
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json)
Hash identifier: guCPYjGdhzxhUy3sz4hgzAx6WRIIH9BSi+aCheN9Od0=
Subject key identifier: 23:FA:53:3A:4B:18:F6:29:55:23:17:D7:71:4B:10:0B:27:14:7E:67
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial: 0A79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
Manifest number: 0A71
Signing time: Thu 26 Mar 2026 19:29:15 +0000
Manifest this update: Thu 26 Mar 2026 19:29:15 +0000
Manifest next update: Thu 02 Apr 2026 19:29:15 +0000
Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: ilbcKZmZ0yXGJZJEw0g0mGXU03iHPnXVgcM9Q2LUUYE=)
2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: pLFtJM8YCayRSQjnW3sFmWo+oKdAsNVRNoN1xNfin+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2681 (0xa79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Validity
Not Before: Mar 26 19:29:15 2026 GMT
Not After : Apr 2 19:29:15 2026 GMT
Subject: CN=69c5890b-4e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:1a:52:50:9b:21:15:2c:c0:60:f2:75:03:
5d:60:15:94:07:86:5c:3c:79:a2:ab:ec:1a:12:29:
e8:43:87:a1:c2:ca:15:f9:5e:e5:29:91:8a:14:ae:
db:9d:70:e0:72:3e:a6:af:de:42:18:7d:a9:24:7d:
c9:54:f3:c5:2b:ec:b0:e2:67:fe:73:eb:8c:51:a9:
99:f5:a9:96:64:81:14:ba:02:cf:95:f1:59:b5:3a:
df:8e:3a:f0:22:50:dc:76:01:84:e0:fe:f8:68:61:
f7:21:ae:0e:e3:ab:f1:8d:31:db:5e:d8:12:27:06:
d7:39:63:9a:89:3c:b8:99:a3:32:2e:fa:7a:e6:99:
0e:c3:05:1c:c3:d8:3e:9a:5b:b8:6f:3d:87:c9:59:
4f:5d:1e:56:a8:e8:14:9f:9d:42:88:b6:27:58:f3:
b8:8f:a8:06:6c:54:b7:ba:3c:2a:60:9e:cb:cd:2e:
50:7a:24:9a:52:a2:7c:25:05:9e:0b:77:0e:07:23:
75:ea:8b:de:f3:bc:2d:1b:fc:94:92:74:97:56:53:
e3:7d:11:ea:a8:62:93:9d:56:b3:fd:da:9d:09:04:
bf:a9:ef:00:40:e2:b1:1d:0d:07:4e:c5:74:9e:4b:
d8:33:18:04:1e:fc:ba:62:f6:f6:81:27:fe:ea:e3:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:53:3A:4B:18:F6:29:55:23:17:D7:71:4B:10:0B:27:14:7E:67
X509v3 Authority Key Identifier:
keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:77:67:46:97:32:0e:43:a5:07:a6:be:64:83:2a:c6:3f:
da:48:c1:3e:5d:66:d7:a7:4f:95:52:09:b8:9b:dc:54:94:d5:
54:1e:54:bd:89:35:4c:fc:a2:42:2f:07:60:7a:5a:71:c4:e1:
55:f9:1a:f3:73:c9:66:3f:b6:d5:6f:5a:57:bd:39:43:ce:52:
45:a1:2f:69:61:39:10:25:f4:0b:b0:1c:1e:04:34:79:69:80:
de:19:88:c5:4b:c3:41:fe:6d:ce:da:20:29:45:2e:0e:23:01:
2b:da:08:6b:bd:4f:5e:3f:5e:a1:e8:04:0d:3f:cd:50:38:20:
14:2c:21:7e:95:89:05:8c:4d:5e:19:7d:8b:15:24:23:80:46:
cd:e0:1e:7a:49:32:07:5a:84:b2:28:12:de:03:3b:d5:83:a5:
fb:76:bf:a0:7f:d3:91:01:2e:43:5e:c7:14:86:7f:92:b6:21:
80:99:b0:5a:ae:a6:bb:ae:9f:8e:b9:c7:18:ae:dc:8b:3a:75:
0b:52:c7:d0:13:00:bf:d5:25:9b:31:18:23:7d:89:b7:43:9e:
ef:c1:57:cc:90:b4:66:ce:07:84:d9:bf:25:c5:dd:15:ee:cc:
d7:15:7c:ae:82:b8:3a:ed:81:a3:ba:62:4a:ff:a6:78:fb:d7:
6f:fb:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:06:10 2026 by rpki-client