
$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json)
Hash identifier: uwf6rQgjbE+xELGYUAE0xwy3TRlAta8uaxR20dtuIHc=
Subject key identifier: 64:B0:1B:7D:1E:37:B1:AD:5E:02:9D:77:A3:59:CF:E4:10:26:3C:44
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 3550
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
Manifest number: 353C
Signing time: Thu 26 Mar 2026 14:23:37 +0000
Manifest this update: Thu 26 Mar 2026 14:23:37 +0000
Manifest next update: Thu 02 Apr 2026 14:23:37 +0000
Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: aRP5QuCHBoQNcnumfbC1wA6SMsEGMEjrkIMbtJFNiGA=)
2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: 3W4AiNrrj2kArnRpgqwuIaUDi20UJ9Jgfp+kFDwU8cQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13648 (0x3550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Mar 26 14:23:37 2026 GMT
Not After : Apr 2 14:23:37 2026 GMT
Subject: CN=69c54169-2d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:71:e0:b9:94:c8:91:1c:b0:0c:3b:ee:c5:
f8:ae:aa:b1:47:08:de:60:6d:d7:7a:71:9d:91:c6:
95:de:c2:8e:e3:35:47:44:66:84:cc:07:c4:51:e6:
ad:b9:27:15:d2:3a:28:0a:b8:2d:39:8a:2c:a5:66:
d4:1e:52:25:1c:b1:56:18:fa:50:d1:16:6e:da:47:
46:e8:f4:7b:d7:46:06:94:84:91:87:87:27:6a:fc:
25:75:06:3f:9f:67:f0:ad:c5:40:0a:e9:29:4c:96:
b1:84:67:c6:2e:8e:0a:2a:a8:4e:0a:41:f1:81:ea:
b5:5e:58:81:aa:21:33:88:6f:77:e2:d8:42:39:1d:
61:5c:00:a3:c3:00:45:3d:28:5e:34:8b:fa:39:f3:
1e:4f:c4:1c:21:41:3d:9d:81:57:4f:ae:ff:bb:0e:
5c:52:4f:7d:00:ec:8c:00:d0:d0:79:cf:eb:cd:b1:
3e:9d:a2:2d:5f:70:22:27:f0:98:29:09:11:b8:a1:
68:27:5e:04:1b:eb:e4:43:2a:9a:d0:60:b2:f8:3d:
e1:a2:20:f1:a8:6d:83:c5:70:10:7d:e5:e1:d3:f0:
8e:92:17:1c:bc:e4:35:53:2b:60:dc:9d:1e:7b:e4:
f4:be:bf:a3:0b:c6:c3:e9:59:a5:70:94:72:44:e5:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:1B:7D:1E:37:B1:AD:5E:02:9D:77:A3:59:CF:E4:10:26:3C:44
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:4b:33:01:38:7e:5a:d2:b8:ca:ce:e4:64:71:03:6b:56:ea:
49:87:fc:ad:d9:3a:a4:58:b0:f3:f2:90:e2:20:d3:10:f3:f0:
a5:9c:c5:48:9c:1f:d3:b9:93:53:d9:96:89:bd:f2:3f:59:71:
f0:ba:ca:85:a7:2a:9a:02:f3:31:e8:00:25:3b:16:bf:ec:ac:
85:6d:89:0f:fc:53:28:09:82:f6:f1:eb:c4:41:e5:86:37:cb:
72:58:e9:1c:90:73:4d:91:f5:3c:e7:73:b9:a9:e6:ab:ce:57:
20:e4:ea:20:ff:dc:9f:38:dd:48:f0:96:91:ee:a4:23:20:c7:
7d:97:a8:a7:bb:ab:f7:4f:c7:fd:b4:1a:0e:3c:b2:1b:08:9f:
f5:a9:4f:50:b5:90:e3:d0:3f:cb:17:4b:c8:f6:1e:9c:d5:47:
87:42:d5:7f:f0:03:dd:21:75:d2:15:37:ab:dc:f5:d8:6d:b3:
15:d6:ab:60:53:b3:02:ba:40:fa:80:fc:3f:50:53:3b:c1:55:
ca:66:f1:76:ff:bc:28:a4:0e:db:3f:9f:05:78:9f:a4:22:c3:
26:4a:f8:af:48:0c:f7:a4:11:5d:3e:bf:f7:8b:61:e6:25:59:
ed:99:94:b1:c7:ab:ee:40:8e:ba:d0:a3:cd:7a:d3:d6:a9:b6:
ae:6f:8a:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIyNUQxMTAvBgNVBAUTKEZGRTJBMDM3MjlGMzJEMzIyMjdBOTlDOTI1MTU4Qzgy
Q0E1NEI5NTcwHhcNMjYwMzI2MTQyMzM3WhcNMjYwNDAyMTQyMzM3WjAYMRYwFAYD
VQQDEw02OWM1NDE2OS0yZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8Nx4LmUyJEcsAw77sX4rqqxRwjeYG3XenGdkcaV3sKO4zVHRGaEzAfEUeat
uScV0jooCrgtOYospWbUHlIlHLFWGPpQ0RZu2kdG6PR710YGlISRh4cnavwldQY/
n2fwrcVACukpTJaxhGfGLo4KKqhOCkHxgeq1XliBqiEziG934thCOR1hXACjwwBF
PSheNIv6OfMeT8QcIUE9nYFXT67/uw5cUk99AOyMANDQec/rzbE+naItX3AiJ/CY
KQkRuKFoJ14EG+vkQyqa0GCy+D3hoiDxqG2DxXAQfeXh0/COkhccvOQ1Uytg3J0e
e+T0vr+jC8bD6VmlcJRyROXnzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSwG30e
N7GtXgKdd6NZz+QQJjxEMB8GA1UdIwQYMBaAFP/ioDcp8y0yInqZySUVjILKVLlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjI1RC8xRjU1MDgzMDFE
ODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxUSWllcG5KSlJXTWdzcFV1
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18tS2dOeW56TFRJaWVwbkpKUldNZ3NwVXVWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjI1RC8xRjU1MDgzMDFEODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxU
SWllcG5KSlJXTWdzcFV1VmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg0szATh+WtK4ys7kZHEDa1bqSYf8rdk6pFiw8/KQ4iDTEPPwpZzFSJwf07mT
U9mWib3yP1lx8LrKhacqmgLzMegAJTsWv+yshW2JD/xTKAmC9vHrxEHlhjfLcljp
HJBzTZH1POdzuanmq85XIOTqIP/cnzjdSPCWke6kIyDHfZeop7ur90/H/bQaDjyy
Gwif9alPULWQ49A/yxdLyPYenNVHh0LVf/AD3SF10hU3q9z12G2zFdarYFOzArpA
+oD8P1BTO8FVymbxdv+8KKQO2z+fBXifpCLDJkr4r0gM96QRXT6/94th5iVZ7ZmU
scer7kCOutCjzXrT1qm2rm+KQw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:47 2026 by rpki-client