
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json)
Hash identifier: LdNauyScXg6yGN6Agzsm34akDcApZwTh4a56wz4msmc=
Subject key identifier: A4:E2:B4:A1:36:0F:B2:CE:88:49:B9:11:DA:E5:8A:E4:9C:65:14:99
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 35BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
Manifest number: 35A8
Signing time: Mon 12 Oct 2026 14:24:32 +0000
Manifest this update: Mon 12 Oct 2026 14:24:31 +0000
Manifest next update: Mon 19 Oct 2026 14:24:31 +0000
Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: mSLzcYKc4ZYeojvvPsR9jLZw8Z7Ubk0o8PCPb8spxeI=)
2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: oVwBBdf2MoqEQJnLpO/RZy7KNjQCvi9PCorLcBRov58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 14:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13758 (0x35be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Oct 12 14:24:31 2026 GMT
Not After : Oct 19 14:24:31 2026 GMT
Subject: CN=6acceda0-1e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:8f:10:59:af:53:86:92:cc:f2:7a:ca:81:
16:45:01:0f:d9:52:f5:6f:a5:bb:23:71:0f:4b:d1:
6b:2b:07:96:97:13:bb:c6:42:d7:1a:cc:bc:e4:7f:
dd:ec:2e:b4:7d:cb:d3:bd:c5:33:34:e3:72:4d:15:
64:8d:65:47:98:c8:e5:9d:f8:10:30:b1:a0:5b:bb:
cc:29:b5:02:05:e8:6f:f0:a5:fa:54:49:2b:83:3d:
90:f4:e6:20:70:97:c5:f1:8d:52:02:a1:7c:5d:79:
76:65:e4:66:db:13:7b:93:01:19:ab:05:0a:99:f7:
59:5f:c9:bd:ae:ef:8e:8a:5e:58:26:e9:50:9d:90:
78:af:90:63:7f:b8:99:80:a5:30:d5:06:3c:0f:ff:
76:83:0f:f0:fd:9d:98:81:03:a5:6d:23:4f:55:13:
14:94:4f:39:62:c4:b2:82:21:ef:99:28:b9:8b:2a:
99:c8:88:a0:1a:73:1f:f6:bd:f8:5c:67:88:cb:21:
a4:a4:e8:ac:41:a8:55:32:59:16:56:48:25:00:17:
24:d4:df:2e:55:fc:6f:d9:7c:9c:db:61:56:6e:8c:
56:56:ea:f3:48:a8:95:c4:74:0b:21:bb:e1:2c:be:
de:d1:db:78:a3:f7:a1:51:f8:82:83:0d:b9:b0:99:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:B4:A1:36:0F:B2:CE:88:49:B9:11:DA:E5:8A:E4:9C:65:14:99
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e4:6c:11:67:00:a2:de:81:7d:f9:68:0e:af:96:da:e3:e8:
7e:10:04:c0:92:41:ab:1c:b8:05:0c:3f:2c:7d:e0:7e:22:ff:
37:3e:48:e8:82:31:fc:76:d4:8a:3b:39:ac:99:f7:ac:ec:dd:
65:d6:16:20:57:ce:28:2b:3e:03:d7:99:ea:ce:58:e8:85:b1:
a2:f0:52:33:ec:86:eb:d7:6a:b7:01:e6:40:44:94:16:04:48:
ad:62:8a:df:36:47:1d:77:80:79:42:38:95:af:a7:ab:40:e7:
df:bc:a2:9f:15:5c:cb:90:ae:d1:93:b3:52:90:be:a2:85:9f:
25:03:54:0a:d8:cd:5e:ab:8c:ba:47:9a:1a:92:ab:6e:d5:cf:
02:b6:ce:f8:fb:0a:af:62:88:90:4f:e0:bb:e3:a4:8b:47:5d:
d3:1a:33:a5:bb:0a:8e:fc:00:41:46:ce:ae:5f:70:db:fa:7f:
d0:a4:1b:88:5b:d1:41:6b:aa:a2:a6:a3:58:e5:b0:a6:4a:93:
a6:6a:30:c1:90:20:f2:24:39:13:77:f0:20:ce:a3:84:6f:23:
34:3d:c5:b3:6c:ae:1c:4f:b6:a2:d8:b6:36:2a:28:83:99:53:
3e:5c:b2:93:e5:1c:40:38:6b:98:28:ab:e4:df:ef:96:b2:73:
5e:41:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:22:15 2026 by rpki-client