Manifest next update: Wed 20 May 2026 03:49:11 +0000
Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: 72KkuPHasvMYOBGeoKA+VKZ/GqrGoeQ3KmsdDm/JUcU=)
2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: R+cgAiGLFnxqgUaeTBzigI0telk5/iO6S+thcp6pkZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Validity
Not Before: May 13 03:49:11 2026 GMT
Not After : May 20 03:49:11 2026 GMT
Subject: CN=6a03f4b8-63e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:60:07:d9:a4:94:3c:3a:03:30:c9:bd:c5:
f3:b2:ce:32:23:0c:5e:d8:10:23:a7:36:86:f0:74:
cc:7c:c5:ef:b1:aa:36:20:7e:e6:6a:d9:9e:15:1b:
4a:6b:84:e9:29:56:b5:ae:f5:95:89:04:3f:18:b8:
d8:da:a5:ad:d6:ee:24:c9:cc:d7:cc:c9:ba:2c:3f:
64:74:57:14:31:49:fd:c2:1c:5a:52:a1:8a:29:53:
9b:1a:d1:84:59:f9:52:55:88:26:0a:b3:ff:fd:54:
3b:76:1b:13:46:f8:e5:bb:02:7a:9c:38:42:45:70:
d5:03:37:d4:0d:74:40:ea:54:fa:04:16:0f:c0:7f:
81:d7:2c:21:d3:c4:17:4d:0a:1d:33:e7:b2:8d:40:
c3:83:8f:a1:aa:d7:1c:72:94:67:31:ad:34:12:7c:
cb:9a:ce:e5:32:d8:c8:a6:0a:b8:76:9c:c1:a5:f1:
87:e8:6f:35:55:8a:db:05:7f:dd:f0:75:7e:84:71:
42:7a:73:36:ed:a5:6e:43:66:04:19:4e:58:62:9e:
9f:04:9e:5e:b5:21:ba:29:50:12:21:01:d3:d6:f9:
d2:d8:1a:87:5a:32:e2:25:fd:02:5a:88:0f:d6:b5:
ec:64:a1:99:0e:49:60:c2:c7:fa:f3:c7:12:7f:6c:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D9:DF:3F:70:22:FB:B0:35:F2:87:15:B9:24:D9:F3:5D:DC:85:B5
X509v3 Authority Key Identifier:
keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:0d:e8:97:96:d2:81:ca:a4:70:63:43:f9:d8:99:e8:71:00:
66:3a:73:63:5a:13:0e:d9:80:92:7a:d5:f1:73:2b:f0:83:f1:
16:fd:aa:c5:68:29:60:95:6b:4b:b3:12:b2:e8:4b:f1:03:ce:
5a:61:64:21:99:3c:97:65:81:d2:82:e9:72:30:5b:00:97:12:
21:aa:c4:c1:24:68:02:25:5f:07:84:33:c3:7d:f7:fb:3c:37:
1b:89:ed:38:99:c7:fe:42:ec:75:fc:2d:c8:fc:44:b1:25:b4:
ee:71:45:d7:82:7e:21:c6:93:12:59:e3:84:e9:5a:a9:6a:9a:
10:0a:f4:cd:c7:be:07:4d:78:16:77:13:92:0d:37:b1:e0:14:
6e:fa:95:bf:b4:fe:c5:d7:46:d8:a0:24:66:64:41:2e:cd:96:
93:e2:92:bc:c9:b4:77:60:d3:49:17:b2:5b:c2:26:a4:f7:07:
3d:9e:79:53:44:86:ea:a0:3c:d1:cd:24:de:99:43:d3:bb:67:
50:9f:fd:6c:e2:85:35:34:0e:ba:83:5b:f5:ad:d3:14:9f:da:
0e:f4:75:a4:24:b1:3b:36:2d:c3:ed:87:f2:14:d2:72:2a:0e:
3f:8a:b1:83:98:12:94:d6:e1:2f:96:c0:5e:0b:84:c0:3c:48:
bc:f4:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:58 2026 by rpki-client