
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json)
Hash identifier: DdBTWmNsSclBLqmycy+uECwY4t6rRSGH98nJxqjWClc=
Subject key identifier: 0B:DA:D3:8F:22:66:BA:05:C7:7F:E0:00:84:71:02:27:5B:93:B5:DE
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
Manifest number: 290D
Signing time: Tue 18 Aug 2026 16:23:59 +0000
Manifest this update: Tue 18 Aug 2026 16:23:58 +0000
Manifest next update: Tue 25 Aug 2026 16:23:58 +0000
Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: hQYp5tcmZHvIaTHBYrrq29AxWjTQFLz25D5KKLlgDis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Validity
Not Before: Aug 18 16:23:58 2026 GMT
Not After : Aug 25 16:23:58 2026 GMT
Subject: CN=6a84871e-b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f1:e5:8a:08:b4:f8:50:f8:2a:d9:75:36:e1:
ca:25:46:48:ad:78:10:24:11:3c:a6:fd:fd:35:a8:
5b:9d:36:d2:8e:e6:75:f0:54:68:86:d0:56:57:7e:
e9:b5:cb:d8:f0:ae:ad:b7:ef:b0:7a:bb:a9:83:3e:
02:ad:ef:44:1f:bb:c8:aa:bf:3a:61:b7:44:3a:e2:
5b:14:fb:e9:8c:1a:48:69:ac:3d:35:5c:cb:c9:21:
dc:c1:38:f1:77:ea:a3:5f:f4:2f:c8:50:8c:b3:50:
7e:c3:76:a9:25:f6:d4:a8:3a:9f:a6:c7:6c:57:81:
59:60:1f:bf:e3:ba:53:a7:6e:b8:77:0a:ee:0c:08:
45:4f:7d:12:37:2b:da:4d:37:79:85:68:40:16:7a:
6a:65:b1:d1:1b:82:f6:a1:dc:51:31:d9:55:52:dc:
56:b0:a5:60:41:87:a3:3f:56:b0:2c:ff:c8:23:3a:
40:89:61:5e:67:c5:62:f3:aa:01:14:0d:0c:54:9c:
34:ec:d8:b6:16:91:1b:59:5f:c5:39:6f:b5:c6:d0:
1d:ad:b2:fd:5c:ae:14:a3:73:77:ef:ec:c5:ef:b6:
50:1f:a5:22:57:12:ca:95:c2:02:7b:d8:e2:9c:3a:
f5:f6:73:08:23:27:de:17:02:72:15:37:d1:84:d5:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:D3:8F:22:66:BA:05:C7:7F:E0:00:84:71:02:27:5B:93:B5:DE
X509v3 Authority Key Identifier:
keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:af:a4:c0:5f:c7:e7:35:ff:00:f1:f4:7f:0d:7b:2d:25:19:
74:5d:3a:a5:ac:95:64:8f:2a:ce:2f:f8:25:4a:59:c0:96:3a:
03:27:54:40:eb:82:4d:ca:a2:e1:e8:f4:a3:e0:33:53:59:8a:
d6:9a:93:c6:08:5b:d1:f4:93:b9:9a:f5:33:db:19:c3:ac:b9:
07:c6:c2:b4:da:66:cc:48:a5:35:4b:26:4d:85:b8:30:b5:3b:
04:07:c5:0b:59:52:e3:2e:1b:be:36:89:9d:2a:5c:ae:59:7c:
b0:53:5e:84:86:ed:9b:ed:48:28:aa:34:f4:04:55:00:f4:94:
f2:a5:55:09:46:bc:77:68:4c:f7:60:ae:9d:56:82:ef:bc:11:
2c:b7:66:7a:65:f3:16:de:2b:d2:0c:28:c1:f8:d0:69:05:3c:
b8:65:02:75:5c:d3:d0:d7:e0:2b:bf:4c:10:6e:eb:e5:c0:e4:
d1:4c:a9:25:68:83:e8:eb:3d:21:89:9d:84:4a:74:4d:a2:b0:
41:da:6a:09:7f:73:43:47:cc:11:ab:f9:6b:da:a9:f1:d2:f4:
52:04:a4:eb:2a:c9:82:11:b5:3f:17:97:1c:00:88:28:23:4f:
06:9e:40:8d:8b:6f:15:cc:03:df:c3:f0:fc:4c:92:01:61:c3:
e7:e3:69:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE
Nzk1RkZDODQwHhcNMjYwODE4MTYyMzU4WhcNMjYwODI1MTYyMzU4WjAYMRYwFAYD
VQQDEw02YTg0ODcxZS1iNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8vHligi0+FD4Ktl1NuHKJUZIrXgQJBE8pv39NahbnTbSjuZ18FRohtBWV37p
tcvY8K6tt++werupgz4Cre9EH7vIqr86YbdEOuJbFPvpjBpIaaw9NVzLySHcwTjx
d+qjX/QvyFCMs1B+w3apJfbUqDqfpsdsV4FZYB+/47pTp264dwruDAhFT30SNyva
TTd5hWhAFnpqZbHRG4L2odxRMdlVUtxWsKVgQYejP1awLP/IIzpAiWFeZ8Vi86oB
FA0MVJw07Ni2FpEbWV/FOW+1xtAdrbL9XK4Uo3N37+zF77ZQH6UiVxLKlcICe9ji
nDr19nMIIyfeFwJyFTfRhNVZBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAva048i
ZroFx3/gAIRxAidbk7XeMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw
NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE
X2Z4RS1PTUltbXZYbGZfSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIK+kwF/H5zX/APH0fw17LSUZdF06payVZI8qzi/4JUpZwJY6AydUQOuCTcqi
4ej0o+AzU1mK1pqTxghb0fSTuZr1M9sZw6y5B8bCtNpmzEilNUsmTYW4MLU7BAfF
C1lS4y4bvjaJnSpcrll8sFNehIbtm+1IKKo09ARVAPSU8qVVCUa8d2hM92CunVaC
77wRLLdmemXzFt4r0gwowfjQaQU8uGUCdVzT0NfgK79MEG7r5cDk0UypJWiD6Os9
IYmdhEp0TaKwQdpqCX9zQ0fMEav5a9qp8dL0UgSk6yrJghG1PxeXHACIKCNPBp5A
jYtvFcwD38Pw/EySAWHD5+NpYg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:57 2026 by rpki-client