
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: xW8IM0BmaYUrkem3cv2qOg6Rju+J+7fDK3yN4h5ToiA=
Subject key identifier: 41:6E:5F:3D:79:E6:E2:51:73:C4:E3:48:5D:34:D7:9F:C9:7B:85:D5
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 07AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 079E
Signing time: Tue 18 Aug 2026 21:52:13 +0000
Manifest this update: Tue 18 Aug 2026 21:52:13 +0000
Manifest next update: Tue 25 Aug 2026 21:52:13 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: CA0/2a4/RvdFU9787rxeCnok3u+L/L7UY/939kDWCsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Validity
Not Before: Aug 18 21:52:13 2026 GMT
Not After : Aug 25 21:52:13 2026 GMT
Subject: CN=6a84d40d-a8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:e2:0d:3c:4c:f5:27:28:9a:66:a2:97:51:
49:7c:34:84:50:32:b4:a3:81:06:98:9e:95:96:4b:
e2:78:71:12:9f:80:ca:fc:ed:a5:d3:06:27:5e:c3:
82:8c:ce:ee:53:ba:c1:52:f5:71:f7:c6:da:06:5a:
3f:09:12:2b:57:c6:5e:cc:39:29:fb:04:9a:36:44:
d8:15:60:3a:f1:e4:e2:d0:77:7e:ea:76:00:78:8a:
90:4e:20:31:1c:17:28:bc:38:af:23:24:08:37:41:
8c:91:03:ea:ce:b5:c0:0c:f0:74:e3:54:92:38:90:
a6:8d:4b:6c:89:5f:6a:b4:4e:81:80:66:cb:f5:ce:
7f:9a:d8:76:c6:a4:e6:b0:6e:8b:98:5e:36:65:97:
02:72:da:49:4b:70:c2:80:36:b3:f4:17:9d:e1:21:
79:ae:1d:c5:59:8a:8d:25:91:a8:5c:6c:25:0f:f0:
18:79:c6:41:11:fa:46:34:90:c9:78:3a:d7:c9:73:
02:9c:ce:90:3a:ea:20:6f:60:3e:41:21:d0:d6:ce:
c2:89:b0:f3:de:b8:cc:c6:95:60:e3:b3:01:69:69:
ea:70:36:19:64:a0:3f:3f:cf:32:20:06:1d:cb:5d:
13:08:77:e2:84:ea:ac:0a:76:5f:ae:db:51:0c:ec:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6E:5F:3D:79:E6:E2:51:73:C4:E3:48:5D:34:D7:9F:C9:7B:85:D5
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:ab:ad:bb:f1:54:58:0a:7f:4d:ec:28:f3:7b:8f:75:80:
41:82:09:bd:2f:8a:19:35:aa:2f:f9:a4:1c:fe:0e:06:36:84:
bf:6d:95:19:8c:41:dd:18:c2:7c:cd:30:7b:a9:87:61:0c:d4:
06:33:11:44:3b:e2:ac:01:84:b4:53:23:54:74:ab:be:5c:48:
2d:89:78:ee:57:95:96:24:c3:c4:c1:e6:85:ad:01:ba:83:98:
da:7c:96:2a:37:b9:5b:de:08:a7:3a:0f:dc:f2:f3:1f:48:b8:
0f:5a:88:9a:6c:24:51:29:49:00:26:af:60:31:10:b8:27:c6:
e5:a9:e8:a8:f5:7b:31:ea:b4:6a:da:19:9b:34:aa:9c:d7:29:
87:0c:99:31:65:7a:d5:f2:c9:1c:ce:37:af:a2:35:9f:c7:c0:
69:8e:ce:92:28:a9:57:4b:23:73:c7:9c:22:07:39:83:fb:43:
05:2b:e9:56:f0:bb:29:7f:5e:50:d1:99:c1:bb:b6:80:df:0d:
7d:07:b1:bb:fb:2a:aa:62:f9:33:34:ff:4f:a3:4d:c3:d9:28:
6a:6c:a1:20:12:bf:9c:be:46:af:99:ab:7e:81:57:22:06:cd:
32:30:9a:b1:f5:e9:3d:cd:ad:6b:5b:db:b9:29:3b:b0:60:bf:
f0:fb:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:17 2026 by rpki-client