
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: mNBWlivHASyNKpj5atHCbtB7P6MQjP0VmP/IkRgfl80=
Subject key identifier: 6C:00:06:6B:D6:B0:0D:64:5E:38:64:C9:F8:66:D5:7F:DE:F6:BA:27
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 04C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 04B8
Signing time: Sat 04 Apr 2026 23:42:08 +0000
Manifest this update: Sat 04 Apr 2026 23:42:07 +0000
Manifest next update: Sat 11 Apr 2026 23:42:07 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: mtEM/36qA9CyAjJaq8f2Y4zLuuVhNAjaHXH8J1lFMFY=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Apr 4 23:42:07 2026 GMT
Not After : Apr 11 23:42:07 2026 GMT
Subject: CN=69d1a1d0-7fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:6c:9c:9b:e8:b3:19:ea:90:d9:98:ba:b6:
30:3d:48:16:79:01:66:d9:0b:b6:97:5b:83:63:b2:
1e:9a:88:33:ca:87:2b:a8:67:3e:d4:e4:45:8b:c8:
63:47:04:9b:d4:b0:c1:0a:f2:be:65:e2:92:5d:c0:
07:fc:1e:60:40:00:e6:bf:a7:dc:c6:23:c0:86:47:
cc:c7:08:db:40:b8:49:4e:41:2f:39:4f:6c:da:f9:
f9:f6:1a:fb:c6:be:b1:a3:ca:4a:02:68:49:d3:8a:
dc:67:f3:e2:c5:37:92:57:af:5c:b9:31:c5:04:95:
13:1b:31:86:48:20:ef:e8:d2:0a:2b:86:16:97:66:
a2:18:32:a4:90:63:95:3e:99:ff:71:d7:c3:1a:ba:
50:dd:c0:97:64:57:ce:60:39:19:fb:00:22:8c:57:
fe:65:2c:5e:e7:80:88:a0:1b:fe:12:dd:1c:54:e0:
49:12:6d:a3:5d:a4:e2:ee:21:57:fd:75:7f:e0:79:
49:1c:09:5d:d9:f2:71:e6:93:5a:1f:79:dd:66:47:
e9:52:4c:ca:60:6a:e7:a8:a3:e5:f6:10:d7:bd:3a:
43:27:d8:d7:ec:cb:72:3d:7a:ab:25:06:f4:cf:41:
7d:c0:78:0b:de:80:1d:10:08:85:35:a0:5f:e8:15:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:06:6B:D6:B0:0D:64:5E:38:64:C9:F8:66:D5:7F:DE:F6:BA:27
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:18:93:90:8e:2c:af:24:af:b8:2a:18:71:04:28:4e:85:39:
7a:e3:e0:0c:20:89:84:75:72:db:bd:ef:7c:75:d8:8f:de:92:
4e:c4:f8:d4:f5:a9:a1:11:a4:67:75:db:c8:7a:af:4a:d1:94:
77:9e:e5:40:52:17:25:a7:a7:7d:5a:c4:cb:f2:a1:ab:4e:73:
ba:8c:b1:f0:93:46:53:bc:01:3c:1a:65:56:e3:2b:52:c9:1f:
0c:1e:83:eb:7c:79:2a:39:ca:00:00:dc:84:d5:2f:cd:8a:c3:
21:38:b9:45:9b:51:0c:be:59:52:89:5d:12:0c:48:04:ca:f3:
fa:88:77:a4:cb:d7:54:5f:4f:75:83:79:7e:7b:aa:53:5c:ae:
f0:c2:fe:22:2a:39:d0:b8:13:a3:02:c2:40:74:e6:55:5e:82:
6c:80:6b:62:88:83:40:bd:93:00:e4:3b:19:7d:65:19:85:bb:
ed:22:f0:13:77:b2:49:96:47:85:ca:d2:7e:c9:74:ba:c7:41:
a8:8a:62:35:98:71:d7:b8:d7:b9:f8:21:e5:5f:43:33:eb:83:
5b:93:2b:a0:c3:8b:df:12:04:46:ec:fa:ec:06:63:72:c7:d1:
15:d1:21:f5:44:ff:a4:62:fd:d7:ba:85:a6:40:33:18:f7:25:
ab:dd:d5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:07 2026 by rpki-client