
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
File: _KtbpyYSYFeOSNmqwBIRqzpaIwk.mft (raw, json)
Hash identifier: gK+3fzpSlf90iNH7cc7DWu9xyALdLqNedHGMfy6YG+0=
Subject key identifier: 6E:34:BB:8E:ED:AD:CC:DE:5C:5B:20:F8:84:1A:28:2D:95:7E:2A:E4
Authority key identifier: FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
Certificate issuer: /CN=A9186214/serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
Manifest number: 36
Signing time: Sun 26 Jul 2026 15:38:02 +0000
Manifest this update: Sun 26 Jul 2026 15:38:01 +0000
Manifest next update: Sun 02 Aug 2026 15:38:01 +0000
Files and hashes: 1: _KtbpyYSYFeOSNmqwBIRqzpaIwk.crl (hash: KnliJtoYVl/Rw5mvhLOrLMaFCiGG2Ri4Loa9Fs3OC3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Validity
Not Before: Jul 26 15:38:01 2026 GMT
Not After : Aug 2 15:38:01 2026 GMT
Subject: CN=6a6629da-d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:ec:2b:00:c1:a4:48:5a:6c:fd:cb:80:25:
ec:6d:78:37:c2:18:d7:dd:15:fa:10:f6:25:7c:8b:
a9:b7:1f:ae:fc:9d:29:f5:c1:d0:12:9b:3b:e0:36:
13:52:11:d5:96:a6:9c:e9:ce:19:0a:66:6e:a4:9d:
bb:82:d1:12:cb:f6:b4:e1:aa:07:f4:30:f5:56:e1:
67:e9:74:c0:54:14:96:b4:d7:19:78:25:64:f1:d7:
58:07:cb:ec:ee:0d:90:9f:38:0c:dc:15:f5:90:cb:
03:fb:5a:d4:b0:62:a8:98:25:d8:2a:99:13:d3:81:
83:fc:ce:0d:98:a4:14:98:c4:e9:01:80:4d:07:eb:
cd:0a:d3:0f:f2:c9:63:e3:c6:35:0b:10:b2:6b:a3:
51:4a:c8:ea:3f:8c:93:65:b1:a1:1c:f3:e4:ef:e4:
46:ae:b9:18:30:c8:b5:08:22:c6:3a:f1:d7:7c:a0:
b5:c7:b2:97:f5:5d:1a:f5:bd:f6:13:8f:31:06:08:
e1:91:57:13:85:59:d9:d7:40:d6:37:c2:60:05:f0:
6d:24:95:1b:9e:2f:32:d0:b6:df:f1:15:78:89:36:
85:6c:6a:fb:06:01:5e:d7:11:0b:b2:50:1b:79:99:
2e:14:d0:ce:e6:ea:dd:91:18:70:08:f7:d6:30:a6:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:34:BB:8E:ED:AD:CC:DE:5C:5B:20:F8:84:1A:28:2D:95:7E:2A:E4
X509v3 Authority Key Identifier:
keyid:FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:bf:14:28:61:a1:6e:64:db:f5:ee:b5:90:3e:12:02:1d:a1:
09:6d:af:4b:ed:22:2a:5c:4c:43:20:f5:73:31:b6:44:66:02:
c1:fb:5d:3b:a6:c3:c0:8f:90:b2:fa:b0:2b:3d:ba:da:93:22:
ce:d3:fc:60:ae:8b:75:7b:84:c6:b8:99:38:05:17:7c:c8:d9:
4f:4e:0f:71:2e:fe:29:a0:e2:eb:98:f2:cb:5a:51:3a:78:4e:
65:10:80:b9:d3:17:39:4a:37:84:4b:53:48:12:42:08:74:a6:
3a:08:c5:7b:0a:66:23:bf:c6:dc:b8:44:e3:10:e0:82:16:08:
3e:55:66:0d:a8:05:9b:3e:75:76:a9:d9:1d:04:a2:58:65:b5:
c9:bc:03:46:ea:a0:27:1a:01:94:c2:15:9b:0e:9b:fa:46:4f:
5d:b1:47:b1:fd:9d:a4:90:e3:b4:92:de:fe:c4:16:17:a5:b3:
df:78:05:15:07:00:90:0a:bc:cf:8e:87:2b:74:68:bf:1b:52:
00:7d:6a:a5:dc:5e:b4:51:4d:cc:54:11:1d:fd:10:1d:0a:43:
2e:cd:e8:0b:83:36:63:09:25:af:3b:44:6a:70:26:fb:d9:8c:
a4:b4:82:d8:b0:bc:c3:bd:59:b3:79:97:38:c6:90:b6:41:73:
19:2c:9f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:17 2026 by rpki-client