
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: nbbYUXu6O1J0zdhpvzJyLZI28pltey2dAQG/lt0WWq8=
Subject key identifier: 1A:95:C2:79:01:9D:57:E2:38:28:01:F0:B4:B1:0F:10:13:9B:0C:2F
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 077E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 076E
Signing time: Wed 20 May 2026 21:40:48 +0000
Manifest this update: Wed 20 May 2026 21:40:48 +0000
Manifest next update: Wed 27 May 2026 21:40:48 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: Utg/BaBx2K+Mu0qSG9zYGJ4FA4hGS2Zwn2JbQxg0NEE=)
2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: bFSS96O4radzazvR0OO67dPHVo81LQWTCGUGmX2A0Eg=)
3: 9398F508619611EBA485B448C4F9AE02.roa (hash: mGBSLne8/rU2A9xuOPlh+Kt9amKjy+mVgkjCDSndQxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Validity
Not Before: May 20 21:40:48 2026 GMT
Not After : May 27 21:40:48 2026 GMT
Subject: CN=6a0e2a60-c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:76:a5:d0:8c:d5:e0:4c:14:a5:97:dd:b6:
14:34:71:c6:71:c2:35:92:40:ae:86:2b:18:cd:01:
1e:c7:fa:fe:84:0c:3d:66:12:db:eb:82:8b:35:6f:
bd:59:ae:60:41:55:4c:1a:b5:99:8d:b4:7f:4e:b4:
a3:af:78:0d:ac:50:48:88:1b:bf:07:11:6d:8a:99:
75:40:18:c4:6b:68:5b:cf:a4:fe:de:6b:76:00:0b:
fc:7c:8e:e9:62:26:47:84:60:93:c2:6d:47:c1:2f:
b1:9d:df:46:61:af:c9:a0:a7:27:ea:99:d9:73:ce:
24:e0:9e:3b:1b:83:e3:b9:22:f8:be:cd:73:6b:01:
79:d0:f7:64:f7:de:f3:f7:b1:d8:b9:21:81:10:3c:
ae:a9:cf:25:3e:ff:37:a2:ae:71:84:2d:21:e6:1e:
bb:ba:20:6c:5f:55:c4:d0:92:58:2b:12:2f:f2:93:
ea:ae:cb:fd:53:63:d7:35:64:fa:4e:fb:fd:69:01:
d8:16:32:3e:b6:50:f8:a4:92:b9:3f:60:86:7c:0d:
c2:9b:09:da:8b:4e:cc:39:03:18:1e:fd:f0:8f:0c:
c7:79:2b:fc:5d:0d:e5:4c:79:be:73:70:ea:f5:65:
33:d5:76:e7:33:f7:bf:89:85:9c:a9:27:fa:9e:42:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:C2:79:01:9D:57:E2:38:28:01:F0:B4:B1:0F:10:13:9B:0C:2F
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:9c:f2:f5:04:98:61:cd:cd:b9:7a:21:56:aa:92:2c:10:9c:
a6:5e:1a:0c:bb:d3:fb:84:ba:e6:5b:f2:0f:9c:f7:79:11:7e:
a0:e3:27:27:92:a4:ab:52:83:d2:71:6c:8d:13:71:9f:06:82:
2f:49:b8:a9:de:2f:19:37:92:fa:44:c1:f8:3e:da:51:29:e3:
d6:06:db:e4:94:b8:47:71:08:26:28:d4:4e:67:5e:8d:02:b3:
ae:ca:b3:aa:da:57:80:9c:09:9b:79:ff:8a:cb:91:c9:73:b4:
9f:ee:94:9c:32:97:2a:c0:af:a6:6e:e0:0c:40:11:8e:ec:69:
5b:0e:7b:dd:e6:48:cf:2a:fb:a5:de:51:7f:7d:8e:ee:61:87:
dd:e8:3d:a5:0e:26:74:ff:d4:6f:de:ef:bd:60:b5:c4:ed:4f:
94:06:6c:e7:5e:5d:31:c8:27:59:3b:c6:90:0f:7f:f0:f9:f9:
76:7e:3b:71:66:11:e9:1c:c0:fc:47:47:34:a0:04:ea:eb:16:
89:63:8d:ce:5d:8f:e0:6d:58:9c:83:a0:b5:e4:39:d9:d1:64:
9f:7a:db:c5:6f:db:8a:7e:5f:53:e1:da:2b:dd:80:fc:21:cd:
b9:92:63:7a:c8:b0:51:a7:91:7a:02:da:d9:8c:d6:00:c3:a6:
8e:24:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:08 2026 by rpki-client