
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: YDaYGLkxTo/YyycYsDX13WtbcjNRLjSeVJ+C0HGWjso=
Subject key identifier: C2:C6:6D:43:31:73:F6:1E:89:C9:C9:F1:E4:58:DD:34:8B:05:C5:9C
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 0514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 0509
Signing time: Thu 10 Sep 2026 23:31:21 +0000
Manifest this update: Thu 10 Sep 2026 23:31:21 +0000
Manifest next update: Thu 17 Sep 2026 23:31:21 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: 4eEvb484SyZUEBVs03DmU6Fvs6/rUaEbL0VX2sFfQAA=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Sep 10 23:31:21 2026 GMT
Not After : Sep 17 23:31:21 2026 GMT
Subject: CN=6aa33dc9-a513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:05:67:51:fa:29:5d:bb:18:82:d8:ab:40:
d9:d7:a1:4b:00:d1:7b:34:64:83:e8:4c:4f:8e:b0:
57:af:c9:a0:f3:c2:b7:9a:af:40:07:85:a0:89:dc:
fa:f2:b7:ab:78:24:5e:22:f9:26:c7:09:15:30:78:
f4:20:60:49:8a:a9:e1:51:d5:41:04:a7:3d:9c:d3:
dc:f5:b2:db:29:76:d2:36:20:1f:9d:b0:81:92:84:
df:df:8d:a1:3e:98:84:0a:b7:c5:12:48:e0:10:78:
f3:5c:a3:08:6e:06:e3:d4:e4:29:80:86:d9:39:f9:
15:4b:a0:02:54:64:7a:1d:94:47:5e:d5:bc:e3:0b:
7a:9f:06:be:d4:bf:f3:f1:f9:45:02:7d:2f:6e:71:
77:fc:61:9e:2c:94:db:31:a5:a7:25:89:26:a3:03:
da:6a:d5:d5:fe:c7:87:bf:19:15:b1:35:c2:6c:75:
0f:d6:fc:11:d6:32:15:88:a3:27:fc:bf:78:3b:fb:
0a:a4:03:61:a0:d1:0a:8d:5a:95:b5:4b:f4:bd:12:
ae:c0:70:01:c5:21:36:8f:a4:07:6c:2d:69:e6:95:
97:f9:2e:98:c1:04:c4:d2:3c:e8:c9:3b:2a:cb:5e:
21:b4:9d:e6:a5:45:50:bc:80:57:93:5b:ea:ad:68:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:6D:43:31:73:F6:1E:89:C9:C9:F1:E4:58:DD:34:8B:05:C5:9C
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:44:e7:d2:d3:73:24:75:5f:77:25:9f:2f:f6:d7:33:40:39:
e0:50:94:ba:76:30:cc:ca:2a:60:12:cc:7c:b3:f5:8a:b8:77:
39:3f:c8:ef:2d:e9:d7:7d:54:1b:e0:8b:31:ea:a8:5f:80:90:
e9:ca:db:f1:25:64:60:2c:1c:aa:3e:39:da:e6:25:6f:cd:75:
cf:f8:58:fd:f4:ba:85:ba:45:c3:a9:4e:5a:78:2e:b9:81:82:
90:aa:81:f8:7f:83:8c:d4:36:76:95:66:3c:79:16:c2:d3:a1:
ff:58:bd:b0:b7:b8:a6:c8:a8:14:cc:56:fe:30:cc:1b:18:75:
48:03:01:4e:0b:0d:d9:7e:94:ae:b6:66:3e:48:81:73:63:5b:
41:9b:41:4d:73:76:f3:69:d9:88:b2:60:c5:f5:b6:44:a7:61:
a2:70:75:3e:9f:ff:e7:cb:61:3d:3f:63:f9:72:02:64:ca:c6:
88:91:aa:81:fc:d2:2c:67:29:ec:1f:c9:83:a6:01:76:19:4a:
2c:c4:e2:51:1b:a8:b3:ce:2d:c6:7d:cc:0f:d0:52:b9:15:2f:
6d:94:ce:d0:32:77:b8:91:1d:56:ed:a1:05:96:84:f8:03:28:
dd:c0:ba:cd:37:bc:24:e2:24:02:99:78:cf:df:e8:e4:74:27:
c2:a1:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:54:40 2026 by rpki-client