
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json)
Hash identifier: XzTls3qhBpi8pzF71NyZmD9wu7b9Jj9/uD7FymZNZYo=
Subject key identifier: 4A:84:83:AE:74:13:93:C8:BF:23:4F:2F:34:EE:83:39:4B:21:22:1D
Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33
Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
Manifest number: B7
Signing time: Wed 13 May 2026 07:21:02 +0000
Manifest this update: Wed 13 May 2026 07:21:01 +0000
Manifest next update: Wed 20 May 2026 07:21:01 +0000
Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: m+l2JQJ7dur80myuLfq/3i3Uk6hoJXljc/ts+NXAY8c=)
2: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=)
3: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl
rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933
Validity
Not Before: May 13 07:21:01 2026 GMT
Not After : May 20 07:21:01 2026 GMT
Subject: CN=6a04265e-9c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:bd:f8:89:b2:9b:06:11:5a:bd:ca:be:bb:
cd:a7:2a:e6:1e:e5:b7:d4:99:75:74:32:d1:ea:96:
49:d2:5d:63:9b:b2:63:00:a1:36:b7:a6:92:a9:ae:
e2:b9:ca:d8:f9:4c:f4:c5:92:f6:4d:10:e7:76:a7:
2f:89:2c:c7:bf:f9:7c:cc:0a:ae:08:19:ef:7d:ef:
0e:1e:60:03:c8:4c:70:62:b9:aa:8e:1d:a6:fb:9e:
de:01:ab:5d:e9:b7:c2:d7:6c:02:fd:2e:e5:3d:64:
1a:e8:14:4d:3c:6b:5c:cb:6f:74:de:53:47:67:01:
ea:b1:dc:2a:2e:0f:99:f8:e3:f9:5c:fd:73:fc:f1:
4b:9d:1f:9b:26:ad:1c:c0:b8:a9:48:ff:2e:17:fd:
89:97:9b:2d:26:f2:98:55:50:c5:72:54:52:f8:7e:
41:37:0a:da:af:5b:b7:a9:47:81:bf:ad:87:db:42:
f8:c1:a6:a1:b2:81:c0:a5:8f:57:24:69:5d:cd:02:
67:13:65:81:6e:43:8b:4f:f6:85:00:a1:63:3a:a4:
52:84:ab:70:ea:14:18:6c:06:40:d1:62:d0:3d:ec:
48:ea:e6:d7:0c:1c:9d:69:b1:b4:5d:cc:14:23:33:
2e:c6:7b:79:ca:50:2c:ce:a9:35:8d:ad:17:1c:4a:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:83:AE:74:13:93:C8:BF:23:4F:2F:34:EE:83:39:4B:21:22:1D
X509v3 Authority Key Identifier:
keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:66:69:f5:25:e9:be:00:84:d7:68:e2:85:2c:6c:e0:27:27:
6a:58:d6:5b:48:65:07:31:c3:4c:4c:08:85:f0:a0:53:e9:a7:
a5:ac:ef:a3:fb:bc:dd:26:af:6d:fb:c5:11:27:de:3f:93:27:
57:c5:67:90:cc:8e:15:72:80:dd:1a:73:4e:f9:f2:65:a7:df:
8d:86:79:8e:68:78:2d:6a:5a:e1:2f:55:61:1f:88:79:d6:21:
e6:19:ee:77:05:c2:cb:f6:f1:22:b9:cc:0d:a0:65:26:cb:4c:
bf:55:40:34:f0:74:3d:d4:fd:92:33:95:fa:68:2e:07:3d:2d:
e4:e4:27:cb:a1:9a:de:d4:62:4b:d2:1b:db:57:17:00:5f:38:
fe:f8:d8:55:1c:39:f7:1e:74:11:6f:8b:31:81:70:e7:d2:ea:
7c:93:e6:1e:55:82:08:4e:e7:29:be:dc:73:f1:7a:0a:9d:a5:
61:06:8d:f6:0a:c8:a4:bd:10:06:d2:12:68:ed:54:76:4b:c4:
7e:2e:c2:64:76:83:7c:57:b5:fa:b4:40:5c:41:19:09:d1:bc:
73:9b:8b:6e:f4:96:cf:36:65:dd:74:c6:48:5a:5d:68:c4:95:
b8:a2:7a:73:af:a9:97:48:5e:7c:ce:9c:47:86:3d:dd:fe:ef:
a5:e5:14:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx
NzZFQUU5MzMwHhcNMjYwNTEzMDcyMTAxWhcNMjYwNTIwMDcyMTAxWjAYMRYwFAYD
VQQDEw02YTA0MjY1ZS05YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQe9+ImymwYRWr3KvrvNpyrmHuW31Jl1dDLR6pZJ0l1jm7JjAKE2t6aSqa7i
ucrY+Uz0xZL2TRDndqcviSzHv/l8zAquCBnvfe8OHmADyExwYrmqjh2m+57eAatd
6bfC12wC/S7lPWQa6BRNPGtcy2903lNHZwHqsdwqLg+Z+OP5XP1z/PFLnR+bJq0c
wLipSP8uF/2Jl5stJvKYVVDFclRS+H5BNwrar1u3qUeBv62H20L4waahsoHApY9X
JGldzQJnE2WBbkOLT/aFAKFjOqRShKtw6hQYbAZA0WLQPexI6ubXDBydabG0XcwU
IzMuxnt5ylAszqk1ja0XHEq/+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqEg650
E5PIvyNPLzTugzlLISIdMB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx
NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB
LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsGZp9SXpvgCE12jihSxs4CcnaljWW0hlBzHDTEwIhfCgU+mnpazvo/u83Sav
bfvFESfeP5MnV8VnkMyOFXKA3RpzTvnyZaffjYZ5jmh4LWpa4S9VYR+IedYh5hnu
dwXCy/bxIrnMDaBlJstMv1VANPB0PdT9kjOV+mguBz0t5OQny6Ga3tRiS9Ib21cX
AF84/vjYVRw59x50EW+LMYFw59LqfJPmHlWCCE7nKb7cc/F6Cp2lYQaN9grIpL0Q
BtISaO1UdkvEfi7CZHaDfFe1+rRAXEEZCdG8c5uLbvSWzzZl3XTGSFpdaMSVuKJ6
c6+pl0hefM6cR4Y93f7vpeUUAw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:19:55 2026 by rpki-client