
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json)
Hash identifier: I5lB2GG1gKXMkNUzd26s5hkgHB7g3om/vky6DTJK3W8=
Subject key identifier: 3C:DF:A2:F3:72:67:AB:AB:36:45:37:06:77:25:A8:AE:A1:83:0E:F4
Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
Manifest number: 0101
Signing time: Wed 13 May 2026 06:22:45 +0000
Manifest this update: Wed 13 May 2026 06:22:45 +0000
Manifest next update: Wed 20 May 2026 06:22:45 +0000
Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: YeuWJZLKTTpWh/kPBuvThiCkgJaem1M1xlrMb6qgiW8=)
2: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA=)
3: 854C34B410A611F1B36A7FF1393D8C67.roa (hash: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Validity
Not Before: May 13 06:22:45 2026 GMT
Not After : May 20 06:22:45 2026 GMT
Subject: CN=6a0418b5-1a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:c9:4b:8d:08:37:9a:5b:2e:c3:1a:13:6a:
00:2d:8d:6c:19:ec:39:a1:23:fd:ac:d2:33:c1:07:
cc:c5:35:46:53:fa:ca:dc:8d:f3:e9:df:55:da:25:
fb:7e:fc:5a:82:c5:47:bb:40:cc:47:8a:03:65:89:
af:7d:77:1a:b3:4d:e2:d3:dc:de:55:cb:f3:41:52:
31:62:66:ca:d4:f3:19:9d:c8:08:65:38:d4:38:c6:
56:e7:26:22:59:ac:7f:7b:fc:a1:bf:71:d3:8e:5a:
da:1a:2f:78:8a:3b:e9:60:4e:a3:ca:a5:61:55:d7:
ff:1a:f3:32:95:64:21:3c:a1:5e:d5:96:c6:6e:e5:
38:b7:35:24:b3:d1:4c:30:46:82:07:f2:9f:63:50:
f0:cc:0d:3b:cf:f9:90:cc:44:ad:38:f1:b5:b7:c0:
c4:03:7f:ca:b2:e8:d8:04:c0:20:ac:de:68:6d:43:
0d:22:bf:f0:ed:38:07:7f:d8:d1:a1:a6:af:da:ab:
32:cd:00:ef:5d:2c:97:27:5e:ec:5e:aa:b6:2e:50:
e9:98:8d:95:78:c1:9c:d6:4d:bd:78:6e:4d:9a:3d:
c7:0f:a9:8d:38:65:32:0d:89:2a:ec:80:bb:2d:52:
35:86:83:7b:19:35:20:97:2b:47:0d:9d:17:ac:34:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:A2:F3:72:67:AB:AB:36:45:37:06:77:25:A8:AE:A1:83:0E:F4
X509v3 Authority Key Identifier:
keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:53:8e:20:54:a6:29:4b:e5:ef:5b:76:83:54:00:bc:aa:
d2:f6:a5:5c:d3:53:ba:82:a7:58:93:4d:40:ef:6c:38:98:c0:
0e:0a:9b:1a:ed:4e:df:72:44:45:c7:2a:65:2d:78:7e:a4:f8:
fd:e8:25:cc:a0:0f:57:8c:70:a6:37:24:e5:87:4f:fe:df:a0:
08:1f:4b:2b:19:7d:80:71:48:51:57:d3:a8:8a:aa:97:0b:29:
79:dc:e7:fe:72:d7:34:64:a3:60:af:ea:e5:79:30:69:fc:a7:
8b:e1:90:32:ef:fe:35:76:d3:c5:65:db:07:10:eb:8c:ff:5d:
01:00:e1:b1:9d:a6:7a:1f:98:1f:18:ea:9a:ce:a4:6b:c6:8a:
dd:b8:4d:cb:09:79:c0:2a:b3:fc:f8:6b:42:9c:0d:07:a6:a7:
b8:b9:01:d8:1a:8f:ae:57:ed:fa:3b:04:c6:cc:e6:15:3c:e9:
84:1c:43:1e:c1:df:20:11:ac:d4:cf:ad:50:dc:63:d4:d8:64:
17:34:ac:55:d3:73:f9:b4:54:3a:e3:68:82:86:8b:51:c6:66:
d2:9c:1c:66:d6:4d:59:43:66:e5:fd:53:15:32:62:5b:7b:b2:
78:8f:2c:ad:c0:ca:33:fe:26:14:40:b4:c6:f0:ba:a4:b8:86:
f9:97:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:42 2026 by rpki-client