
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: qWdLqx9bF6itmDtBpa7ZqqgEDJ0rreMpASmxzI3f3Tw=
Subject key identifier: 66:F3:F0:7E:6B:70:E9:15:7C:5C:CC:A1:DC:36:82:44:1F:91:4C:74
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 0757
Signing time: Sat 04 Apr 2026 21:29:59 +0000
Manifest this update: Sat 04 Apr 2026 21:29:59 +0000
Manifest next update: Sat 11 Apr 2026 21:29:59 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: A0tkkwio88JifOhynRtnEzvKhCna71NHDa7VW8V/ddA=)
2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: bFSS96O4radzazvR0OO67dPHVo81LQWTCGUGmX2A0Eg=)
3: 9398F508619611EBA485B448C4F9AE02.roa (hash: mGBSLne8/rU2A9xuOPlh+Kt9amKjy+mVgkjCDSndQxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Validity
Not Before: Apr 4 21:29:59 2026 GMT
Not After : Apr 11 21:29:59 2026 GMT
Subject: CN=69d182d7-5480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:c2:fa:b4:03:0e:3b:33:22:da:be:ca:41:
ec:3a:e3:df:ca:24:d7:11:93:bc:72:64:37:92:2a:
2d:7d:6e:41:51:c5:a1:fe:cf:e5:94:ca:ea:42:ca:
ce:89:ff:e2:e6:62:7a:a6:28:d9:d3:a5:0a:3e:70:
a7:ac:f0:2c:56:99:7c:3c:1b:7c:a0:aa:bc:21:6d:
1b:ea:28:04:df:19:e1:e3:d6:c1:32:1a:9e:ee:7a:
34:de:5f:f5:d2:fc:d4:87:72:85:f5:92:c5:3e:f7:
87:01:51:50:b2:96:5f:3a:93:ae:bf:3a:52:53:24:
01:fc:e1:28:cf:16:ef:bb:d9:20:f8:db:81:55:45:
03:e0:d1:53:b2:4d:d9:3f:8a:49:5c:d7:88:43:93:
95:87:0f:b7:c8:fa:41:75:43:7c:79:e2:1a:2d:2f:
0d:9c:5d:51:5b:80:6c:e8:41:e5:00:bb:da:d0:97:
a4:fe:4e:1f:fd:03:e0:18:6c:47:a2:62:dd:6b:a6:
e7:68:41:4b:3e:3b:cc:77:dd:82:c2:4a:fc:78:56:
05:df:6a:94:6c:82:b0:6b:70:7c:35:10:a7:8c:d4:
ee:fc:1d:08:d1:63:0d:91:25:51:57:1e:40:09:e4:
28:3a:6a:58:94:97:01:00:60:15:45:58:9a:70:22:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:F0:7E:6B:70:E9:15:7C:5C:CC:A1:DC:36:82:44:1F:91:4C:74
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:04:13:22:a4:6b:ef:56:d9:28:fa:93:29:6b:cc:a7:d5:
16:fb:7d:5d:25:41:88:11:ac:34:99:7f:3a:0b:26:16:90:ba:
78:c9:0c:24:f6:4e:e8:0a:a8:92:1f:bc:bb:fe:d8:33:65:aa:
9e:00:38:f2:8d:69:2d:77:b0:2c:c6:2d:03:26:14:a6:6a:f5:
5e:d1:c5:f5:10:1c:cf:37:c8:2b:f7:d5:84:dd:0f:8a:4d:95:
a8:eb:97:8e:aa:e0:73:84:82:de:fd:fb:fa:5b:f3:2a:cd:b6:
4a:0c:8c:bd:33:61:98:23:53:8e:e9:27:c4:e2:01:bc:9e:06:
a0:fe:6a:34:96:d0:ef:1e:99:46:fe:b9:71:a4:01:5b:e9:5c:
7f:9d:85:71:ee:4e:62:97:72:47:c1:49:6a:6d:d9:f9:8a:22:
f0:98:94:c2:06:38:2e:c1:a8:4e:2f:de:d6:a5:83:9d:92:3b:
03:af:53:b5:60:76:6e:a0:35:38:cb:8b:f7:66:f5:ec:5f:da:
e7:67:fb:b5:5b:33:57:91:ea:12:07:14:3b:0c:bd:79:6b:4a:
a4:ba:7f:ea:aa:7b:97:59:8a:ea:0a:88:8f:5c:fd:d6:e3:d9:
13:8b:1f:78:ed:4d:d4:14:82:bf:f1:56:f2:64:fa:90:2e:cc:
c8:87:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:04 2026 by rpki-client