
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json)
Hash identifier: VRRO1sYt6t6WZRfE/u5f8QJZmDEVylRShUt37zwfE1U=
Subject key identifier: FB:D7:E7:12:70:41:47:12:1A:4C:A7:DD:1F:E4:DF:B5:59:51:C3:D6
Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
Manifest number: 7C
Signing time: Wed 13 May 2026 07:51:06 +0000
Manifest this update: Wed 13 May 2026 07:51:05 +0000
Manifest next update: Wed 20 May 2026 07:51:05 +0000
Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: 6Kj3WwNRAtHNhXpVtGbcZfoidlR0JsPD1Scpjt1Ykvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Validity
Not Before: May 13 07:51:05 2026 GMT
Not After : May 20 07:51:05 2026 GMT
Subject: CN=6a042d6a-2493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:a9:63:0b:d5:ed:a8:3c:16:41:e8:b0:ba:
de:11:df:68:f8:db:87:a8:d6:7e:b1:17:50:d3:51:
b1:28:49:45:e7:88:2b:72:b5:cc:c2:de:87:76:8a:
3e:da:b6:76:45:80:ab:e7:e3:4a:1d:b7:f8:03:fb:
da:e4:08:7f:f2:ea:c5:7e:41:95:9d:a7:9f:02:26:
79:a7:28:e3:34:44:c6:ad:39:d1:61:c1:f5:26:ae:
06:f3:98:2d:08:d6:74:16:76:3d:b8:e0:91:17:2d:
18:5e:fa:d7:8f:4a:03:f7:70:27:57:00:42:08:07:
e9:68:f2:69:7c:36:46:ea:f4:c0:d0:f1:43:a6:c1:
79:5b:8b:5e:c0:ae:21:ee:f5:0a:fc:e6:28:6b:12:
d7:ee:72:f0:5a:e9:1c:37:8c:b5:f1:ce:90:c2:02:
30:9a:ae:58:37:a3:e3:76:04:aa:f2:6d:a0:dd:3c:
00:b4:c2:03:2d:ea:32:e6:ea:98:35:0a:cb:c1:31:
86:02:b5:62:73:16:c7:d8:57:32:b5:aa:4b:e4:fb:
ea:97:4a:7e:8e:01:dc:c2:3a:d1:28:d8:f9:c6:d0:
2c:29:f1:85:90:64:18:ae:c9:e9:70:2d:1c:2e:ef:
36:d2:2f:a7:ce:fb:46:eb:0e:09:01:de:b2:cd:f0:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D7:E7:12:70:41:47:12:1A:4C:A7:DD:1F:E4:DF:B5:59:51:C3:D6
X509v3 Authority Key Identifier:
keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cd:50:56:26:6a:ac:0e:9c:13:02:dd:e5:db:0e:4f:f7:30:
48:1e:cc:a4:22:25:57:d9:81:8b:78:d0:13:8b:6c:6c:a9:a5:
52:68:e7:c0:35:2e:05:d5:4e:a5:88:f6:2c:a0:2c:5b:0b:9e:
04:3a:17:76:b8:a1:38:29:b5:f1:09:6f:15:7a:6b:8c:ab:a1:
0d:27:4c:13:b3:db:40:ee:6b:27:2b:09:11:5a:4c:68:8f:fd:
48:11:1c:2d:15:c3:61:0e:a6:c9:b5:d9:24:7b:10:5a:08:97:
46:6c:b0:a0:78:10:56:84:13:c3:f3:1b:79:2c:44:f1:30:2d:
95:65:95:64:b5:4e:64:28:19:84:7c:61:8f:cb:63:8e:7d:dd:
48:ed:79:dd:d0:8e:35:9b:f3:8a:84:f7:2f:e7:a1:8f:84:94:
05:75:7f:9f:69:4b:62:5d:d9:8c:96:75:a4:89:9e:65:6e:16:
8d:d1:53:af:a8:7d:cd:f9:14:ed:63:58:e9:dc:ac:71:2b:a8:
10:ac:68:3a:d6:2b:95:35:96:1a:32:14:e9:e3:c9:f8:ba:33:
ae:fb:3b:83:e4:ae:f2:23:0f:03:d0:37:4a:b1:9c:e8:3a:e2:
75:25:78:9b:7c:04:55:c3:df:07:31:bc:3b:d6:e5:0a:18:31:
7a:87:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:47:35 2026 by rpki-client