
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier: 7Tc4QQn7+Fceq54dKz6Su6FxSQq+32DRvAOs+O5BDl8=
Subject key identifier: C1:D9:2A:E7:D2:A5:58:F6:62:E0:71:14:B0:7C:B3:6A:9A:16:63:36
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 0749
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number: 0720
Signing time: Sun 04 Oct 2026 22:08:22 +0000
Manifest this update: Sun 04 Oct 2026 22:08:22 +0000
Manifest next update: Sun 11 Oct 2026 22:08:22 +0000
Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: 6ANJaEG5jXmTf6G1Qw+ODd8UbLPimAcsV4YsEzmmKPw=)
2: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: WXVlUOyzkeWPzzhrZIomqjgaV1ZguxykDFw7LzZvm8o=)
3: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: ztA1AuZ4BQqgfUQti87Mu8/rVRVBv0z6I/y7sZMhknQ=)
4: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: DhlpMOxeerbam0Ebreh2cRbDaMP2SQsnadCF8Us5sL4=)
5: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: VfrfnykE97GgaY0zRE1Dz7s8bBRf2eI3Tb8yh05ip+M=)
6: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: 8pde81MDcdkJU9eGQjEY56q793Xs+y72zgiO1W6XgWY=)
7: 68219776A41311EBBF911855C4F9AE02.roa (hash: fKg8ntxQpUWIysk2hR9+QrUacflT95hyt+BE5Ct5DAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Oct 4 22:08:22 2026 GMT
Not After : Oct 11 22:08:22 2026 GMT
Subject: CN=6ac2ce56-b883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:00:8f:3e:8e:d9:a8:a9:09:51:a6:98:e5:
d7:57:a7:fc:5d:e6:fd:79:d4:41:7a:48:52:8e:f8:
bd:bf:ba:f0:2f:67:c8:7a:65:ef:ef:43:d2:a4:75:
87:2d:42:f7:10:04:ce:d4:40:e2:28:a0:aa:40:4c:
46:ad:1c:d3:5b:43:64:23:75:59:98:45:77:06:c8:
2d:bf:23:1b:80:24:4b:48:8f:c0:3f:25:0b:55:59:
3b:7f:ed:ed:dc:3e:f5:02:0f:47:da:bf:57:01:f3:
d0:10:55:0b:05:6c:67:e3:93:6c:4a:ca:c8:3b:7e:
7f:60:ef:d0:b2:05:c6:a9:ee:68:80:91:48:80:5e:
c1:e7:55:2d:2b:65:d2:e7:2c:4c:0c:06:b4:e7:7e:
6f:27:5d:da:b3:5c:1b:ec:9e:de:80:24:77:b7:b0:
0f:04:ab:8f:e8:67:d9:e7:ad:41:ec:16:27:ed:02:
da:ec:99:55:7e:3c:ee:26:3e:42:76:62:3b:9d:7c:
23:33:74:85:76:d8:0c:b2:87:67:b6:06:c2:a5:73:
d8:dd:e5:71:1f:05:0c:33:23:49:02:46:1f:f1:b1:
02:cf:99:ff:88:73:72:ae:07:93:b9:13:98:bd:04:
15:d7:7a:0e:c3:b9:08:0c:4c:db:ba:dd:c9:6f:ed:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:2A:E7:D2:A5:58:F6:62:E0:71:14:B0:7C:B3:6A:9A:16:63:36
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:5b:1b:2d:bd:37:e1:09:c9:88:9f:30:a6:04:1e:f4:56:
01:92:f6:dc:d3:4c:17:97:ca:80:2d:35:e3:d2:bb:1c:84:3d:
98:9a:a0:59:5f:7d:7b:bd:6c:af:7a:ff:43:1b:19:15:b5:5b:
df:2a:8b:04:ac:74:c9:58:08:71:f0:29:09:72:53:f1:9f:7e:
ed:81:89:0e:31:a0:94:fc:59:b9:60:ef:97:db:20:33:fc:4d:
b7:b5:cf:3c:a7:63:4d:d8:34:6f:80:48:d0:55:e2:95:2e:8a:
94:9d:62:d4:9d:e1:05:cb:a3:ac:0b:e0:a6:6d:d0:84:b6:3e:
28:cf:57:2d:3e:83:28:4a:25:39:33:bf:7d:8e:fa:ed:dd:ab:
a7:86:0c:93:96:70:7e:84:45:d1:8b:fa:d3:28:c8:ec:f9:a0:
de:b7:66:ae:3b:19:0d:03:ec:39:55:52:c8:91:77:67:4b:0e:
a1:84:a8:02:c6:c3:28:4c:4e:c6:e7:5e:9b:8b:1e:dc:33:44:
a5:17:dd:e7:fd:04:25:1b:eb:a0:fa:2b:15:1f:47:4f:3c:57:
ef:f8:ee:bc:30:12:62:2f:e6:6e:47:98:37:e2:ec:db:c1:0c:
86:10:6b:3c:b4:1a:63:20:ef:6b:07:2d:8f:40:67:43:16:dd:
51:9d:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:20:55 2026 by rpki-client