
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json)
Hash identifier: wNRovyNZzBv4gvBANRcG2tjfOZoaRMNz4DBoyDnj1tc=
Subject key identifier: 4A:FD:34:42:74:D8:AC:5C:16:37:DF:84:6C:88:08:AE:B2:DE:FB:AE
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
Manifest number: 28D6
Signing time: Tue 28 Jul 2026 16:21:58 +0000
Manifest this update: Tue 28 Jul 2026 16:21:57 +0000
Manifest next update: Tue 04 Aug 2026 16:21:57 +0000
Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: abjkqmHXYSHaHo2D4rxLMZJZ8SF7JsQfD3nMNjhQR08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Validity
Not Before: Jul 28 16:21:57 2026 GMT
Not After : Aug 4 16:21:57 2026 GMT
Subject: CN=6a68d726-1f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:32:c0:58:47:cc:8c:58:32:79:c1:d2:1e:
02:fd:97:4b:7a:03:f2:ad:78:a8:97:c4:28:b9:84:
44:85:4e:44:6d:13:b1:27:57:9f:c8:3b:8f:1a:9a:
7d:20:5e:42:84:31:7e:51:6e:16:2b:f2:3c:2a:79:
1c:9b:46:16:17:f0:4d:e3:ba:72:81:40:34:86:ff:
07:0c:2b:8d:6d:90:54:12:4a:6e:19:35:c1:ba:9e:
02:2e:71:75:5e:57:54:48:72:6a:5f:c1:b4:f2:f6:
9a:c1:02:85:6f:9b:70:3d:5e:88:1d:94:04:fb:47:
a7:80:4d:b6:ed:75:b6:ee:9c:f7:b5:de:ac:a6:c9:
54:d3:f4:7d:31:83:5f:1b:96:92:d7:a6:57:43:d9:
49:a8:54:c0:70:42:5d:73:08:ef:ea:6e:e3:24:f6:
ad:9c:18:9e:c3:02:e5:ea:57:be:80:5a:fd:dd:21:
01:0d:f1:31:54:63:0c:c9:78:ba:59:60:58:c0:9a:
79:79:cf:57:60:96:70:ba:c1:3f:2f:64:6f:da:2f:
6a:e2:13:cf:51:78:8c:6f:6e:c9:d0:ee:73:21:ff:
9c:6d:eb:4c:aa:90:1b:92:86:9e:0d:dc:37:a9:1a:
55:48:c9:a0:23:82:93:1c:cb:ae:73:13:f3:94:46:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FD:34:42:74:D8:AC:5C:16:37:DF:84:6C:88:08:AE:B2:DE:FB:AE
X509v3 Authority Key Identifier:
keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:14:4a:a9:02:02:2b:b3:f6:0b:75:09:d4:f3:55:54:49:b2:
81:79:26:ef:5f:3f:24:5c:d4:2e:22:af:2c:89:71:84:4e:9c:
d6:13:95:59:a5:fc:04:e6:b7:3a:ea:5a:98:39:1a:c0:c8:0e:
7a:07:ac:61:3b:76:6b:45:b5:80:e5:6f:79:63:f9:67:52:29:
7f:09:ec:32:1e:46:ad:fa:e9:ed:79:32:45:45:09:92:1e:ef:
9e:66:f7:6d:66:92:38:9a:d6:ee:f4:0a:c4:a6:80:68:34:95:
ba:ed:10:f5:f4:82:c5:8e:2a:0a:e7:8b:30:f5:dc:82:b7:0a:
75:36:1b:59:d9:8c:2d:92:54:76:7f:a8:c9:7a:60:69:a5:23:
b4:c8:ee:1c:bc:2f:0e:6e:83:94:28:7a:c0:3c:c9:b7:c3:8a:
fd:a6:73:9b:5c:45:ec:eb:45:77:84:63:f0:e4:c1:fa:c0:f8:
09:26:9d:e1:6e:76:56:b1:6b:c1:fc:5e:99:91:b7:d8:16:a1:
b7:09:1e:0a:47:ea:da:69:03:c2:92:58:70:1a:2b:a2:be:ff:
88:86:d4:d4:d7:87:3d:82:ed:48:fd:94:64:ec:42:11:17:bb:
dc:40:32:4a:3b:59:d5:c1:0a:45:fb:8b:68:88:91:92:7f:df:
84:25:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:46:25 2026 by rpki-client