
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
File: kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json)
Hash identifier: +oG5ce+bRG/dru748NZsCxR/8bqPFA0BKg+cKh8ow0c=
Subject key identifier: AE:18:04:26:84:65:BA:E3:9A:47:0C:43:B5:EA:8B:E1:34:C2:AF:A9
Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
Certificate issuer: /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
Manifest number: 016B
Signing time: Mon 11 May 2026 04:52:55 +0000
Manifest this update: Mon 11 May 2026 04:52:55 +0000
Manifest next update: Mon 18 May 2026 04:52:55 +0000
Files and hashes: 1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: OW2knC2OySxKvjOSbuwDFf83BMzWOOrcftJQQJfNuzo=)
2: CCAF2918109411F186362BB2353D8C67.roa (hash: Upvyy2jPvhhD/OdsNESStZNIXsW/r3KlLDVUrD02B1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Validity
Not Before: May 11 04:52:55 2026 GMT
Not After : May 18 04:52:55 2026 GMT
Subject: CN=6a0160a7-7d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:ab:ab:c5:81:8a:85:a1:6d:51:44:1b:07:
07:b9:7c:0e:52:56:a6:e6:f3:27:b4:aa:37:66:6e:
2a:9e:44:7c:60:5b:08:6e:df:d5:8f:ac:9d:33:c0:
23:db:95:c7:33:18:6b:b3:55:a1:d7:67:cf:83:29:
f6:13:a8:b6:e7:b1:81:c5:74:d0:1a:b1:67:7f:af:
de:c7:f6:84:8a:58:e0:fc:9d:36:71:ec:d0:c1:fb:
5f:e6:fd:f4:a1:56:ad:d3:6a:87:4f:30:84:66:29:
5d:df:cb:e0:72:17:36:8c:bb:c0:d4:66:e2:94:02:
87:df:df:d9:35:3e:fd:2d:fb:95:56:aa:03:91:46:
0e:f0:11:67:22:94:22:33:76:71:44:12:30:4c:44:
c4:f0:0c:3b:d3:d5:24:c1:bd:e9:2c:67:2a:28:50:
29:f6:97:91:65:9d:9f:d0:a9:2b:4f:5e:98:95:6d:
88:88:3d:63:c6:5f:d3:9c:20:27:e6:b8:be:3d:c9:
e2:e2:0c:55:96:d3:4a:16:92:e6:6e:eb:d5:63:03:
ea:0f:19:d5:56:35:36:0f:40:55:67:d9:7f:96:e2:
4e:d0:2d:14:53:93:ca:ff:f0:b1:85:55:16:a8:ab:
59:d4:c9:da:02:06:40:c6:32:bf:2e:d1:fb:39:48:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:04:26:84:65:BA:E3:9A:47:0C:43:B5:EA:8B:E1:34:C2:AF:A9
X509v3 Authority Key Identifier:
keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:79:7e:e5:86:4e:3d:1d:fa:ad:2a:35:75:37:3f:d7:94:39:
ed:e4:e7:a0:f4:03:14:5e:f7:c5:3f:2b:44:68:aa:bd:49:7f:
c7:31:df:70:64:90:76:40:01:f0:60:55:84:49:a1:57:ff:dc:
08:fa:1f:98:cd:aa:15:fe:44:9f:de:e2:6c:34:b3:28:2b:3b:
2f:cb:b9:a5:80:a9:fd:8c:2e:5f:16:3c:e0:51:4f:0f:c8:39:
68:a6:ba:70:bc:4f:31:24:06:f4:52:d1:42:7e:64:25:31:de:
2a:c9:9e:bf:ed:3c:04:c6:f9:14:33:0d:59:21:dd:c1:b3:d9:
03:e5:fe:0b:de:92:81:5f:0e:20:d7:f6:ad:69:0f:2f:d0:0f:
5b:92:ca:1a:83:c0:87:47:af:dd:fa:41:4d:30:60:6d:8b:43:
dc:40:cc:91:68:a0:cf:3d:10:05:a9:a9:15:18:ee:db:0e:e7:
74:c4:63:fa:73:93:3d:a8:07:fc:86:85:b3:3c:53:f0:5b:8b:
df:48:17:72:44:1e:a7:37:75:9a:9c:23:5d:5f:20:bb:f1:d4:
77:8f:94:7e:35:e3:c7:1d:e3:57:51:26:b4:7d:58:58:39:9b:
9e:1a:2c:a0:c5:15:a9:a3:21:1a:e8:39:15:6c:60:28:93:ed:
37:5b:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:57 2026 by rpki-client