
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json)
Hash identifier: CWFeliU3NtfgpLS0iQbln4QDm8BZxkAMLS9Z8FVn64w=
Subject key identifier: 93:91:59:B9:F3:A0:8D:64:83:6A:AD:53:C0:E5:4E:17:6D:DE:74:A8
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
Manifest number: 01CD
Signing time: Wed 17 Jun 2026 03:33:19 +0000
Manifest this update: Wed 17 Jun 2026 03:33:18 +0000
Manifest next update: Wed 24 Jun 2026 03:33:18 +0000
Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: 1CYtRe+aRYHxj7BredlURBGm/3n6v9h82bSZBKfQgd0=)
2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Jun 17 03:33:18 2026 GMT
Not After : Jun 24 03:33:18 2026 GMT
Subject: CN=6a32157f-8e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:be:d5:35:6e:91:e3:b5:7b:09:84:29:33:
bc:ce:02:f6:69:1e:24:d3:8d:0f:f9:f0:8f:a2:e5:
f9:23:ad:91:14:5e:ff:bf:85:7e:e4:ee:1e:b2:7c:
93:60:22:e8:b1:23:fd:0e:ad:ee:29:7a:28:7d:8b:
bd:17:2e:26:42:7c:5b:51:30:80:7b:80:c0:7d:aa:
82:26:4d:d1:6f:a0:86:1e:be:f6:f8:0c:05:8e:b7:
3a:08:a6:6e:54:71:b9:07:ea:3d:5b:99:9d:35:2e:
2d:5f:2e:03:c1:a7:97:7f:72:2a:8e:50:63:6a:ea:
fe:0b:13:6d:8a:29:f4:2d:be:ff:64:fd:fa:c5:cb:
16:a9:f6:fc:93:5a:5a:d8:75:fe:e3:ae:70:dc:85:
64:58:78:6b:73:97:52:7a:0b:17:25:26:06:09:e5:
eb:6a:66:69:05:e0:5c:63:d7:ec:fa:c0:42:21:c6:
c5:5f:50:0b:f9:e5:0e:c9:67:e5:9a:d7:86:f4:b1:
57:b6:0d:2c:21:87:4a:6f:47:52:ed:55:62:1d:d7:
07:9a:5f:1f:37:3b:85:07:f1:54:c3:48:5d:8e:ac:
87:d9:24:f2:2a:18:90:23:ca:e0:e4:c3:34:9b:43:
90:55:08:7e:8c:d0:d1:88:1b:6b:92:68:98:4b:1d:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:59:B9:F3:A0:8D:64:83:6A:AD:53:C0:E5:4E:17:6D:DE:74:A8
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:06:b6:92:ef:71:15:14:71:91:0c:9c:53:8f:cc:9e:6d:4c:
f4:52:1d:be:ab:31:1d:9e:98:13:f5:02:ea:04:e9:a8:e5:76:
a4:2c:13:8c:5b:27:9f:eb:85:e1:24:12:2b:d4:a7:49:7a:ce:
7c:8a:37:8e:f1:10:f0:a0:b7:97:b8:6b:d6:5d:f4:39:8f:be:
cc:8d:44:87:ae:fb:4f:a5:48:fe:e7:64:66:e1:52:0c:07:96:
84:61:7b:90:d3:84:29:81:f2:04:22:28:67:e4:d8:2f:68:c7:
c9:de:ea:a8:b2:d2:ba:18:47:90:9a:30:bb:b4:89:c8:9e:b8:
fa:61:f4:ec:32:7d:5b:2d:d2:f7:e0:a3:3b:66:66:52:6b:12:
3e:3d:05:d0:cd:4d:e8:f4:88:9b:a7:72:48:b3:2d:eb:0c:c0:
fe:7a:3d:b8:99:93:14:e5:42:58:e9:9e:39:63:23:be:57:a2:
c7:24:c5:64:14:06:4b:90:90:b1:8d:f0:02:8c:65:64:1c:f4:
61:1c:e6:a5:e6:7a:a7:e9:ff:70:13:af:28:a0:eb:6a:9b:cc:
c2:45:1f:2f:55:26:f8:6a:31:6d:1d:c7:c4:d8:c0:90:a6:9d:
07:8e:f5:0e:42:9a:58:39:02:6f:a4:2a:11:a5:45:ca:9f:1b:
56:e5:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:07:34 2026 by rpki-client