
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier: fOHE+XxK/0uuA+FbGgLACKrKd8xtpB9+tQ3uWAgC6mU=
Subject key identifier: FF:3E:43:6F:E7:D1:61:70:06:20:B3:D3:89:2B:8F:9F:9C:4F:4B:20
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 0AD6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number: 0ABE
Signing time: Wed 22 Jul 2026 16:10:34 +0000
Manifest this update: Wed 22 Jul 2026 16:10:33 +0000
Manifest next update: Wed 29 Jul 2026 16:10:33 +0000
Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: 45RbM+E/1VAX6HE/KiCmGF8D8FRcWfgAMePVWNJ8Yg0=)
2: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: H9NP/VYQvQD8I9QwYD5I5jN2r70DSUl3MHJ3J25IGvM=)
3: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: 6/hpOniUWZ3kaCUO3scuJGL4ThJjABMLCMX3Elyy0Vo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Validity
Not Before: Jul 22 16:10:33 2026 GMT
Not After : Jul 29 16:10:33 2026 GMT
Subject: CN=6a60eb7a-ab0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:32:fd:41:b5:d5:73:65:02:c2:9d:04:a9:
1b:8e:eb:9f:ef:2b:c6:35:e9:57:f7:a4:91:d4:70:
b7:77:f7:c6:b2:b1:7a:3b:cb:c4:e2:4d:fd:6a:b5:
03:48:04:1d:a6:00:9c:a5:5f:80:7a:a9:a2:45:0e:
c5:87:15:e6:de:97:d9:90:a5:0b:68:d8:0c:b8:63:
a8:d3:3f:6b:0d:5c:19:e2:b7:6e:47:f4:8f:9c:90:
a0:29:1d:9d:9e:d3:e8:63:41:85:6c:ca:4b:64:94:
ab:e1:7f:f0:15:89:92:91:a3:32:c2:31:57:58:ce:
4e:48:74:7e:0e:b8:8b:84:8b:84:08:a1:1c:08:62:
ca:71:b7:51:5c:7c:62:3d:b9:17:82:21:ae:4f:ab:
d2:fc:86:fb:74:8d:07:81:14:e9:b5:a5:b0:cd:b8:
02:01:b7:da:fe:e3:19:c3:f8:aa:0f:38:62:d9:af:
c2:f0:91:3b:64:75:27:df:e3:b4:7b:bd:4e:6f:57:
0b:f5:41:41:0f:00:84:63:df:61:f4:67:8a:16:31:
4f:a0:dc:e3:60:09:55:bb:c3:7c:02:a2:3b:3e:95:
b0:e9:89:ef:58:a8:e9:a4:35:1e:4f:d2:e9:e7:da:
0e:c1:ec:b4:68:48:6f:fd:34:55:83:61:55:91:59:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:43:6F:E7:D1:61:70:06:20:B3:D3:89:2B:8F:9F:9C:4F:4B:20
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:42:e5:02:33:c5:7b:83:c4:4e:a6:2c:08:40:30:79:51:60:
58:d2:65:c2:7d:dc:30:d8:d4:ed:e8:53:d9:1b:d9:a6:99:e2:
be:1b:4e:f2:64:8a:d5:7d:05:81:38:69:f5:d6:f9:f8:95:dd:
2f:06:a2:84:75:22:c7:01:2b:25:5f:29:4c:7b:93:8c:27:65:
14:eb:75:11:b2:7d:24:9a:c4:e3:20:b7:c5:92:98:b1:47:61:
95:4d:5a:77:52:d0:0a:50:32:8f:62:b8:5b:dd:76:42:ba:8a:
e8:9d:8c:3a:2d:c9:e8:23:8d:ab:ad:ab:f7:df:16:d0:f8:fc:
3d:69:05:66:6d:61:c4:db:6b:ae:de:77:1c:ac:fd:a1:51:49:
9f:97:ae:c6:19:a1:a3:2b:1e:e7:73:04:42:76:29:91:24:14:
41:9c:f2:71:d0:e8:ba:fb:93:61:2c:e5:3d:67:2b:13:b1:82:
f4:91:af:dd:d5:b6:e1:7b:d0:61:e4:9d:e3:ed:a9:84:85:05:
05:58:c4:49:21:11:64:0e:e3:55:4b:8e:7b:47:9c:cd:db:97:
e0:58:a8:e7:69:ee:52:a7:67:3d:ea:82:4c:3e:4e:2d:72:e8:
44:2c:49:41:35:25:15:bd:d2:ec:cd:2f:fb:7e:9c:2d:b0:85:
09:5a:99:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:40 2026 by rpki-client