
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json)
Hash identifier: PfHnRpYJxHmwsUoBNvUd96L9we7X+ZAlheFzmPEnMU4=
Subject key identifier: D6:22:BC:75:B9:DB:AC:50:2A:11:37:B7:37:8B:63:93:B2:70:CD:B8
Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Certificate serial: 0325
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
Manifest number: 0325
Signing time: Wed 13 May 2026 01:14:07 +0000
Manifest this update: Wed 13 May 2026 01:14:06 +0000
Manifest next update: Wed 20 May 2026 01:14:06 +0000
Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: mMRSUM5JJZvqerswlpVV9KyATTamQkhGVMrPSi9ukzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Validity
Not Before: May 13 01:14:06 2026 GMT
Not After : May 20 01:14:06 2026 GMT
Subject: CN=6a03d05e-bbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:ff:2a:4a:e8:c6:d6:e8:51:52:63:81:ef:
4c:5a:9b:dc:c2:71:2c:c4:41:fe:15:65:2d:90:55:
db:32:47:66:f0:33:db:4a:5a:02:6e:13:59:ce:d4:
2e:f4:0d:0d:c2:4f:35:aa:fb:40:9e:f2:e4:f0:11:
d8:8f:ee:a0:d8:1b:c1:06:ee:19:e8:9d:fa:72:41:
f7:9a:94:c5:48:c0:36:fa:f1:41:6d:a9:9d:0a:32:
2f:14:e7:66:99:46:94:94:98:59:79:05:46:07:3b:
37:6b:0e:4f:e9:8f:de:29:45:ce:36:4d:01:73:97:
24:68:8e:52:aa:75:8e:9c:5b:ef:90:63:57:ee:1f:
88:9b:fa:b2:48:12:c9:12:0a:0e:0a:ed:7d:6c:0a:
0b:71:22:f3:73:64:02:91:60:b1:9f:48:95:a6:06:
9c:1b:6a:c7:8b:73:bb:4c:cc:5b:6a:95:c8:4d:70:
ef:91:18:56:5f:4c:2e:6b:d3:be:65:40:5c:01:e5:
ae:66:76:65:5b:61:52:40:8b:72:87:63:3e:4f:5a:
37:76:01:ab:39:c4:91:e5:22:08:cb:9c:ae:57:3e:
ee:eb:ce:e3:63:9f:73:62:46:dc:c2:1e:05:cd:c5:
c4:74:f3:f2:c2:13:a0:bf:ad:d7:87:13:0d:35:a3:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:BC:75:B9:DB:AC:50:2A:11:37:B7:37:8B:63:93:B2:70:CD:B8
X509v3 Authority Key Identifier:
keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:23:00:66:25:8e:64:68:5a:5d:55:59:4f:cc:5f:23:69:
1b:3b:b0:54:1f:9b:93:e0:e2:d6:1d:ed:a0:ad:e1:a6:f8:91:
f5:a3:61:6e:75:72:94:e6:96:f8:8e:8e:90:09:b5:23:f7:20:
0f:06:93:73:9e:85:e2:38:c0:6e:42:78:70:0f:7f:df:04:49:
88:d1:b8:c7:02:ae:66:52:65:bb:0c:30:3d:18:73:c3:95:5b:
6c:e6:33:b7:48:74:a6:f9:80:4d:ce:36:87:ee:bb:8c:70:4e:
74:5b:05:4d:a7:12:b7:df:52:5a:91:a4:ab:b4:3b:2b:c4:40:
47:0f:9c:c1:ed:e0:c3:d4:4e:1b:cd:3c:d4:29:fd:d5:7e:b8:
31:75:74:9c:fd:f0:9e:d6:0c:11:9a:54:bb:01:a3:05:9d:5d:
1f:2c:ce:c8:92:87:5b:ad:fc:9c:6b:08:f8:c9:01:2b:d3:24:
9e:c1:5a:d8:0f:72:fa:30:68:27:ad:86:d8:4e:42:ad:0e:0b:
6e:bb:e3:a9:7e:a8:36:6b:a0:2b:b2:22:ce:69:f5:3f:17:99:
06:09:d6:5d:1f:ea:d3:1e:4f:44:b1:fa:07:4c:40:be:fa:33:
c3:9e:df:c0:05:64:20:ac:05:a2:f4:c8:60:bc:e0:c4:eb:fd:
34:1d:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:19:00 2026 by rpki-client