
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json)
Hash identifier: PMXoWni73LtqnpAnLu6A2cqkT4SwSEemkMbFqVABKb4=
Subject key identifier: 2A:0E:11:BC:84:0C:E3:B3:DA:E7:D6:9C:B9:47:54:C3:2E:46:5E:3C
Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
Manifest number: 63
Signing time: Wed 25 Mar 2026 07:14:08 +0000
Manifest this update: Wed 25 Mar 2026 07:14:07 +0000
Manifest next update: Wed 01 Apr 2026 07:14:07 +0000
Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: fPxhrRNoA2niZAA7yOrsAiT4M9ZcwNRM9KedfYqsaCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E
Validity
Not Before: Mar 25 07:14:07 2026 GMT
Not After : Apr 1 07:14:07 2026 GMT
Subject: CN=69c38b40-abc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:43:97:f7:55:2d:8d:3d:d2:e2:d0:17:c6:
fb:47:f2:0f:f3:37:99:3c:b4:d6:fe:f5:18:6e:07:
ec:ce:25:06:83:ef:a0:20:8a:2c:20:05:10:16:2a:
a0:12:ae:46:d8:99:0a:9b:85:83:f6:90:45:54:4c:
80:37:37:84:0d:6d:47:24:b4:c5:35:ed:99:d4:dd:
72:51:d0:94:a7:6f:d0:1d:68:d6:8d:2e:04:ca:f6:
8b:4c:5b:a8:c4:16:d1:2e:81:bb:38:54:33:e6:ac:
75:d8:e1:be:f4:45:c5:37:bc:0d:89:16:fa:e8:41:
18:f2:ee:a0:3d:9a:a9:69:f2:fd:76:97:57:6f:5a:
2e:28:d5:4d:95:3d:2e:48:f8:35:42:88:bc:94:ce:
27:b8:cb:68:6d:92:b7:fc:3b:9e:01:51:62:2b:9a:
71:16:ff:b6:6d:26:a6:d0:35:b3:1d:e8:d1:e0:90:
21:65:51:15:84:94:36:7c:b7:8f:af:7b:b4:d2:17:
c0:6d:e5:8b:09:cc:be:f9:1a:8e:d1:ac:0e:5f:c7:
d9:58:61:15:1e:1a:af:13:af:02:94:32:c1:1f:eb:
cf:f7:3c:a0:28:f1:bf:5a:bf:2c:91:25:1f:3b:8b:
78:4b:e9:67:d8:af:29:01:db:40:cf:37:49:1e:97:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0E:11:BC:84:0C:E3:B3:DA:E7:D6:9C:B9:47:54:C3:2E:46:5E:3C
X509v3 Authority Key Identifier:
keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:39:ce:af:04:5f:bc:57:04:7e:98:c6:31:91:a7:a2:7e:14:
dd:a0:c4:54:e1:ae:6a:f3:91:ea:85:a7:dc:d6:95:9c:0f:8d:
87:14:53:7c:a7:6a:24:11:a8:11:c1:6c:e4:02:02:36:a1:60:
6e:d2:a2:be:64:7c:64:c4:57:41:f6:60:07:26:21:db:ce:46:
6c:6b:c8:dd:89:51:f6:6c:ad:93:0b:d8:8e:86:d4:64:1d:e1:
9f:b3:1f:fc:cb:9d:28:85:92:93:93:55:ae:2d:62:3e:1f:c5:
2f:86:e0:e1:40:5d:d5:a1:2f:0c:f3:56:ff:b7:b4:59:28:47:
c6:6c:3b:d8:bf:7a:30:e7:6f:67:30:be:84:64:d9:ef:cd:0e:
f6:e1:d8:77:f1:71:34:ff:63:e1:3d:11:63:f5:7d:12:ba:7d:
6f:84:2f:d4:67:d6:97:a2:e2:14:af:92:c5:d3:b8:e6:86:78:
9b:16:7b:79:74:26:c0:66:d4:27:ef:f1:88:a6:33:47:c8:1b:
5a:1a:9c:2b:85:11:79:18:1d:9e:4a:0a:ac:68:17:bd:ed:d5:
ee:03:bc:7e:42:9f:d9:65:13:aa:7a:ed:ed:48:cb:28:1a:30:
9f:ea:eb:49:1c:fb:d2:3f:00:bb:33:3b:fe:56:0e:2b:93:52:
78:e4:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:08 2026 by rpki-client