
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier: XRJonArmeC9iwv7Uulx7gIWQGNOokF3yd25Gs5G7oME=
Subject key identifier: 83:0C:B0:A6:51:C5:7C:AD:43:BB:E4:C6:62:7F:C4:08:A1:79:0B:E8
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number: 016F
Signing time: Sun 05 Apr 2026 04:16:14 +0000
Manifest this update: Sun 05 Apr 2026 04:16:13 +0000
Manifest next update: Sun 12 Apr 2026 04:16:13 +0000
Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: lSO8/JvE7vLJo9Hk2C0MHySIysxJgUl1G32+5Orcluw=)
2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: 0cQ7lL+Dgw4MdHfwJ/NaEJmV6pZpv3TD2ijoWRCbMbA=)
3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: XulmFJ+sIF5UMyQAz/MmaZcZch5QE26KdzQqhFjBUzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Validity
Not Before: Apr 5 04:16:13 2026 GMT
Not After : Apr 12 04:16:13 2026 GMT
Subject: CN=69d1e20d-c700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:8a:5a:f3:b8:0f:4d:be:98:b8:3c:d0:e5:
22:23:3c:44:ba:64:59:70:da:ef:4a:bf:cb:6d:18:
f5:6a:42:4f:df:22:c9:a1:55:76:4d:3a:69:37:43:
3d:e7:d1:af:6f:da:de:f8:c6:a0:24:41:83:e3:41:
fc:03:11:8c:00:61:ac:75:d0:d9:48:22:f6:78:c8:
d1:de:1c:f9:9f:ef:16:73:df:67:a1:5b:d0:6f:64:
2e:fe:c5:a3:a0:d2:6d:2d:28:f1:d5:02:9b:c1:80:
d5:62:9a:d2:26:88:d8:40:c5:fa:1e:a6:a2:66:b6:
f4:25:28:bb:a6:13:2d:bb:ab:d0:fa:f9:99:21:9b:
ac:be:c8:b7:0b:69:1a:ce:a7:52:08:7d:08:22:a2:
83:e2:81:62:d3:23:c6:5e:d7:15:98:39:19:09:1a:
b7:75:f1:23:06:1a:43:26:3b:fd:f6:2b:cc:86:c0:
7e:c1:c5:bd:41:80:b9:27:0e:65:0b:f6:2d:9e:d8:
90:c7:e8:7e:3d:63:f7:df:a6:99:8d:9c:61:be:8a:
42:56:55:3c:76:45:b6:d3:d0:6b:c4:18:ec:fc:7c:
fc:69:de:20:a5:42:b0:29:83:7c:b8:e1:55:65:fd:
a6:ee:31:40:d9:d1:c0:f6:bf:32:66:9b:be:87:41:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0C:B0:A6:51:C5:7C:AD:43:BB:E4:C6:62:7F:C4:08:A1:79:0B:E8
X509v3 Authority Key Identifier:
keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:4e:de:90:d9:25:e9:f1:db:25:60:b3:88:26:29:bd:da:
a9:37:a1:02:1e:29:85:be:f9:5f:d2:b0:ef:8e:32:dc:fd:e4:
c0:67:86:ef:47:d0:84:26:58:64:e5:86:1e:79:d1:6e:3c:ba:
c1:d6:37:f0:0f:d1:00:ff:23:68:2e:18:fe:46:06:74:1b:18:
32:fc:ce:84:e9:ea:84:d7:86:1a:34:5b:2b:bd:5e:36:ac:b2:
63:b5:41:5b:1b:82:1b:a9:0e:1b:68:df:4b:f5:60:f0:70:f5:
0d:d8:4b:9d:6f:eb:3a:43:6c:33:a3:20:69:04:01:67:cb:fd:
91:18:3d:d4:76:d8:83:de:f3:1f:ab:47:3f:6e:43:25:ef:ae:
44:2b:0a:86:6d:2b:72:91:cc:43:fc:d1:13:72:4f:91:29:9d:
36:82:eb:68:c6:8d:c1:b9:70:14:18:c9:a4:dc:68:0e:00:24:
5b:94:4f:9b:96:b7:4c:c2:3b:00:15:d7:d6:6e:f2:4b:03:ef:
20:34:f9:e2:af:db:c9:41:55:9f:7a:86:a5:17:d7:81:e5:9a:
5c:ce:5b:a5:5a:6f:ad:ad:34:ec:1f:c1:ce:79:5b:68:15:b1:
be:68:00:a2:be:2e:ce:34:55:51:57:f9:47:4c:fb:76:e4:23:
ea:e6:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:21 2026 by rpki-client