
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
File: KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json)
Hash identifier: MuXOh+urDEy596h2NL4WHvpl7zBnIDFitMirJZT7EDo=
Subject key identifier: DB:BE:F2:2B:29:7E:91:30:6F:D7:9A:1D:D6:76:39:91:1B:31:38:17
Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
Certificate issuer: /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
Manifest number: FC
Signing time: Thu 23 Jul 2026 08:00:02 +0000
Manifest this update: Thu 23 Jul 2026 08:00:02 +0000
Manifest next update: Thu 30 Jul 2026 08:00:02 +0000
Files and hashes: 1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: GFLjcszKacLah8BD0iHbSm1Da2uVM0xV8j33J711Y0w=)
2: 3E4E5610438B11F18B6C5738C9833773.roa (hash: 1P+X6qPkn0VdYt1Cmrpk5GJKo0+TU3IuJXvl0/kng8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Validity
Not Before: Jul 23 08:00:02 2026 GMT
Not After : Jul 30 08:00:02 2026 GMT
Subject: CN=6a61ca02-b847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:32:dc:1f:21:9f:2d:ce:15:2a:40:71:47:
a7:60:95:43:f6:29:da:30:4f:4d:17:a5:74:06:3d:
46:4f:8e:48:d3:63:36:3e:fb:62:7c:49:85:15:06:
30:8c:4a:c3:8a:c7:46:96:09:6e:af:c7:2b:c0:c9:
3d:4e:c3:04:88:7a:ed:99:1b:cb:ef:86:7f:6f:00:
3f:7f:9c:15:81:82:6b:d7:fa:d7:c1:56:05:5e:7f:
2a:c7:bb:2e:87:26:08:c9:99:f7:7a:19:7e:db:96:
92:3b:07:63:9a:8b:47:9b:53:8b:41:79:cc:3b:06:
01:5d:b1:3e:ac:71:4c:1a:4c:fe:de:b5:da:ee:2a:
90:33:86:0c:6b:aa:f6:79:f1:21:fb:7f:70:ac:3a:
39:d6:37:a8:1c:59:1b:db:2f:f8:68:16:a1:2f:ed:
d5:f8:8d:55:2c:2e:74:b4:27:e7:ce:ef:44:69:80:
54:c1:b2:ae:4a:1e:0d:81:26:2f:56:2b:28:c9:f7:
f8:50:7e:68:b8:55:6f:ff:32:4a:c4:c3:6c:aa:09:
f8:87:73:46:2b:3a:e4:8e:18:b7:46:18:19:97:85:
17:fa:49:f0:87:cc:8f:b1:ce:76:fe:8c:57:21:97:
6c:46:1c:ec:9f:da:8f:d0:cb:68:62:7c:8b:ab:5c:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BE:F2:2B:29:7E:91:30:6F:D7:9A:1D:D6:76:39:91:1B:31:38:17
X509v3 Authority Key Identifier:
keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:dd:70:f5:9a:e9:1b:2f:78:dc:93:d4:65:3e:88:52:a0:89:
c5:57:e0:91:70:37:78:25:27:b2:19:a8:05:99:89:be:75:ff:
6b:0e:7f:03:fd:76:69:29:6f:b9:84:a8:08:13:eb:e1:e7:da:
f0:5d:7d:ce:ac:fb:71:d9:95:c9:d5:8c:ba:0c:d0:3d:d6:73:
0f:56:e3:bd:2a:0d:87:90:15:94:e6:cf:33:62:df:33:98:aa:
df:67:f0:3b:68:6d:36:ef:61:fa:a4:17:d1:fd:d1:20:03:97:
d6:0b:1f:19:ab:15:2f:5f:4a:6b:e6:95:c2:59:89:7d:f1:a4:
95:3f:cf:a5:b9:b8:5b:13:b8:e4:42:86:66:a7:80:45:ff:0b:
9a:aa:e6:ce:9f:56:c9:e8:74:c4:ae:6b:75:e1:c7:35:7c:2e:
62:f3:60:7e:dc:8f:52:e0:16:a6:80:a4:df:98:9a:89:08:db:
0a:0a:13:28:33:ac:16:54:f2:19:7d:60:af:ff:04:b0:5d:dd:
3f:13:e0:96:ac:ae:7b:c4:0a:83:2d:c6:a1:17:73:9c:6f:70:
73:2f:35:0c:09:41:ce:6b:ac:ca:28:c5:ec:e3:e1:21:a4:26:
51:f0:11:38:8c:10:f1:df:55:3a:94:6c:60:ef:9c:6a:cf:67:
36:f7:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:14 2026 by rpki-client