
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
File: KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json)
Hash identifier: 7vT8VnirIJiFxJeaQjOq8tC5rEKMsEt0MyW01H50QuQ=
Subject key identifier: CD:B1:43:C3:D5:E2:82:05:04:F4:3D:74:A2:26:E7:62:70:63:57:FA
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial: 1A92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
Manifest number: 1A61
Signing time: Wed 22 Jul 2026 16:25:05 +0000
Manifest this update: Wed 22 Jul 2026 16:25:05 +0000
Manifest next update: Wed 29 Jul 2026 16:25:05 +0000
Files and hashes: 1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: z4UYobEHvlVdRheRK66JiWzXaCTLoI3VoBxiUtdFetA=)
2: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: 4taf7ltYE6M7p58XiP5zUTTzb89QrcQbwrr0YABbhPc=)
3: CAA99CAC6EA911F1979A4FB45FA30FBC.roa (hash: m7EUzzHnpucYKiHcNFB8qgSUahU1+/tp+vEsRlqPQUM=)
4: CB355B666EA911F1979A4FB45FA30FBC.roa (hash: MNd1FxOTtziaGFt9RjkG1a0nL0y01M/Sc5RidiPZ/uo=)
5: E7729178378211EF822BAA6EC4F9AE02.roa (hash: kWi4j9Wig93ekWVxphoEylI+bhEAyZFHwi2cC9HjPZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6802 (0x1a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Validity
Not Before: Jul 22 16:25:05 2026 GMT
Not After : Jul 29 16:25:05 2026 GMT
Subject: CN=6a60eee1-fadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:f4:32:25:0e:fc:a3:1f:60:b9:a6:df:a1:
bd:01:2e:e0:c7:43:ec:91:b7:8b:04:d9:a4:31:0f:
58:7a:ae:4d:89:62:56:bc:5a:98:fc:7f:10:7f:37:
1f:4d:98:dd:2d:69:f7:c6:17:d6:89:1c:a5:ca:4e:
5a:bc:3e:bf:c6:56:34:21:dc:64:6a:b4:a9:a5:48:
9b:c9:a8:33:11:a1:cf:1d:25:f1:9d:66:f1:44:08:
81:c2:bb:0f:59:5e:d9:f4:9c:f9:cd:75:2c:91:4d:
de:92:10:73:bb:a1:26:33:40:d5:17:88:c2:ee:70:
a5:fb:ee:e9:a6:09:2a:03:d7:8a:c1:90:7b:6e:e2:
b8:e3:9a:41:6b:e6:22:9c:22:f8:40:9c:37:c6:88:
f8:75:82:bb:65:28:2f:28:d7:5c:b1:df:d3:ef:4d:
a2:6c:13:04:71:96:36:e2:79:68:9c:c7:a8:90:21:
b0:f1:bf:b5:f0:a4:e2:de:f7:97:4e:fb:10:4d:d8:
d0:3f:e5:17:e5:75:ba:78:98:f4:d3:1c:19:94:49:
ed:eb:5e:17:7a:53:47:82:d1:b0:8d:86:c6:31:6e:
8a:68:93:f6:47:bb:3e:2a:18:38:0e:b8:4b:3c:fe:
1f:5c:dc:de:21:bf:41:2a:37:bf:7e:23:7e:cc:46:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:43:C3:D5:E2:82:05:04:F4:3D:74:A2:26:E7:62:70:63:57:FA
X509v3 Authority Key Identifier:
keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:84:b3:9c:b5:64:05:a4:9e:ef:f1:68:2f:01:aa:50:66:
79:78:0d:32:89:e9:ab:e6:da:b6:b5:5a:5c:ad:7a:52:5a:5e:
f5:c6:44:4e:5c:ae:69:0f:0d:ca:9b:fa:6f:ca:b6:9f:cf:fe:
8f:b3:55:1c:ae:78:68:4c:5e:70:f3:bb:3c:b6:45:3f:f2:cd:
83:a6:dd:a0:cc:32:b7:60:e4:6c:d3:b5:bf:cc:9f:ad:28:84:
e5:e5:0c:b3:31:2b:5c:c2:aa:b9:12:35:1f:43:e0:82:0e:c3:
09:43:20:17:54:e6:84:35:ef:55:6c:fe:61:ed:06:e9:bc:9b:
02:ef:2a:1b:8c:2c:9a:63:29:01:e9:5f:ae:67:2a:51:2a:7a:
8c:84:73:57:9b:67:b3:93:88:a4:c8:70:bb:63:39:de:dd:1f:
c6:ce:1f:fc:bd:51:0f:f3:42:a6:43:4b:43:af:41:c4:44:01:
c4:30:95:5d:e1:7c:d7:f1:49:ba:a3:4b:6e:8f:cc:7b:d8:9c:
ca:d8:3e:b4:3e:94:1b:7c:6f:4e:eb:f3:38:a5:7e:1c:4e:da:
63:f3:28:ac:1d:23:bb:ec:86:c5:88:a5:ea:f4:64:a6:6f:9e:
44:2a:21:48:82:80:c1:85:1b:ba:d4:92:cb:6e:c5:c0:6c:b7:
35:40:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:11 2026 by rpki-client