
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier: 1hFuIfrRqCjOHzM4ZPOtenPvwPI6ncKNsHYzMhH19qM=
Subject key identifier: 9F:6B:42:F6:81:13:7C:E3:79:D8:2D:00:1A:AD:28:EA:0F:32:1B:DA
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 0AFB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number: 0AE1
Signing time: Thu 24 Sep 2026 16:03:48 +0000
Manifest this update: Thu 24 Sep 2026 16:03:47 +0000
Manifest next update: Thu 01 Oct 2026 16:03:47 +0000
Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: xVnrutiohbi397XsBEvX+KDTTjgALI3cdnU/oj/4Mg4=)
2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: LmaTdsd1h1JqkjG4YXaY9iUmknysZAZ1jNPd9mJhPTE=)
3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: BPQhaOlyNfcJprzBzio4bC/cy0IBjGjtPyCaOGZtMLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2811 (0xafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Validity
Not Before: Sep 24 16:03:47 2026 GMT
Not After : Oct 1 16:03:47 2026 GMT
Subject: CN=6ab549e4-a5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:5b:13:bc:19:0f:a5:35:05:fe:f2:f8:1e:
f1:2f:46:56:86:e2:8b:79:2c:38:2b:88:e7:18:61:
bd:c6:5e:11:d3:65:7d:8a:a9:ed:e9:ac:57:ae:37:
96:19:13:f4:d0:46:b1:43:cc:ec:8e:74:3c:23:c3:
b2:b6:82:56:58:be:b3:ff:20:d2:00:51:41:18:18:
02:1f:b1:90:d7:2a:5c:54:d9:91:fd:a5:8b:61:33:
07:05:4e:91:f9:72:93:f5:37:91:c3:e3:e0:11:a8:
3c:89:1c:a2:d2:9d:1e:f6:d3:c8:84:32:2f:e6:fd:
00:8d:7b:56:4e:a2:07:dd:ac:da:64:15:fb:4b:5f:
4b:28:12:bf:16:28:07:0a:a1:af:06:eb:59:5a:b7:
38:6b:39:cf:8f:39:ad:4e:8f:9e:d8:e9:47:52:1d:
ae:11:a8:2b:dc:86:23:16:89:f9:b3:55:ca:2d:6a:
da:c1:91:2c:f1:bc:d6:3c:c8:4b:47:58:08:23:ed:
76:89:02:71:90:4b:e3:b8:59:60:fe:21:73:24:5c:
c5:a0:b7:c5:a5:e5:54:25:64:dc:ac:dc:26:1d:31:
9e:fb:e2:bb:de:e4:f1:c8:fa:54:45:03:01:3a:81:
de:6c:91:9f:91:f3:ba:e2:10:d4:b8:dd:98:47:ff:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:42:F6:81:13:7C:E3:79:D8:2D:00:1A:AD:28:EA:0F:32:1B:DA
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:25:e7:8d:ef:03:4e:0c:ac:27:10:3e:69:ba:22:94:53:0c:
c5:52:87:31:2c:b7:a0:24:3e:4f:ec:bf:89:88:85:66:18:78:
80:ba:33:6b:d4:04:b9:0d:17:91:7e:e9:06:4d:ca:6c:06:44:
b3:58:4f:30:51:c4:9d:bc:ed:ba:9b:76:d4:07:e9:25:3d:85:
57:2a:40:00:1c:54:e5:ae:00:3f:83:62:d5:9d:04:0b:93:57:
ba:ff:98:f5:db:41:d2:d8:bf:ea:28:5c:a1:37:55:f3:88:a7:
6f:a9:0d:ce:97:d1:70:58:f4:2f:48:37:da:2d:8e:81:1c:a3:
71:8c:fb:d2:ac:b1:b6:a4:a3:6a:f0:a7:8e:2b:28:d0:15:7f:
ea:a6:44:c8:5d:ca:40:9f:7f:41:7b:cb:6a:c7:cc:2b:48:e5:
8d:82:90:36:a6:db:7b:be:c4:5f:62:5a:0e:39:5d:64:36:ba:
5d:10:2d:78:ac:fb:f9:fa:04:0d:f0:62:e8:36:5c:8b:11:38:
a0:b1:a0:0c:80:7c:ab:db:9d:87:7e:82:ce:f7:3a:f4:68:dc:
4b:d0:69:1e:dd:7e:7e:4a:5f:4d:ce:bf:38:28:db:8e:7d:59:
3b:36:41:7f:6f:61:f1:55:58:50:7c:9e:7b:13:78:1f:ed:33:
1b:99:bf:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx
MzE3NEJGQTcwHhcNMjYwOTI0MTYwMzQ3WhcNMjYxMDAxMTYwMzQ3WjAYMRYwFAYD
VQQDEw02YWI1NDllNC1hNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/NbE7wZD6U1Bf7y+B7xL0ZWhuKLeSw4K4jnGGG9xl4R02V9iqnt6axXrjeW
GRP00EaxQ8zsjnQ8I8OytoJWWL6z/yDSAFFBGBgCH7GQ1ypcVNmR/aWLYTMHBU6R
+XKT9TeRw+PgEag8iRyi0p0e9tPIhDIv5v0AjXtWTqIH3azaZBX7S19LKBK/FigH
CqGvButZWrc4aznPjzmtTo+e2OlHUh2uEagr3IYjFon5s1XKLWrawZEs8bzWPMhL
R1gII+12iQJxkEvjuFlg/iFzJFzFoLfFpeVUJWTcrNwmHTGe++K73uTxyPpURQMB
OoHebJGfkfO64hDUuN2YR//7SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9rQvaB
E3zjedgtABqtKOoPMhvaMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF
RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN
ejR2Tmo0bU1CbW9URjB2NmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnCXnje8DTgysJxA+aboilFMMxVKHMSy3oCQ+T+y/iYiFZhh4gLoza9QEuQ0X
kX7pBk3KbAZEs1hPMFHEnbztupt21AfpJT2FVypAABxU5a4AP4Ni1Z0EC5NXuv+Y
9dtB0ti/6ihcoTdV84inb6kNzpfRcFj0L0g32i2OgRyjcYz70qyxtqSjavCnjiso
0BV/6qZEyF3KQJ9/QXvLasfMK0jljYKQNqbbe77EX2JaDjldZDa6XRAteKz7+foE
DfBi6DZcixE4oLGgDIB8q9udh36Czvc69GjcS9BpHt1+fkpfTc6/OCjbjn1ZOzZB
f29h8VVYUHyeexN4H+0zG5m/5g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:43 2026 by rpki-client