
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: JMNkphdOFuOo+eYjUrhelBclsnxTCCSzdC886ykpymg=
Subject key identifier: 95:57:3A:E3:92:AB:28:62:75:43:45:E6:11:34:8A:27:8E:B7:CC:69
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 04DA
Signing time: Thu 11 Jun 2026 01:56:24 +0000
Manifest this update: Thu 11 Jun 2026 01:56:24 +0000
Manifest next update: Thu 18 Jun 2026 01:56:24 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: 5YzNunqDcOzlkyHXzGJNRVmBqfiXmQMvF7d5t4Yt88g=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Jun 11 01:56:24 2026 GMT
Not After : Jun 18 01:56:24 2026 GMT
Subject: CN=6a2a15c8-a4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:9b:43:8f:48:ab:f5:7b:fd:6d:f9:9e:f8:
06:15:7b:a3:35:4d:a6:43:8c:f5:45:52:0b:35:8f:
92:f5:f6:ef:e7:9c:77:2d:0d:70:8c:ef:51:4f:17:
67:20:5f:51:3e:94:f3:bd:61:99:78:1d:ee:d6:c7:
fe:ee:0d:d7:56:16:8d:79:47:2f:02:dd:fc:1a:61:
ac:36:cd:71:81:89:82:02:94:c9:d1:ed:ca:87:dc:
9e:8a:64:29:52:0b:14:98:46:9c:b8:09:6a:08:ea:
56:a1:0d:25:46:77:a8:46:5e:16:93:5b:41:e0:b2:
cd:35:97:88:8d:da:17:33:c3:94:fb:d3:c9:89:1f:
66:0f:be:1f:78:1f:bc:b2:66:c6:96:49:99:b2:19:
00:c7:ce:24:df:c9:2d:5c:e6:a1:57:a5:df:3f:8f:
b1:dc:22:6f:3f:ba:24:30:c6:96:5f:be:b8:64:cc:
dd:cd:52:12:1b:66:ab:8d:27:0b:f6:d0:e3:ce:dc:
d3:cf:de:21:a9:7d:06:ee:68:9c:6a:41:46:9c:48:
a5:26:d6:c7:3b:cc:07:be:68:69:19:3c:ce:9d:35:
02:25:86:a7:ab:9f:f1:96:d8:bf:34:33:46:7d:1d:
9b:a0:36:37:9a:87:d6:6a:82:d2:fd:25:9d:e7:5f:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:3A:E3:92:AB:28:62:75:43:45:E6:11:34:8A:27:8E:B7:CC:69
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:d4:e4:97:45:f5:53:93:bd:86:35:7c:27:b4:45:8c:4e:
e5:07:32:e6:b0:5c:93:5e:7e:37:70:4a:18:f7:0a:4b:7f:ed:
6f:28:34:b0:92:6f:35:2f:c0:c3:7e:a6:0b:b5:3e:b9:05:a8:
a6:46:0d:ca:29:f9:a2:97:fd:b2:6f:35:65:65:f2:eb:e9:b6:
2c:98:2c:a6:e2:4e:0a:71:a9:c1:56:ee:41:46:22:4c:64:ac:
84:fc:e9:85:85:e5:ff:25:08:22:e0:a3:d7:a8:de:a3:03:57:
a6:13:fc:53:9a:a8:4a:cd:f3:d7:b5:13:77:85:7e:33:22:58:
72:41:b9:82:39:33:b5:f4:35:30:e9:1b:be:bb:48:d4:68:96:
bd:e6:b4:cc:98:fe:00:71:6c:75:95:9d:ab:bf:b4:d8:6b:8d:
85:32:6e:f6:8b:f7:87:b0:2c:34:9e:18:81:89:7c:ed:04:20:
9a:46:7f:18:24:0a:2b:47:7f:85:fd:9d:e2:99:92:7c:cd:43:
b6:e0:ed:e3:48:11:b5:3e:dd:6f:8e:34:30:0c:85:19:c5:57:
7c:2d:34:62:1e:89:3d:1e:3a:88:f1:8f:a9:0e:44:35:98:f3:
97:e4:3c:78:b0:84:2a:43:ae:ad:4c:32:9d:37:a8:4f:c3:64:
74:71:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:39:08 2026 by rpki-client