
$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json)
Hash identifier: hHf4zixgWdldVozZDwG6+jUh323wI3En8mFIHOAW0vQ=
Subject key identifier: 19:D1:0B:A1:1C:B6:E9:F1:24:02:47:6A:DF:80:B1:56:CC:6D:53:0E
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial: 06F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
Manifest number: 06E8
Signing time: Sat 04 Apr 2026 21:55:52 +0000
Manifest this update: Sat 04 Apr 2026 21:55:51 +0000
Manifest next update: Sat 11 Apr 2026 21:55:51 +0000
Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: sdLuYYqyUJoryLKnZSUmv/bqHziFH3qRIsgHfbh8rls=)
2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: ZLw8huOg2nveXXA6ySB0lncxnJt9V0PAEh/Tv0xMDkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Validity
Not Before: Apr 4 21:55:51 2026 GMT
Not After : Apr 11 21:55:51 2026 GMT
Subject: CN=69d188e7-0b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:de:d3:80:7e:04:b5:76:9f:05:cd:4a:ca:
85:58:e3:d1:de:c0:fa:51:1d:0b:92:c5:7c:40:d9:
82:5b:f3:a6:9f:3a:76:fd:ac:80:0c:e7:9c:e0:7a:
14:0e:7c:6b:5f:e2:01:31:13:bc:a0:69:d3:c5:c9:
d3:a0:cb:b4:29:46:06:61:56:26:36:1d:68:3c:f6:
ba:7b:76:44:6e:95:d5:e3:a7:c4:69:e4:3f:06:87:
91:82:73:48:3b:d2:3d:5d:c1:44:37:1b:4c:b8:1e:
b7:2b:ff:50:48:32:90:c3:46:9d:7f:2c:22:fc:b1:
c2:9d:5f:37:f9:57:48:5f:cd:da:7b:09:b1:94:04:
85:9a:85:db:95:be:60:ed:c9:69:83:db:94:ad:a9:
4e:4b:bd:ce:66:b7:c8:a7:78:d6:ad:5f:90:0a:2e:
e8:56:f6:ed:8b:bd:b1:3f:db:51:de:9f:3f:ae:fd:
20:c1:0c:a1:5e:48:e7:9d:97:55:2c:e7:17:51:15:
98:50:83:61:8f:73:68:8a:0d:94:ad:d2:97:03:79:
2d:91:24:a6:d9:73:dc:6f:6a:1b:6f:7c:8b:93:9d:
3e:af:59:d7:30:5f:be:de:af:e8:42:ca:eb:c3:72:
46:bb:0c:77:93:18:6e:bf:fc:26:6c:1f:64:ab:3e:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:0B:A1:1C:B6:E9:F1:24:02:47:6A:DF:80:B1:56:CC:6D:53:0E
X509v3 Authority Key Identifier:
keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:65:a8:cc:dd:af:21:f0:e2:2c:79:a8:1b:85:7d:d3:02:da:
a0:38:fe:ca:c2:af:37:0c:93:8c:02:96:0c:b3:9d:f5:61:20:
ff:8d:bd:00:2a:ff:02:c3:f1:e6:fd:cf:7a:c8:d9:e4:07:e4:
4b:c5:2e:a2:f3:73:46:f5:87:f4:ba:92:de:cd:b4:6d:52:7b:
39:73:cb:14:87:22:82:89:6e:af:f8:c9:ce:81:e5:35:03:2b:
00:1f:b3:e9:fc:a1:28:31:34:84:c1:5b:5b:57:55:4b:1d:a7:
df:60:c8:ce:23:77:c3:ee:03:7e:99:13:4e:a5:4e:48:22:5b:
0e:65:e5:02:c7:95:ff:11:ef:07:f3:54:10:12:68:b8:c0:ff:
1c:ab:9f:68:1d:26:65:69:90:87:cd:c1:60:68:ac:9a:41:c5:
0d:00:78:08:1e:b8:00:91:77:93:f8:57:ce:ea:6b:59:d8:fb:
fb:4e:fe:71:d2:b7:9e:91:d2:91:97:ea:ba:a6:cc:d8:43:ec:
f7:5a:57:0f:64:60:eb:f1:54:3d:dc:be:db:03:06:a6:5e:61:
f8:90:fe:f2:84:48:91:4e:66:14:9f:a2:95:a5:4f:74:2f:57:
10:e0:23:7b:14:ed:55:c2:f4:2d:f0:aa:e3:76:24:b8:e6:d1:
71:36:79:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:57 2026 by rpki-client