
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
File: k-Wm1UXgDFaegN4yLrINV1d1BXU.mft (raw, json)
Hash identifier: pXlM6vGHYZfOtiu3jQIjkZqQCcjjwDSTtgbPfmmpnDo=
Subject key identifier: 38:85:ED:AC:A9:6A:D9:CB:18:7E:0A:66:8F:AC:D6:C3:6A:C0:0B:F4
Authority key identifier: 93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75
Certificate issuer: /CN=A9171A47/serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
Manifest number: 7C
Signing time: Wed 13 May 2026 07:54:14 +0000
Manifest this update: Wed 13 May 2026 07:54:14 +0000
Manifest next update: Wed 20 May 2026 07:54:14 +0000
Files and hashes: 1: k-Wm1UXgDFaegN4yLrINV1d1BXU.crl (hash: RR2h68DTPc5tqt5V6XB5EFRyQhiroQDHzR4rl+Gy0NI=)
2: 1805E4389DE011F0B44FDA76C4F9AE02.roa (hash: xUw+Uv9TI74Dhb2CGJETI5/wwvPlX2t3PbWQpNbjfhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl
rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A47, serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
Validity
Not Before: May 13 07:54:14 2026 GMT
Not After : May 20 07:54:14 2026 GMT
Subject: CN=6a042e26-db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:f7:36:08:80:c7:c5:b1:65:f1:ad:aa:15:
f5:63:a0:de:22:33:4d:f6:7c:91:df:58:a6:fb:c3:
34:fd:ec:b5:d2:6a:80:f5:32:bf:1e:30:25:ac:e9:
3e:09:86:ed:ea:e5:e0:91:6c:d4:6c:71:0b:9f:52:
3f:76:c7:5f:43:12:2f:62:e1:8a:c4:04:7e:e6:4f:
14:50:28:52:33:45:ce:62:06:bc:76:e3:9c:bb:a7:
f0:fe:eb:3f:13:c3:26:46:0f:bc:3b:8f:7b:6a:c8:
ca:2b:c7:53:49:80:fb:b3:d2:00:16:c4:39:aa:f7:
d0:17:b7:18:12:66:73:a8:58:a0:e0:5f:c7:d2:d3:
1a:e4:fb:1b:df:72:15:33:6b:6a:07:9d:53:e4:2c:
60:77:da:91:26:b1:83:64:31:1d:a5:33:52:04:05:
7e:d5:8c:45:8b:5d:a7:b2:81:38:65:85:bb:9e:28:
76:8d:ab:06:11:15:17:e7:f4:8b:7d:ed:87:5c:e6:
3f:a5:1c:90:57:70:f4:50:68:f8:04:ec:e5:fd:be:
f8:c2:4d:d1:cf:0a:71:6f:ec:50:0b:bc:82:b1:91:
19:54:2e:28:f1:14:7b:93:a7:6e:5c:dd:96:e3:53:
d3:a8:27:49:50:2c:39:84:52:dc:0e:6d:e9:28:f1:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:ED:AC:A9:6A:D9:CB:18:7E:0A:66:8F:AC:D6:C3:6A:C0:0B:F4
X509v3 Authority Key Identifier:
keyid:93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d4:49:15:bf:14:4f:69:38:d6:d5:80:2d:9c:f4:dd:cc:ab:
ba:e8:d9:be:9c:b4:44:13:43:37:e8:a8:c7:f7:12:9f:d9:f2:
cf:5e:0d:15:49:d9:c4:be:8d:4c:84:99:fd:20:22:ea:4d:26:
16:a4:15:8c:78:7f:55:25:1a:66:43:f2:dc:83:47:c1:4a:89:
e5:98:b3:f2:2f:58:93:8c:4e:06:ff:1b:c4:49:78:9b:39:5f:
b3:75:d4:f8:c0:4a:f5:39:11:2f:ef:a2:9e:af:36:fa:a6:3d:
fb:c5:45:e7:7b:75:68:88:13:f2:e4:5c:c0:73:da:15:fe:d1:
ce:3a:47:9a:90:40:62:2d:2b:90:46:c5:3d:31:d0:6f:8d:87:
a9:8b:92:c0:f6:b2:05:fa:34:d4:e5:3a:92:0c:69:5c:0f:e0:
ec:cd:ac:81:07:d3:cc:8b:0e:1d:23:c8:64:87:08:4a:0f:1b:
29:9c:a9:c5:0a:8e:32:07:3a:e6:f7:50:97:22:ba:68:d6:25:
48:95:f1:fd:16:89:06:9c:0d:2b:1f:38:02:04:7a:55:ab:77:
5c:69:72:15:a9:03:cc:d4:12:7c:35:8d:92:2f:b7:e1:8d:91:
81:60:30:2e:ff:60:bc:66:da:f6:e3:89:ee:79:52:0f:04:0c:
84:ad:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:31 2026 by rpki-client