
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier: 9YY7O4Wmt7NWSwK0yNQiU3AxHsRYw9/2xBKwCZ3Bi8I=
Subject key identifier: 77:7D:11:F0:4F:51:97:7E:4B:51:4C:C8:E8:47:44:4C:21:CD:00:B9
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number: 06BB
Signing time: Tue 24 Mar 2026 22:04:46 +0000
Manifest this update: Tue 24 Mar 2026 22:04:45 +0000
Manifest next update: Tue 31 Mar 2026 22:04:45 +0000
Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: obat+JS6SmUK6FK3SilhpzH4BLUeqeprDao18yUKkI0=)
2: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: 1Z9LS41ng6fjPpTuu047cOJxnZNw575SVnm1zMIsT+k=)
3: 68219776A41311EBBF911855C4F9AE02.roa (hash: VjXHPuIwGHjxhTWLqkjCa7VDTT6rvVJHd6oJKd+W8yI=)
4: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: w4PVGKfxeERIvQHJMYDS31Ha+UPsN3eP0dVpold/msw=)
5: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: bhE8kPKbDhbjGGtK3dqK/PTW2f7OgPh1zprjpQ4GT6Q=)
6: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: GMAvWxN7LqaBOKvtkjWDIMlqwj7hC5qzX6WxN7KtnZg=)
7: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: j3y2MD2N/DYKUU8fqu1Wpt61itE0tbiREOOVu3Ycs5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Mar 24 22:04:45 2026 GMT
Not After : Mar 31 22:04:45 2026 GMT
Subject: CN=69c30a7e-6863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:5f:23:d4:76:3c:67:85:f0:be:9e:76:3f:
6a:97:67:7a:5f:19:de:d9:8f:bc:fb:da:06:cd:d7:
4d:73:1c:3f:bf:58:3f:60:55:ad:5b:07:ef:d0:07:
23:eb:e0:2f:2a:21:b0:c4:00:09:99:05:55:1e:db:
98:a0:a2:9f:7f:9c:43:23:12:29:56:f2:3f:2d:90:
98:0e:90:5f:5f:69:70:9e:68:70:91:61:50:07:23:
3b:c2:ae:4c:c6:db:c0:f0:7e:1f:07:ef:61:73:48:
77:49:4d:aa:9e:08:3b:18:45:ab:03:79:69:5a:55:
9b:78:58:5a:7b:84:24:e1:cc:e6:d5:d3:16:6d:d0:
a4:5a:0a:9b:aa:a7:e3:45:af:2b:fe:a9:35:d6:27:
59:2a:41:05:79:6d:94:90:86:e4:87:6e:42:4c:21:
8d:c3:86:8d:94:1e:a0:05:d0:7c:33:e3:6b:d9:9b:
ec:c2:4f:64:bd:94:ba:1d:3d:19:55:4d:34:2c:71:
04:f6:fb:23:36:b8:52:40:cf:ca:ba:0e:a8:ad:96:
95:67:78:5c:91:62:7c:c5:e3:88:45:17:45:11:fe:
4d:0c:a1:6e:c3:c7:3e:2f:39:5e:29:e1:2b:47:8b:
55:e1:6e:57:7f:9d:c0:9d:fe:9e:ae:27:90:6f:a4:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7D:11:F0:4F:51:97:7E:4B:51:4C:C8:E8:47:44:4C:21:CD:00:B9
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7a:15:b5:cd:c1:41:f2:94:ac:30:1c:c2:f3:a7:76:74:36:
60:18:a6:5c:d3:26:fa:4d:b2:8c:72:6d:43:c2:f4:75:57:f1:
14:18:78:df:f6:6a:6f:98:f3:5e:c1:a4:3a:b6:63:9f:b9:ee:
ae:96:87:e2:14:26:19:9b:98:48:6c:e1:ee:aa:bb:3a:94:7e:
ab:c7:ab:8e:04:4f:d4:85:d0:d7:20:dd:7f:01:2f:95:3f:28:
aa:c2:6b:fc:9a:bb:a5:a0:fa:fa:14:af:28:71:02:25:d4:42:
be:61:7d:fa:fd:bd:f1:75:de:6c:0d:3a:45:ea:38:8d:6a:1e:
33:5a:6b:e5:e8:f4:b6:f2:3c:17:e9:25:e7:32:a8:59:66:2a:
c9:e7:63:92:b1:b4:4d:1f:9c:e0:17:47:a5:32:b6:a2:a2:58:
1c:ac:2b:48:f2:d5:9e:6a:ae:dd:93:b4:75:d7:71:65:a0:60:
8a:62:2c:26:e1:73:67:3c:20:88:36:05:3d:dc:b7:aa:41:9c:
98:c7:0d:fa:c2:d2:2b:5b:d0:a3:0f:6c:08:81:79:85:15:74:
ab:b7:57:05:f4:4a:61:ce:32:85:23:ac:7b:1f:ad:69:4b:75:
79:af:54:fc:27:bb:46:4b:df:e9:46:44:b0:12:3b:98:ab:e0:
e5:41:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:21 2026 by rpki-client