
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json)
Hash identifier: az5AiED9VfPvc8h0ckzdJsMeJl8ODej48PuARyjkxvQ=
Subject key identifier: 63:56:B1:1A:4C:41:5F:6B:22:3A:0A:89:BA:D0:CC:D4:AA:AE:14:2E
Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Certificate serial: 075F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
Manifest number: 0757
Signing time: Tue 06 Oct 2026 21:54:21 +0000
Manifest this update: Tue 06 Oct 2026 21:54:21 +0000
Manifest next update: Tue 13 Oct 2026 21:54:21 +0000
Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: Am9GQVq4B2l2sAVUW4IzADMRk2bqp/f6uu2L0nyptaw=)
2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Validity
Not Before: Oct 6 21:54:21 2026 GMT
Not After : Oct 13 21:54:21 2026 GMT
Subject: CN=6ac56e0d-2714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:bf:fb:71:80:ea:b5:ec:e0:90:a1:39:e4:
c6:fc:6a:3f:e7:23:b6:d6:9d:1b:5b:4f:fb:ec:a3:
b7:87:0c:26:15:4b:ca:38:ed:c5:b0:31:c2:a5:87:
e9:fb:45:95:16:de:f7:ed:b4:91:2d:89:b6:57:26:
55:2d:54:1b:77:5b:0a:3c:50:88:be:b9:b7:d3:0e:
3f:3f:f2:23:cc:dc:d0:82:59:51:80:17:83:6e:9f:
3e:c0:16:37:00:12:f2:81:9a:5f:f8:37:aa:0f:ef:
b3:df:a4:94:08:39:ca:06:a1:c2:3f:ed:e6:5e:0b:
e2:45:b6:71:24:c0:30:bd:f3:33:12:f6:a0:25:30:
eb:6d:85:6a:78:42:e3:c2:25:85:c1:74:e8:2e:5d:
2f:ea:52:70:05:a8:74:ed:33:79:cf:30:8b:ca:8c:
93:19:dd:35:8f:14:ca:ed:00:6d:ae:aa:32:e4:97:
dc:6b:51:9b:63:36:24:92:d4:fe:db:6d:6d:8f:d7:
88:c6:7b:ea:6f:67:0d:38:38:f2:aa:55:11:ba:a5:
70:4a:6f:58:c5:69:80:69:40:5d:9e:3a:88:af:8f:
50:3a:02:4a:11:c3:47:5f:20:22:d0:dd:3f:1f:15:
2c:7b:ca:24:c5:21:41:e6:de:5b:c1:33:b5:a9:49:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:B1:1A:4C:41:5F:6B:22:3A:0A:89:BA:D0:CC:D4:AA:AE:14:2E
X509v3 Authority Key Identifier:
keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:33:f6:dc:78:29:5a:ea:9c:b7:0c:26:c7:50:ab:32:a1:79:
a4:b6:7f:5a:20:66:8e:61:84:5d:2c:c5:f4:13:61:5c:e4:23:
f5:11:74:77:a9:0d:5d:0b:3f:94:80:ee:40:ed:c1:04:cd:1e:
5b:be:12:23:b3:b2:6a:0d:b0:98:1b:a6:60:c1:aa:3c:14:8c:
e3:23:2c:f4:60:58:06:90:26:10:34:7b:33:4a:29:7a:42:3a:
97:ff:80:67:e6:51:4d:82:a9:c9:da:92:14:e6:23:2d:dc:71:
c3:5f:13:04:b3:ac:31:21:f0:53:a1:a0:71:7d:a6:59:0b:34:
c9:ed:83:17:04:a0:7d:8f:07:ae:36:5e:f3:3c:82:45:74:fb:
96:da:76:ed:7f:7c:23:ec:ce:84:f9:63:90:77:f6:8e:e6:fd:
c2:86:0a:5b:e3:1e:f2:4d:1c:a0:9f:a9:35:17:20:49:db:e4:
40:39:88:fa:53:26:f7:88:50:e9:3a:05:4e:73:51:4c:21:e8:
b2:86:72:6a:c1:e8:1f:16:a9:b3:76:c6:eb:e3:12:c3:77:8e:
a9:16:61:d6:7e:19:19:4b:5b:62:4c:f5:c7:9c:95:ca:f8:4c:
53:f8:07:5e:3e:71:cc:31:46:ab:9d:19:f0:19:93:78:69:70:
ce:99:9c:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1
QzlDMENDQjUwHhcNMjYxMDA2MjE1NDIxWhcNMjYxMDEzMjE1NDIxWjAYMRYwFAYD
VQQDEw02YWM1NmUwZC0yNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJu/+3GA6rXs4JChOeTG/Go/5yO21p0bW0/77KO3hwwmFUvKOO3FsDHCpYfp
+0WVFt737bSRLYm2VyZVLVQbd1sKPFCIvrm30w4/P/IjzNzQgllRgBeDbp8+wBY3
ABLygZpf+DeqD++z36SUCDnKBqHCP+3mXgviRbZxJMAwvfMzEvagJTDrbYVqeELj
wiWFwXToLl0v6lJwBah07TN5zzCLyoyTGd01jxTK7QBtrqoy5Jfca1GbYzYkktT+
221tj9eIxnvqb2cNODjyqlURuqVwSm9YxWmAaUBdnjqIr49QOgJKEcNHXyAi0N0/
HxUse8okxSFB5t5bwTO1qUnyWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNWsRpM
QV9rIjoKibrQzNSqrhQuMB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1
NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy
ODlfaFlaUXhuQlJjbkF6TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYjP23HgpWuqctwwmx1CrMqF5pLZ/WiBmjmGEXSzF9BNhXOQj9RF0d6kNXQs/
lIDuQO3BBM0eW74SI7Oyag2wmBumYMGqPBSM4yMs9GBYBpAmEDR7M0opekI6l/+A
Z+ZRTYKpydqSFOYjLdxxw18TBLOsMSHwU6GgcX2mWQs0ye2DFwSgfY8HrjZe8zyC
RXT7ltp27X98I+zOhPljkHf2jub9woYKW+Me8k0coJ+pNRcgSdvkQDmI+lMm94hQ
6ToFTnNRTCHosoZyasHoHxaps3bG6+MSw3eOqRZh1n4ZGUtbYkz1x5yVyvhMU/gH
Xj5xzDFGq50Z8BmTeGlwzpmcKg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:40:42 2026 by rpki-client