
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier: 6q6r0rbv0tYOEOPBjlo2vWTXcI0SzuaBIj40MoGQqZE=
Subject key identifier: E1:3A:C7:53:EB:6E:E7:5E:79:C3:AC:DB:6A:C2:CA:0A:A8:E8:CC:BB
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number: 016A
Signing time: Fri 27 Mar 2026 04:21:44 +0000
Manifest this update: Fri 27 Mar 2026 04:21:43 +0000
Manifest next update: Fri 03 Apr 2026 04:21:43 +0000
Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: ydzAxLfJT0k97BFWwl2egN6ovUuHMSk9KHm6sJ3HK/M=)
2: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: XulmFJ+sIF5UMyQAz/MmaZcZch5QE26KdzQqhFjBUzg=)
3: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: 0cQ7lL+Dgw4MdHfwJ/NaEJmV6pZpv3TD2ijoWRCbMbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Validity
Not Before: Mar 27 04:21:43 2026 GMT
Not After : Apr 3 04:21:43 2026 GMT
Subject: CN=69c605d8-d187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:7e:95:8f:f1:37:d5:3b:be:34:3b:63:ea:
6f:a4:e2:87:d8:3e:15:20:46:2d:ed:d0:49:98:2d:
04:62:79:34:45:7c:97:9c:44:b1:6d:e6:40:b7:c4:
bc:27:5e:7c:d8:c5:f9:68:87:7b:f1:ce:bc:c6:14:
02:0c:16:62:1f:93:15:d7:5c:3e:be:8f:eb:77:4b:
47:55:83:b7:80:ca:85:7c:56:43:b9:d5:db:ef:45:
1a:e9:2c:ec:9a:bb:e8:14:f2:fd:55:ec:fd:c3:cf:
9a:dc:22:8c:b9:2d:1a:ed:5c:0c:f2:3f:a7:ab:1d:
10:3e:09:67:6a:03:96:90:cc:bf:d4:7a:5c:2f:ca:
7d:ef:20:a2:2b:1c:9f:50:99:18:e2:df:f0:bb:8f:
23:3e:97:73:10:c2:b0:3a:6a:84:fa:8f:54:31:b2:
fa:b3:76:84:b5:c5:39:08:57:cb:5c:1f:e4:f1:ba:
51:55:15:be:ee:54:72:eb:5a:13:55:df:0d:61:a9:
6d:55:e7:de:d3:69:b6:b4:8a:ff:16:d2:67:63:66:
54:47:d7:87:cb:27:82:ad:0b:9d:35:07:0f:b3:28:
e0:0d:5d:04:8d:5b:9c:b7:ad:3c:83:9e:56:42:ab:
5e:21:50:b4:65:7b:e8:b6:30:2f:31:25:3e:86:a0:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3A:C7:53:EB:6E:E7:5E:79:C3:AC:DB:6A:C2:CA:0A:A8:E8:CC:BB
X509v3 Authority Key Identifier:
keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:46:e1:46:f0:6f:dd:81:03:e5:23:69:9d:41:a1:6f:e4:cf:
47:22:08:0d:ac:e9:5d:f0:49:99:a8:78:92:e9:ac:ba:66:a8:
3d:e0:d2:26:54:84:ba:c5:26:1d:6e:d5:8a:74:6c:84:26:df:
76:93:ed:5a:3e:fb:d3:89:18:0d:95:d8:06:ba:39:e6:6d:11:
10:e1:ce:b4:7c:9f:15:62:b8:7b:5f:15:b5:34:e9:2f:37:c3:
36:09:83:17:96:ff:40:85:62:bf:e6:ea:89:72:58:d7:b7:30:
bc:b5:34:7f:36:0c:96:62:af:8e:53:0f:3a:05:32:63:48:44:
e9:3f:30:70:e0:cb:c2:d8:e8:63:1d:80:ce:22:08:33:13:02:
5f:ab:94:42:77:a4:11:75:89:54:4f:bd:b6:71:85:3e:b6:55:
87:59:ec:03:ff:22:f6:f5:50:5d:68:e1:14:86:9a:b7:bc:f5:
43:8c:a3:6a:a9:7e:2d:4c:83:60:7c:9d:5f:ca:d5:fc:80:58:
93:da:25:67:a8:0b:a7:92:50:b4:e9:ad:fd:4e:72:1f:a2:8f:
a0:7f:18:0c:dd:ac:fe:44:ec:b7:9b:ea:90:1f:13:2d:34:32:
0a:32:08:09:d0:9b:f4:77:99:f5:58:b0:32:07:9f:39:af:56:
91:67:d3:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy
M0UwQzIyODMwHhcNMjYwMzI3MDQyMTQzWhcNMjYwNDAzMDQyMTQzWjAYMRYwFAYD
VQQDEw02OWM2MDVkOC1kMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsqN+lY/xN9U7vjQ7Y+pvpOKH2D4VIEYt7dBJmC0EYnk0RXyXnESxbeZAt8S8
J1582MX5aId78c68xhQCDBZiH5MV11w+vo/rd0tHVYO3gMqFfFZDudXb70Ua6Szs
mrvoFPL9Vez9w8+a3CKMuS0a7VwM8j+nqx0QPglnagOWkMy/1HpcL8p97yCiKxyf
UJkY4t/wu48jPpdzEMKwOmqE+o9UMbL6s3aEtcU5CFfLXB/k8bpRVRW+7lRy61oT
Vd8NYaltVefe02m2tIr/FtJnY2ZUR9eHyyeCrQudNQcPsyjgDV0EjVuct608g55W
QqteIVC0ZXvotjAvMSU+hqDOHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOE6x1Pr
budeecOs22rCygqo6My7MB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC
RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX
ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj0bhRvBv3YED5SNpnUGhb+TPRyIIDazpXfBJmah4kumsumaoPeDSJlSEusUm
HW7VinRshCbfdpPtWj7704kYDZXYBro55m0REOHOtHyfFWK4e18VtTTpLzfDNgmD
F5b/QIViv+bqiXJY17cwvLU0fzYMlmKvjlMPOgUyY0hE6T8wcODLwtjoYx2AziII
MxMCX6uUQnekEXWJVE+9tnGFPrZVh1nsA/8i9vVQXWjhFIaat7z1Q4yjaql+LUyD
YHydX8rV/IBYk9olZ6gLp5JQtOmt/U5yH6KPoH8YDN2s/kTst5vqkB8TLTQyCjII
CdCb9HeZ9ViwMgefOa9WkWfTCA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:47 2026 by rpki-client