
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json)
Hash identifier: 3bumDRKohntBlUaALuuQaMaqc4oy4+YM8aZW7uNW8KM=
Subject key identifier: A4:95:E6:1F:62:23:98:BF:98:1D:99:5A:B5:B4:F4:B0:E1:79:68:7F
Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Certificate serial: 0746
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
Manifest number: 073E
Signing time: Tue 18 Aug 2026 22:11:23 +0000
Manifest this update: Tue 18 Aug 2026 22:11:22 +0000
Manifest next update: Tue 25 Aug 2026 22:11:22 +0000
Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: qAInb0GhvHCJDLSMIvmhnoSwjST1TNoGCxt9xry/LZY=)
2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Validity
Not Before: Aug 18 22:11:22 2026 GMT
Not After : Aug 25 22:11:22 2026 GMT
Subject: CN=6a84d88b-0ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:63:b7:8c:49:8f:c6:bf:1a:99:56:1c:0c:
cc:ec:d6:3a:f9:2a:15:23:8d:f7:aa:86:36:e0:4f:
2b:23:af:21:50:70:a4:5f:56:34:6f:aa:7a:74:87:
95:8c:29:95:b7:6c:49:85:1b:7e:5e:1f:82:b7:7d:
8c:e4:fd:1c:ca:ac:19:ac:24:e3:2d:44:aa:73:4e:
d0:d6:21:47:5f:9d:a1:80:3e:43:a6:e0:66:f7:ea:
6c:11:00:26:96:b6:a2:8c:73:b4:24:4d:dc:64:1d:
7b:5f:24:7f:f8:c5:bb:59:6a:9e:65:40:3c:7d:6f:
49:d6:ec:eb:cb:57:9f:b3:17:9e:a2:5c:72:39:86:
ca:f6:ec:f5:6c:ad:f7:6b:94:42:5d:49:22:14:00:
99:3f:90:9a:6a:35:21:31:e0:3d:e7:56:d2:04:fc:
ae:2c:62:dd:e0:09:6d:14:0e:4e:56:ca:13:e4:a9:
07:5f:92:e0:84:19:91:dc:ab:86:7a:a5:02:a6:f7:
1f:4f:e4:cc:f1:0c:5b:37:11:c9:47:41:0c:ab:86:
45:64:c3:6c:4a:11:a4:db:ad:fc:69:60:fa:a3:5d:
12:f5:df:9f:12:69:c0:b9:b2:25:85:38:1e:12:c8:
01:75:d5:08:49:f3:68:e8:34:f2:be:b2:61:72:10:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:E6:1F:62:23:98:BF:98:1D:99:5A:B5:B4:F4:B0:E1:79:68:7F
X509v3 Authority Key Identifier:
keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:fc:e8:bf:2c:cd:dd:b4:4e:af:f0:38:5b:b9:90:68:aa:
b7:e2:34:b7:a7:f8:34:91:ba:8e:9c:c8:de:4f:4e:13:bd:dd:
5f:d3:06:9c:ad:1d:16:25:81:50:aa:40:f4:29:a2:24:20:c1:
29:96:25:16:99:61:de:70:6f:7d:54:6d:51:18:38:24:8f:91:
04:36:5f:83:ee:ce:da:49:e3:45:c2:5c:ac:a8:0c:70:7b:d9:
0b:5e:8f:1d:6a:72:d7:e2:b5:0c:aa:0b:20:c6:11:53:f8:0d:
a4:ba:b3:8f:b3:4a:9a:ad:76:46:40:5e:f0:2f:4b:a0:24:b0:
fd:50:7c:15:79:7e:7b:ab:94:12:ad:d1:ce:f8:6d:a1:18:29:
6c:36:e7:3a:05:65:89:de:af:36:2b:98:88:88:52:63:90:ee:
05:c3:3c:99:61:1b:d7:04:d5:3b:b4:78:00:24:19:c6:cb:8e:
5b:90:41:a5:ad:98:12:aa:c8:a6:14:6e:4a:3a:82:54:89:a3:
50:51:1a:57:a1:47:df:91:f6:06:28:e9:28:39:35:d5:35:f4:
f2:03:b5:a6:a4:2e:bd:4b:f9:3d:a0:58:47:76:ed:8e:ff:ae:
70:2f:b0:2c:0e:35:ce:59:2c:69:aa:eb:ad:c2:f0:de:4c:2c:
fe:93:1d:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1
QzlDMENDQjUwHhcNMjYwODE4MjIxMTIyWhcNMjYwODI1MjIxMTIyWjAYMRYwFAYD
VQQDEw02YTg0ZDg4Yi0wZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkzJjt4xJj8a/GplWHAzM7NY6+SoVI433qoY24E8rI68hUHCkX1Y0b6p6dIeV
jCmVt2xJhRt+Xh+Ct32M5P0cyqwZrCTjLUSqc07Q1iFHX52hgD5DpuBm9+psEQAm
lraijHO0JE3cZB17XyR/+MW7WWqeZUA8fW9J1uzry1efsxeeolxyOYbK9uz1bK33
a5RCXUkiFACZP5CaajUhMeA951bSBPyuLGLd4AltFA5OVsoT5KkHX5LghBmR3KuG
eqUCpvcfT+TM8QxbNxHJR0EMq4ZFZMNsShGk2638aWD6o10S9d+fEmnAubIlhTge
EsgBddUISfNo6DTyvrJhchDpCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSV5h9i
I5i/mB2ZWrW09LDheWh/MB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1
NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy
ODlfaFlaUXhuQlJjbkF6TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX0H86L8szd20Tq/wOFu5kGiqt+I0t6f4NJG6jpzI3k9OE73dX9MGnK0dFiWB
UKpA9CmiJCDBKZYlFplh3nBvfVRtURg4JI+RBDZfg+7O2knjRcJcrKgMcHvZC16P
HWpy1+K1DKoLIMYRU/gNpLqzj7NKmq12RkBe8C9LoCSw/VB8FXl+e6uUEq3Rzvht
oRgpbDbnOgVlid6vNiuYiIhSY5DuBcM8mWEb1wTVO7R4ACQZxsuOW5BBpa2YEqrI
phRuSjqCVImjUFEaV6FH35H2BijpKDk11TX08gO1pqQuvUv5PaBYR3btjv+ucC+w
LA41zlksaarrrcLw3kws/pMdIw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:09 2026 by rpki-client