
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json)
Hash identifier: pTY2nVQORQbfZp9r23Vwzmxpf3ZCb2dWIKAzkAxhbN8=
Subject key identifier: EF:9A:48:83:86:8C:0B:4D:66:56:E3:82:F0:7E:A9:77:81:40:A9:D4
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
Manifest number: 01E5
Signing time: Mon 03 Aug 2026 04:17:40 +0000
Manifest this update: Mon 03 Aug 2026 04:17:39 +0000
Manifest next update: Mon 10 Aug 2026 04:17:39 +0000
Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: UAFPoTuKfED5SL4IIi74UD0AcPN4POCTajx2r28cY3I=)
2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 04:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Aug 3 04:17:39 2026 GMT
Not After : Aug 10 04:17:39 2026 GMT
Subject: CN=6a701663-3df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:b5:2c:15:d2:3c:17:79:93:37:fa:ff:e7:
93:10:d5:d4:78:01:fe:8c:70:14:6d:d5:a6:c1:f0:
49:c5:e9:72:48:1d:49:b3:9d:bf:36:ba:98:e0:fe:
97:24:01:4f:06:01:6e:de:45:e7:b1:8e:1a:6a:83:
3d:68:f3:51:08:e0:4c:dd:77:1d:d6:04:8c:4b:59:
1b:f5:11:d2:b1:34:5f:f7:18:72:29:39:36:2a:51:
10:93:c5:7e:43:b8:1d:60:f6:4b:43:19:d8:28:86:
5b:a4:9a:a3:c8:ca:1c:82:b7:6c:da:f1:fa:e4:4a:
ea:17:6a:17:13:aa:54:f6:ef:77:3b:8b:17:a9:01:
20:dc:82:d5:6c:62:71:27:5a:99:e9:a5:29:7d:2b:
ad:59:1f:aa:80:19:2e:9c:82:c1:70:0e:07:59:87:
b2:9e:9c:bd:cd:47:ab:b2:27:1f:de:c0:97:14:6d:
4d:83:50:b7:d1:73:e1:a7:b5:66:4d:4a:dc:31:c4:
87:7c:75:50:89:70:84:c0:dc:c8:57:2f:1d:c5:e0:
ef:ba:e5:bf:b0:25:96:cc:63:be:aa:17:d4:3a:08:
e1:c0:be:72:90:b3:2d:0e:90:a6:a4:e6:2a:6e:07:
4a:18:77:e9:b8:10:f0:a6:a6:ab:44:af:9c:d5:07:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:48:83:86:8C:0B:4D:66:56:E3:82:F0:7E:A9:77:81:40:A9:D4
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:14:e9:10:e7:f5:39:25:03:c7:a3:66:c3:c8:85:56:3f:
c6:0c:ae:19:ba:6a:76:1d:b0:03:8f:a3:3b:a7:20:06:d5:2a:
b7:64:06:bd:05:70:95:e8:b6:dd:2d:66:8c:50:d3:a1:9d:22:
f3:23:6e:a1:fd:e0:4e:3d:54:23:05:31:97:11:b6:24:a9:a1:
8d:fe:2a:31:1e:79:96:af:09:bd:96:66:c6:38:0b:79:f3:c3:
90:c4:ad:08:18:9e:3b:58:db:33:0f:8e:6e:b6:5d:79:b5:61:
6c:18:94:0c:b2:05:be:06:84:5f:89:ca:1e:77:eb:c8:31:78:
0f:78:1f:95:20:d6:0a:92:2f:66:00:19:2b:41:b3:c7:14:f7:
b0:e0:04:79:68:aa:a1:af:83:48:26:94:a1:e3:04:47:52:60:
6f:3c:4f:ba:7e:3d:2c:8d:db:53:1a:69:f2:0d:87:39:6d:09:
82:59:28:d2:5c:ea:d5:f7:80:e4:4e:a1:0c:48:61:ae:da:3f:
6f:89:20:9b:bd:0f:23:03:d9:81:12:6b:b4:03:a7:a6:0c:35:
7c:06:a6:88:06:1c:de:bd:2d:71:de:a0:21:f0:bc:75:fd:a1:
a1:c7:03:03:22:49:44:be:14:38:45:64:4c:4d:e4:96:22:70:
5e:da:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 20:59:18 2026 by rpki-client