
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
File: KN1yVzxbraKIuDKzmB_0yYsvjFE.mft (raw, json)
Hash identifier: SnSLo+uIE/VxFWgmC7EZGWMcMstlsGqT0MCedHKkYss=
Subject key identifier: 65:00:20:FA:A9:DD:82:36:6E:6B:15:85:25:EC:C2:AC:AB:B3:9E:81
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Certificate issuer: /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial: 0595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
Manifest number: 058C
Signing time: Tue 24 Mar 2026 22:56:55 +0000
Manifest this update: Tue 24 Mar 2026 22:56:55 +0000
Manifest next update: Tue 31 Mar 2026 22:56:55 +0000
Files and hashes: 1: KN1yVzxbraKIuDKzmB_0yYsvjFE.crl (hash: KuTlA/dpHygqCU0ygPyMvrQGBh5nBjZ7e6PKgoUDqAo=)
2: F6750B60168D11EC89C9CB5DC4F9AE02.roa (hash: a2MlG0wEMN1OaH7j49XfTWV8ol9vPnU4AAth6CS9+gs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Validity
Not Before: Mar 24 22:56:55 2026 GMT
Not After : Mar 31 22:56:55 2026 GMT
Subject: CN=69c316b7-f087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:a9:6a:d3:b9:fc:e2:d8:6f:80:57:4c:bf:
ca:72:66:0b:58:ea:65:06:4f:a5:18:b8:c5:c9:fc:
5f:da:ef:b6:6b:91:b6:c4:ef:68:9b:4c:54:e0:73:
79:65:33:0f:d8:bb:65:16:d5:be:46:93:25:2e:46:
91:28:d8:a1:30:11:e1:76:99:02:e5:e8:af:b1:1f:
64:d5:dc:3e:24:75:5e:09:89:b0:55:bc:0e:00:9e:
47:cd:b7:46:49:25:b8:1c:29:75:93:f6:8f:3c:f9:
fe:41:93:2d:d9:08:c3:eb:c6:52:4a:2c:f8:fe:99:
67:e9:c8:51:ef:de:66:60:0b:4b:15:a3:96:72:a6:
6b:15:6b:54:5b:9b:5e:64:bc:ea:27:f4:bc:68:7d:
73:2e:fe:43:90:12:f7:f4:00:72:51:5c:01:9d:09:
d9:91:35:01:12:08:a0:ae:1e:1e:0f:bb:a5:a4:84:
69:42:cd:37:75:27:e6:f2:75:83:f5:b7:03:1b:0f:
18:eb:c9:7f:6a:4d:c0:e6:3b:a7:0b:42:1a:fd:90:
78:10:b4:33:6f:f7:d8:b8:5b:43:07:e3:7d:91:b9:
8c:90:e1:17:4e:9b:ad:9d:3e:64:6b:17:30:bc:ce:
22:07:46:a3:d9:b5:76:33:df:b4:03:5d:af:6a:9d:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:20:FA:A9:DD:82:36:6E:6B:15:85:25:EC:C2:AC:AB:B3:9E:81
X509v3 Authority Key Identifier:
keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:11:ec:64:39:c6:e0:48:11:73:8a:7a:87:30:42:55:7e:
b5:6b:68:9e:e1:85:d4:34:e4:23:72:36:f8:29:28:9d:be:8a:
fd:5c:f6:dc:5a:c8:99:c8:8f:e3:06:bb:5e:82:c4:93:08:0f:
d0:e3:c1:24:80:bb:a6:ed:36:d6:ee:94:27:d7:34:1b:fc:52:
fc:68:3b:8f:a0:7a:e8:b8:36:38:6f:71:17:0e:a4:d7:89:3a:
b4:bf:e6:a8:c3:e7:63:2f:9b:78:cf:6c:22:51:f2:90:09:c4:
67:dc:7a:76:58:03:3b:19:5c:b3:1b:0f:da:16:22:07:44:df:
ee:b0:6e:ac:56:37:db:27:6a:bc:d1:b4:e7:57:8f:f6:a3:18:
ea:e6:a4:3c:cb:00:4a:dc:e6:88:11:c2:2f:23:c8:67:c0:d5:
5a:b5:a2:78:2c:69:43:b4:92:a7:ee:b4:a8:33:f6:1b:d0:b4:
10:66:ff:bd:34:b9:7c:8b:19:b7:0c:7b:2c:39:03:da:a6:a3:
89:ba:9c:71:65:c9:ab:60:f5:01:cf:29:0b:55:ae:da:02:2e:
9c:9e:4f:81:7b:5b:57:33:b0:e1:42:3f:bb:61:50:4e:49:26:
5a:3e:15:7f:e5:b2:2f:a3:17:2e:21:d5:73:80:1c:35:d6:c2:
be:20:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:27 2026 by rpki-client