
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
File: kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json)
Hash identifier: GpwQBA3R1rLCMpkQ1/nlW3K919WdmkWIVpmGWhGWt+Q=
Subject key identifier: C0:B4:05:14:89:94:4F:B1:7F:38:3D:BF:E2:3D:F8:87:92:1D:61:A6
Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Certificate serial: 04F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
Manifest number: 04EC
Signing time: Sat 24 Oct 2026 23:39:17 +0000
Manifest this update: Sat 24 Oct 2026 23:39:17 +0000
Manifest next update: Sat 31 Oct 2026 23:39:17 +0000
Files and hashes: 1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: uK2X9BPMJ5KQikyKs/Zeh0b4ONvs382IgOgYuS4CMq4=)
2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: 2diXZhIHeiTIXtGE7hgkGrF2mxwMF4mve/3rvi/DmaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Validity
Not Before: Oct 24 23:39:17 2026 GMT
Not After : Oct 31 23:39:17 2026 GMT
Subject: CN=6add41a5-aa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:d1:33:cc:39:35:64:a4:c8:39:63:bc:13:
7a:e9:43:30:8f:ee:bd:e6:f5:92:73:e8:ee:d0:22:
e2:39:33:59:8c:96:c0:4f:b9:f1:e0:ce:a1:95:48:
08:0c:b0:5f:e0:60:6c:41:a3:00:9d:f6:23:af:9e:
68:6f:f5:1b:ab:c6:26:e0:07:a2:4d:5b:df:6a:23:
5d:d0:d8:e8:57:35:2d:53:c3:d7:35:a8:db:f4:c7:
b6:44:77:9f:dc:dc:22:6c:2e:d2:c2:16:f5:c8:51:
d0:df:c6:6c:44:ac:93:23:39:78:83:de:d0:8b:cf:
fa:69:1d:c4:4e:90:83:b2:e2:2f:1b:72:f8:b4:b1:
7b:58:02:83:03:f3:47:53:78:59:e7:07:4d:d0:3b:
89:67:d6:35:27:ea:cc:e4:f1:3d:ba:34:8a:ac:8c:
f4:63:2b:3f:91:68:6f:18:5a:b7:2c:e5:87:4a:b4:
63:4e:40:7c:dc:db:3d:d5:d5:27:36:28:50:b1:d2:
06:05:9d:3c:11:08:0a:d9:5b:60:d4:4d:28:08:70:
af:8c:52:4d:7a:85:2d:89:d8:13:93:c2:6c:75:06:
7f:5b:04:1a:54:56:1c:09:7f:97:dd:73:64:d7:6e:
e0:88:78:f2:17:a1:5f:6f:ff:ea:13:d9:de:19:b4:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:05:14:89:94:4F:B1:7F:38:3D:BF:E2:3D:F8:87:92:1D:61:A6
X509v3 Authority Key Identifier:
keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:53:33:51:12:99:79:9d:8a:76:89:71:7a:25:35:28:3c:10:
a2:da:0b:59:0d:28:e8:a2:9f:41:34:03:8f:0f:3b:04:9f:1a:
be:c8:86:44:32:1b:5f:0b:94:61:11:03:73:99:b3:f1:de:51:
ce:4d:c1:20:f7:76:a1:da:1d:55:92:b0:8f:44:e9:c7:b6:8f:
9c:85:7c:2f:05:20:5f:88:02:3f:1d:3c:2e:f2:21:61:80:e2:
db:06:57:11:94:9c:57:7c:6f:05:81:7c:6d:c7:57:91:ce:8b:
d0:2b:78:3a:c4:b0:72:bd:4d:b9:87:1d:a3:5d:ca:86:55:6f:
27:ba:c2:88:e2:40:51:3e:99:22:c8:2c:93:cb:eb:81:5d:79:
1d:ed:58:65:91:e0:f9:63:0b:c9:16:fc:2f:9c:01:3b:ed:7f:
47:5a:1f:2b:19:db:2d:0f:a1:67:6a:05:9e:d6:45:8d:48:ef:
76:d8:51:0a:98:51:c6:75:8d:fd:14:b7:5b:8e:7f:28:03:24:
ff:0c:fa:a8:31:82:72:85:87:ae:a2:f5:97:16:34:2a:2e:59:
00:be:f9:d0:e7:bf:17:8a:84:df:6e:08:97:b7:8c:69:e3:02:
ab:f8:68:e9:c8:70:7d:92:b3:1d:b2:78:a5:ec:2a:20:8e:ec:
b6:e9:c4:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJEOTMxMTAvBgNVBAUTKDkwMUY5ODkxRkJGN0YyN0Q0MTZBMUVFMDZCMzFCMDE2
NUFBRTFEQzUwHhcNMjYxMDI0MjMzOTE3WhcNMjYxMDMxMjMzOTE3WjAYMRYwFAYD
VQQDEw02YWRkNDFhNS1hYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqznRM8w5NWSkyDljvBN66UMwj+695vWSc+ju0CLiOTNZjJbAT7nx4M6hlUgI
DLBf4GBsQaMAnfYjr55ob/Ubq8Ym4AeiTVvfaiNd0NjoVzUtU8PXNajb9Me2RHef
3NwibC7Swhb1yFHQ38ZsRKyTIzl4g97Qi8/6aR3ETpCDsuIvG3L4tLF7WAKDA/NH
U3hZ5wdN0DuJZ9Y1J+rM5PE9ujSKrIz0Yys/kWhvGFq3LOWHSrRjTkB83Ns91dUn
NihQsdIGBZ08EQgK2Vtg1E0oCHCvjFJNeoUtidgTk8JsdQZ/WwQaVFYcCX+X3XNk
127giHjyF6Ffb//qE9neGbR50wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMC0BRSJ
lE+xfzg9v+I9+IeSHWGmMB8GA1UdIwQYMBaAFJAfmJH79/J9QWoe4GsxsBZarh3F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkQ5My8wRjg3NEE3NDdG
M0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2MzhuMUJhaDdnYXpHd0ZscXVI
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tCLVlrZnYzOG4xQmFoN2dhekd3RmxxdUhjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkQ5My8wRjg3NEE3NDdGM0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2Mzhu
MUJhaDdnYXpHd0ZscXVIY1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE1MzURKZeZ2KdolxeiU1KDwQotoLWQ0o6KKfQTQDjw87BJ8avsiGRDIbXwuU
YREDc5mz8d5Rzk3BIPd2ododVZKwj0Tpx7aPnIV8LwUgX4gCPx08LvIhYYDi2wZX
EZScV3xvBYF8bcdXkc6L0Ct4OsSwcr1NuYcdo13KhlVvJ7rCiOJAUT6ZIsgsk8vr
gV15He1YZZHg+WMLyRb8L5wBO+1/R1ofKxnbLQ+hZ2oFntZFjUjvdthRCphRxnWN
/RS3W45/KAMk/wz6qDGCcoWHrqL1lxY0Ki5ZAL750Oe/F4qE324Il7eMaeMCq/ho
6chwfZKzHbJ4pewqII7stunEiA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:48 2026 by rpki-client