
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json)
Hash identifier: cwSaJC0d+X3PdKXOxnK9UP8tZ3bmTbkREbX6uzSSGcE=
Subject key identifier: CE:A9:75:4E:E3:BA:22:6F:16:CF:E6:F5:3C:61:CC:DA:D5:2F:19:FD
Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Certificate serial: 04D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
Manifest number: 0683
Signing time: Mon 12 Oct 2026 23:57:03 +0000
Manifest this update: Mon 12 Oct 2026 23:57:02 +0000
Manifest next update: Mon 19 Oct 2026 23:57:02 +0000
Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: CHPPdM733so6I8CYiC9H1dAJEbi/IjvXGpN1s/IpXxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 23:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237 (0x4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Validity
Not Before: Oct 12 23:57:02 2026 GMT
Not After : Oct 19 23:57:02 2026 GMT
Subject: CN=6acd73cf-24f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:96:32:e3:fd:ca:69:f6:11:b6:ad:a1:45:
a7:81:2f:91:4d:6d:c2:9d:7c:18:b4:37:87:01:c8:
bc:2f:68:a3:d3:ee:63:ce:b8:7f:73:68:ca:08:3e:
58:57:ca:09:26:47:41:11:98:2f:d4:c5:34:16:ae:
4f:5f:27:99:03:12:65:58:da:8b:d8:30:04:13:b4:
39:17:44:4f:08:54:c7:71:98:50:a7:a3:1b:1a:0c:
f7:bc:e1:81:ae:5d:5e:ec:44:86:5f:d3:cc:c2:24:
8d:d3:c7:3e:d7:27:7b:28:01:50:d5:75:02:53:fc:
f5:f4:60:c4:da:b9:fe:ab:92:5b:ed:d7:66:3c:5b:
11:78:3a:a8:5c:91:8b:22:8e:2e:a3:5d:ee:2a:5a:
83:93:42:f0:68:2e:d9:ba:60:b0:7e:a7:15:94:17:
2b:10:59:c5:5a:38:e5:00:57:89:9b:57:7d:b4:67:
0b:6f:c3:e6:e8:0e:41:db:ef:11:9f:a1:3c:76:8a:
da:8d:6e:ed:78:e7:d7:e0:e8:cb:9f:f8:67:36:47:
11:b3:7c:11:2e:a1:a6:4e:12:af:9f:54:27:f0:da:
52:9d:9f:ca:dc:81:c2:cf:d6:be:0f:3e:1e:55:65:
ab:bf:9d:e8:f4:0c:04:45:ae:e5:a0:13:50:5e:de:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A9:75:4E:E3:BA:22:6F:16:CF:E6:F5:3C:61:CC:DA:D5:2F:19:FD
X509v3 Authority Key Identifier:
keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6c:96:c4:6d:64:19:9c:55:37:95:50:e7:d2:f7:6b:35:f3:
40:e1:fd:64:84:66:5a:a5:9c:e7:b2:f6:83:07:c7:b3:15:b8:
8d:81:b6:ad:2d:e4:b7:e4:8b:99:15:8f:27:dd:3c:9e:a5:f0:
62:25:b4:0d:47:ab:f0:c6:ce:32:50:fd:0b:5c:99:a4:78:66:
b2:d7:52:05:92:95:39:0a:71:20:4f:56:55:6f:bf:2c:f9:a6:
09:84:bc:7d:97:e0:9a:93:0c:93:bb:0b:6c:11:fa:de:f1:48:
5e:67:d2:74:e6:29:74:c9:3d:5c:ee:0b:4f:1f:3b:55:e3:07:
d9:fd:06:6c:5e:08:9c:dc:18:e9:c5:48:a4:a6:5b:e9:69:e6:
fe:16:77:35:23:c6:2e:ce:6f:c3:3d:06:97:9c:d9:7e:d4:d1:
1f:8d:3a:d5:d0:6b:35:0a:14:5d:20:1d:57:8e:fb:e4:39:4f:
0d:2d:bb:ac:18:e6:e6:8f:d5:1f:c6:9b:d6:4e:46:c2:de:b5:
8b:1a:9d:df:51:11:6b:20:86:87:fa:e9:e2:37:81:5b:86:aa:
04:3f:56:53:90:04:96:76:15:07:5e:46:e8:62:74:00:1c:a2:
ba:36:cd:0b:4b:91:8c:55:b2:25:04:3d:de:b9:5e:f1:b5:21:
cf:c7:f9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:48:41 2026 by rpki-client