
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json)
Hash identifier: pHGV9z4ZWolczP64UsOwjIbxm7PB+iuzMPzIuuaM6ss=
Subject key identifier: F6:10:0A:A9:C7:FD:39:02:E7:CD:4E:2A:BA:B4:74:ED:21:F7:66:10
Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Certificate serial: 0657
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
Manifest number: 064E
Signing time: Tue 12 May 2026 22:46:40 +0000
Manifest this update: Tue 12 May 2026 22:46:39 +0000
Manifest next update: Tue 19 May 2026 22:46:39 +0000
Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: 9OHyKDGLSpXXv4LIU9iY4Ewg9Uhp/z/5im+v77a/zHU=)
2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: 0NaFUot0pXR7DvCrYe8iswpOneCs4skyX98hr8n2MVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08
Validity
Not Before: May 12 22:46:39 2026 GMT
Not After : May 19 22:46:39 2026 GMT
Subject: CN=6a03add0-5b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:eb:cb:2e:b3:f9:66:38:5d:1d:2b:fa:b3:
05:6c:ff:ac:8f:ab:ab:26:24:9b:89:13:74:d8:f0:
49:a4:7a:00:20:a9:a3:12:25:f7:15:93:f2:85:97:
f2:d3:f5:12:c1:13:05:87:aa:c9:29:c3:f4:08:61:
0d:c6:e3:4f:94:58:c0:7c:0b:9a:06:a0:3c:b0:3c:
b5:1c:7b:39:d8:12:9d:0c:eb:20:65:fb:64:aa:09:
e8:b4:98:37:e0:fc:66:a8:90:47:87:f3:de:61:08:
d6:8f:4d:a1:c0:16:eb:87:38:17:33:86:87:c0:c6:
ca:f2:88:e5:72:10:ab:47:70:54:1d:32:45:5d:da:
22:ae:33:41:b1:b2:a1:80:ce:3a:a3:ac:1d:56:48:
22:f8:96:83:fe:c1:d9:ef:ba:3c:7d:74:c9:7e:4c:
0f:9e:52:82:16:a9:31:67:28:7a:ff:20:2d:f3:26:
40:3b:57:b6:e9:90:64:0b:8c:8e:7d:6a:23:03:14:
bd:6a:6e:88:9a:44:cf:c5:d8:a8:c4:10:a8:24:0a:
d7:2e:c0:47:13:c5:c1:66:f0:6a:14:86:c0:86:2f:
e3:26:36:7c:1c:e4:cc:87:79:3f:22:47:7e:11:59:
7a:15:3b:62:54:44:f2:53:ff:2d:88:de:ec:03:b8:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:10:0A:A9:C7:FD:39:02:E7:CD:4E:2A:BA:B4:74:ED:21:F7:66:10
X509v3 Authority Key Identifier:
keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:f8:8b:e8:a9:bb:17:bc:21:de:5d:1a:99:e1:b9:bb:8a:9d:
b7:d3:2e:c7:15:6b:26:32:e0:f2:7e:55:8d:df:8b:5a:a2:41:
7b:95:b2:10:00:9a:61:b0:3c:6a:aa:83:6d:f1:01:9c:5b:f0:
30:88:6f:b1:00:d5:a9:78:3c:b3:80:73:2a:67:b5:0f:b2:c4:
a8:21:f3:52:c9:03:c8:40:d3:cd:e3:91:3e:67:21:3e:44:8f:
1b:96:2a:0d:f4:b3:48:36:29:67:99:06:df:c6:7d:c4:13:0d:
7e:8a:be:f6:11:33:13:1f:89:d8:c0:4d:70:09:71:eb:89:67:
55:b2:e1:e6:92:d5:bc:24:8b:19:f5:45:6f:87:3e:16:ff:47:
7c:55:a9:80:ac:18:a8:8d:95:45:8d:e2:57:86:9b:e4:1c:dd:
27:fb:5d:7e:28:b4:df:d2:1e:9f:28:e0:87:f9:ca:24:5c:73:
65:28:4d:2e:47:83:a4:25:35:7e:f7:9c:c4:ed:45:41:cb:58:
76:4e:17:3f:7f:b2:ba:7e:de:39:fb:1d:bd:5e:80:c8:b4:35:
d5:8d:1a:45:c0:46:41:5a:c2:68:48:d9:32:3c:e7:5e:1b:60:
2a:89:84:47:67:4a:cf:72:74:1d:2f:38:70:50:5f:c8:8d:ce:
d3:03:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:58 2026 by rpki-client