
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier: 4C0cLErq79zhE3S8HQYnJN0Tp59hGecV179IT7eyOgs=
Subject key identifier: A6:22:A2:9D:90:76:52:0B:4A:00:B4:0B:2F:0F:89:49:BC:A3:A6:F7
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial: 063E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number: 0635
Signing time: Tue 24 Mar 2026 22:27:24 +0000
Manifest this update: Tue 24 Mar 2026 22:27:24 +0000
Manifest next update: Tue 31 Mar 2026 22:27:24 +0000
Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: HbioGrw5OueNnGnsjs2gYbZuSH9oDnjvowkQ8TWvZ7U=)
2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: 0NaFUot0pXR7DvCrYe8iswpOneCs4skyX98hr8n2MVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Validity
Not Before: Mar 24 22:27:24 2026 GMT
Not After : Mar 31 22:27:24 2026 GMT
Subject: CN=69c30fcc-e6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:9d:b7:d7:14:89:58:2c:e5:17:3a:69:59:
dd:d1:6f:3f:1f:15:20:2b:4c:7a:21:d8:13:22:a0:
e0:47:7b:51:f1:2e:98:47:9f:d1:2f:b9:54:51:66:
f6:23:30:bf:83:f2:00:5a:15:4e:bc:12:46:af:dd:
76:1b:fb:3d:9b:a0:94:46:d4:e0:98:cc:d4:13:4d:
9c:ff:aa:57:ce:e9:3a:9c:13:d0:8b:9c:5e:7d:5e:
84:b8:e7:a7:eb:f5:db:60:6c:55:27:81:a3:9f:96:
e9:11:7e:8a:33:5d:76:37:2e:96:82:75:bf:b0:04:
e5:bc:b4:5d:87:c0:8d:1e:01:60:0b:c9:df:43:f8:
6f:c4:bc:a0:3e:de:06:bf:f2:cb:81:9c:9b:5c:1a:
8e:03:3c:e2:48:33:a8:3e:be:51:1a:65:de:89:14:
16:4f:00:08:6f:2c:2a:b8:b2:df:8b:d0:e3:54:b1:
d2:70:6d:5f:58:c1:58:c3:94:a5:9a:99:af:5c:bf:
5f:fb:90:ef:ee:4c:05:ac:ed:ec:a3:d6:55:90:5b:
9e:de:df:36:ca:fd:76:4f:f1:bc:ed:6d:73:c5:35:
48:c6:97:51:29:aa:c1:01:0e:75:7f:46:b0:42:90:
a7:a0:1f:de:86:62:c0:87:cc:1d:b5:a5:68:a8:ce:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:A2:9D:90:76:52:0B:4A:00:B4:0B:2F:0F:89:49:BC:A3:A6:F7
X509v3 Authority Key Identifier:
keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:c2:e3:17:9e:e8:a9:26:eb:d4:b1:b0:d2:c3:aa:00:ef:66:
5d:81:96:e6:03:7d:fe:51:50:27:d3:c0:6e:06:c9:16:0d:0e:
9d:b4:7f:4e:41:3a:d1:68:0a:bf:4c:d2:ea:53:de:cd:e1:83:
1e:65:c0:87:66:fb:ff:93:05:8f:9e:fb:5b:ed:74:a4:06:5d:
8d:d1:77:51:21:5e:e7:e7:02:0e:ca:73:3d:ef:e0:15:bc:13:
f7:f4:c9:f2:e5:c6:33:f8:aa:8d:e4:d1:81:6c:80:ac:fa:10:
fd:36:a4:34:4f:b1:55:a1:93:04:0b:fe:5d:bb:30:5a:6b:92:
69:11:89:23:c0:06:63:a9:56:82:1b:61:6c:c1:a6:2c:01:4d:
4b:24:c1:30:8b:ed:aa:2c:dd:d4:be:84:30:48:44:d8:f8:03:
0c:b2:b6:c0:b2:59:a1:cb:e0:f2:00:c0:d0:ed:9c:25:ce:f0:
04:d0:cd:8e:e6:eb:54:39:d0:8e:68:d9:04:8f:0e:71:86:d5:
47:00:5e:1c:6c:f6:96:bc:7d:6f:bc:07:7c:b0:fe:3a:d2:66:
87:53:de:df:a1:9f:ce:94:c5:4a:d1:3a:e4:a9:90:a1:9d:f3:
cc:01:a8:90:b9:36:89:d6:f9:06:28:13:b6:39:74:9d:af:d3:
ab:1e:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:43 2026 by rpki-client