
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json)
Hash identifier: 7kVHzJVWHxRyxRwbrDeCzY53xocgRCcg4mJ7NBJe+5s=
Subject key identifier: 63:B0:04:C5:75:EF:7A:A9:5C:9F:80:B9:CD:CF:61:AA:7A:EB:CA:9D
Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
Manifest number: E8
Signing time: Wed 25 Mar 2026 05:45:15 +0000
Manifest this update: Wed 25 Mar 2026 05:45:15 +0000
Manifest next update: Wed 01 Apr 2026 05:45:15 +0000
Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: UrTYJW6meI+yLm7vm7D9uvnYaRVBXUIhR9UISi7oRO8=)
2: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA=)
3: 854C34B410A611F1B36A7FF1393D8C67.roa (hash: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Validity
Not Before: Mar 25 05:45:15 2026 GMT
Not After : Apr 1 05:45:15 2026 GMT
Subject: CN=69c3766b-4403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:a9:7c:2f:6b:37:3a:c5:f3:62:0a:1a:b8:
2d:ca:64:61:81:3a:c3:a0:0a:1b:bc:5a:df:54:51:
dd:72:ff:d7:b8:5a:12:11:f7:13:ed:76:1f:59:2a:
ef:fa:b7:d4:4d:ca:32:96:d7:d8:46:df:ec:1f:ac:
c5:e1:01:6a:dc:5c:f1:6c:df:f7:31:4e:10:ec:79:
72:24:9e:3e:66:20:88:5a:1a:19:ec:e4:e3:a1:70:
71:bf:cd:21:0a:04:f9:a5:77:c9:3e:0f:32:62:31:
fd:f8:e5:8f:c9:27:19:82:85:d6:8d:40:b3:ff:01:
2a:5d:40:2d:24:ba:17:52:d5:9d:b8:fa:56:b3:e4:
c5:a0:f8:07:52:17:27:b8:4b:4f:c6:c6:f7:0f:9f:
25:a6:0d:36:1a:94:3c:ac:fe:dd:92:18:a3:47:25:
06:29:4d:bd:1d:03:20:0b:f4:ba:e9:c7:9b:2d:eb:
39:40:12:7b:e9:b8:3a:c0:fc:5e:58:2d:20:19:17:
4b:ea:0f:2a:8c:11:ee:5f:38:23:d9:02:63:47:63:
30:94:5e:f6:bd:dd:c1:9b:f1:11:c4:57:d0:dd:3a:
6b:2f:16:2c:5c:31:4e:ca:0e:d2:3b:68:33:81:7c:
be:df:7d:78:49:44:a8:b8:b7:bf:28:41:81:25:35:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:04:C5:75:EF:7A:A9:5C:9F:80:B9:CD:CF:61:AA:7A:EB:CA:9D
X509v3 Authority Key Identifier:
keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:05:3d:d4:cb:4a:be:12:d1:39:70:78:e9:11:54:26:d9:63:
5e:c3:c9:b5:bd:27:30:dc:8b:77:70:c7:90:5d:6d:f6:87:cd:
6b:cb:e7:3d:0d:68:40:43:1b:ed:e4:51:80:4d:e1:6c:44:d4:
e9:e8:51:0d:90:e2:f9:9b:ff:2d:c2:78:83:87:13:11:00:76:
76:0c:24:e4:75:60:10:e7:76:3e:69:c1:2e:15:f1:b6:68:51:
86:7c:16:ad:ab:9a:af:fb:55:34:8a:86:62:21:a0:fb:77:6c:
05:f8:27:c2:5f:8e:48:2e:23:ce:fb:95:56:cd:38:41:8f:bd:
47:43:8b:1b:68:15:88:15:b8:9b:17:c9:1b:95:86:b0:e8:66:
f9:71:ed:0a:c0:68:8e:4b:1d:11:67:be:c2:c1:9f:32:53:33:
13:57:1f:9f:df:d4:b1:15:f0:d6:3e:40:1f:82:66:28:cc:f5:
cb:75:25:28:04:66:bb:c0:3f:b6:2b:3c:e4:04:9e:19:f3:19:
8e:54:99:7d:e8:f0:56:64:f3:c1:93:9a:dd:0b:a7:2d:02:49:
e6:26:fb:f4:03:85:ab:6c:31:25:42:d6:5c:52:b3:a0:41:09:
a0:e4:f2:f7:c3:8d:cc:d3:aa:6d:63:23:88:8a:b2:09:f4:60:
76:4c:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:55:05 2026 by rpki-client