
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
File: kFJUC21MqMzkC0GIThQSoE6hRRA.mft (raw, json)
Hash identifier: xDvkbJAhZcD9fU2EgufImUv233M86SDTCK0g8BzVt/s=
Subject key identifier: 89:89:88:9F:22:EB:1E:22:C6:2E:30:E9:F0:D4:52:7D:72:E2:E6:0C
Authority key identifier: 90:52:54:0B:6D:4C:A8:CC:E4:0B:41:88:4E:14:12:A0:4E:A1:45:10
Certificate issuer: /CN=A911F03D/serialNumber=9052540B6D4CA8CCE40B41884E1412A04EA14510
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFJUC21MqMzkC0GIThQSoE6hRRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
Manifest number: 18
Signing time: Tue 13 Oct 2026 09:49:15 +0000
Manifest this update: Tue 13 Oct 2026 09:49:14 +0000
Manifest next update: Tue 20 Oct 2026 09:49:14 +0000
Files and hashes: 1: kFJUC21MqMzkC0GIThQSoE6hRRA.crl (hash: DecFvmCyQO6Fn7WTThyuH9S28Cfjc2vbAAXmaiamnP8=)
2: 5ZHbGzaHhO5vmkIc_2cuAO4e23Y.asa (hash: G0qmKjNTr8jIZ/n0FiAPLYGNkkaaeUO02BWo2C6Q9tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.crl
rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFJUC21MqMzkC0GIThQSoE6hRRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F03D, serialNumber=9052540B6D4CA8CCE40B41884E1412A04EA14510
Validity
Not Before: Oct 13 09:49:14 2026 GMT
Not After : Oct 20 09:49:14 2026 GMT
Subject: CN=6acdfe9b-ed46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:4c:9a:29:90:6c:e0:26:6c:69:d3:cc:fe:
75:27:92:e9:48:0d:3f:94:98:18:f1:04:1b:1d:b3:
17:97:53:c1:d7:27:35:21:5e:4a:17:24:79:ff:60:
0c:9b:5e:43:2c:a1:2d:ef:8f:d7:9d:6d:36:69:17:
60:15:61:34:84:3d:c5:f9:ea:a1:1d:e2:9e:a1:92:
f6:ad:ad:20:9e:99:2a:35:9c:48:38:c5:3e:9a:ff:
4f:9b:5c:ce:ae:eb:50:2d:a3:e2:3e:84:f9:3a:7a:
07:ca:68:5d:20:de:02:b8:77:50:dd:63:44:8b:c6:
ea:62:1a:38:46:51:bb:d8:2b:b5:cb:20:99:d2:55:
57:ed:a8:da:49:bd:2f:63:5f:ae:00:15:3c:51:32:
ee:38:35:7d:d9:8a:d9:d8:b5:80:b4:53:74:c8:14:
3d:5b:63:35:37:e7:10:dd:f2:c0:a7:dc:49:0a:c3:
27:81:af:87:69:28:22:8f:4e:f3:2c:fe:5b:4c:ac:
de:9a:69:7b:d9:48:2b:c6:c3:bc:c9:cf:29:96:df:
4e:99:11:18:35:f6:96:58:02:fd:3c:37:9b:a9:7d:
21:ea:a0:6e:ba:be:3e:11:7c:0c:01:1a:eb:36:76:
67:c8:6d:6c:c2:27:7f:0f:ec:38:0d:5b:74:52:f7:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:89:88:9F:22:EB:1E:22:C6:2E:30:E9:F0:D4:52:7D:72:E2:E6:0C
X509v3 Authority Key Identifier:
keyid:90:52:54:0B:6D:4C:A8:CC:E4:0B:41:88:4E:14:12:A0:4E:A1:45:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFJUC21MqMzkC0GIThQSoE6hRRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F03D/0BC56DE6A74511F1BFB1A9176E11F970/kFJUC21MqMzkC0GIThQSoE6hRRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:06:62:4a:ee:b5:11:5d:52:35:8e:fc:d6:ba:dd:4a:85:
d3:f8:e8:32:7e:56:fc:26:a9:c6:fe:c3:8c:b0:61:c9:bf:e7:
a5:d0:e2:23:56:1f:fc:6e:10:5b:b8:b5:85:20:0e:49:99:bd:
d4:49:65:c2:ec:01:b4:5c:a2:2a:83:86:08:47:82:c8:02:71:
6d:8a:9c:09:46:51:8c:75:87:be:64:a9:b8:68:51:49:e1:29:
d8:72:73:53:36:c2:95:24:74:63:4c:65:dd:b6:45:81:52:64:
3a:02:69:ec:ac:0a:4a:71:16:b6:33:50:aa:ca:61:15:37:f8:
76:69:b2:2d:72:92:cf:98:00:96:6e:c2:a9:92:90:c6:2d:bc:
fe:47:43:a0:2d:90:33:2f:f1:95:bb:3a:b9:f7:ae:03:e6:fe:
ee:67:35:1b:4f:f6:22:bf:4d:4f:d0:a2:3a:a2:6a:e6:ba:5c:
62:68:de:86:57:1a:10:1c:4c:08:3d:a2:39:ef:05:d8:81:a7:
8f:76:8d:f2:fa:38:ed:0f:90:62:b0:81:66:d8:f2:4d:45:f1:
e5:98:8c:63:4c:c2:11:3f:8e:23:52:77:07:c4:f4:18:08:9d:
77:3c:1b:c8:ad:53:a5:14:b3:2e:5f:5a:1d:9d:14:e6:07:63:
46:df:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:53:07 2026 by rpki-client