
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json)
Hash identifier: AsGpFWfkprQq4ZuaU8jsKCXfGaUsS2L3VuThIIEUZR4=
Subject key identifier: B7:AB:1C:A6:A4:CE:5A:6A:70:A6:10:49:12:BC:22:EF:39:C4:7F:5B
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
Manifest number: 27CC
Signing time: Thu 16 Apr 2026 16:14:27 +0000
Manifest this update: Thu 16 Apr 2026 16:14:27 +0000
Manifest next update: Thu 23 Apr 2026 16:14:27 +0000
Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: ndjd3UVyT/vJ2hXKUNMosPJJtXkgZYoHzEaLziD4UWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Validity
Not Before: Apr 16 16:14:27 2026 GMT
Not After : Apr 23 16:14:27 2026 GMT
Subject: CN=69e10ae3-5cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:e8:fa:fb:9f:f9:66:f6:88:e0:0a:73:69:
af:97:36:f1:6e:b1:52:3c:d9:45:c9:ae:6b:4d:80:
65:1c:b6:04:f2:96:16:e7:98:11:a1:b8:b2:43:af:
78:df:18:b4:c7:8c:53:e3:b0:fc:3b:b3:7c:cc:9f:
0e:72:6a:89:59:76:0c:02:5b:88:4c:92:a2:36:03:
d1:a8:9b:f4:37:96:28:f0:68:dc:95:e2:9e:ed:f7:
2d:7e:c7:d8:e5:95:4a:86:ee:6c:42:70:3a:19:d8:
12:bd:2f:02:11:cb:a7:6e:d3:f6:ef:58:d0:4a:da:
af:04:8c:dc:89:e9:03:ed:bf:e6:33:ac:05:5a:0f:
55:4d:3a:96:96:d3:1f:10:b5:c1:4a:0e:73:3d:6c:
ef:9f:16:fb:31:18:7c:00:f3:27:02:f7:c2:a2:5c:
66:87:39:2d:8a:54:9f:54:9b:f7:51:ae:ed:74:21:
40:e5:60:e3:5c:19:46:46:73:35:a1:49:85:79:48:
8b:9a:52:4c:53:39:df:34:18:66:7b:6b:4d:05:16:
51:8f:0c:57:6c:c6:b9:af:a4:8b:d5:8a:16:1a:64:
11:b9:ce:c8:cc:54:4e:c7:b1:56:75:69:b1:46:b7:
dd:33:05:51:54:9e:d5:70:63:a0:3d:0c:88:e1:0c:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:1C:A6:A4:CE:5A:6A:70:A6:10:49:12:BC:22:EF:39:C4:7F:5B
X509v3 Authority Key Identifier:
keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d1:fd:a9:2a:9f:78:ed:8e:f0:dc:8b:39:01:bf:2c:29:2b:
a6:03:96:2d:1c:cb:1d:19:cd:01:7e:e9:48:98:51:55:39:41:
8b:74:6a:aa:03:ed:63:c0:ad:f2:0c:99:1f:88:c7:4d:97:f6:
89:ef:af:73:62:fe:b4:e1:7f:78:39:a6:ac:98:c5:e5:8b:b1:
0c:eb:37:49:eb:70:75:64:16:d1:7b:d9:3e:f0:d2:72:f4:24:
1b:b4:89:ab:d0:84:30:d5:5a:22:43:80:5e:53:0d:d4:e6:46:
52:9e:df:89:1d:16:8f:b2:4b:06:ef:22:e3:ee:eb:20:63:48:
f2:46:d9:50:57:94:3a:f0:9e:38:fb:48:b4:cc:73:52:e1:5c:
57:ee:51:84:ba:28:fc:83:19:16:1a:fc:ca:88:41:30:0c:f9:
67:7d:f9:ed:52:b7:da:7c:c4:00:2b:51:95:0b:e2:53:17:26:
cc:e6:04:b5:09:39:f3:9c:38:e3:9c:52:f4:a1:7d:2a:16:f4:
22:39:0f:27:37:dc:58:16:76:b4:94:18:31:6f:44:fb:76:2d:
bf:be:0c:a8:db:77:70:62:46:ec:04:29:b7:a6:2a:66:49:81:
3e:03:29:cf:11:3f:fd:65:1b:90:73:4e:80:ed:6c:19:33:a1:
ac:6b:e5:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE
Nzk1RkZDODQwHhcNMjYwNDE2MTYxNDI3WhcNMjYwNDIzMTYxNDI3WjAYMRYwFAYD
VQQDEw02OWUxMGFlMy01Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNzo+vuf+Wb2iOAKc2mvlzbxbrFSPNlFya5rTYBlHLYE8pYW55gRobiyQ694
3xi0x4xT47D8O7N8zJ8OcmqJWXYMAluITJKiNgPRqJv0N5Yo8GjcleKe7fctfsfY
5ZVKhu5sQnA6GdgSvS8CEcunbtP271jQStqvBIzciekD7b/mM6wFWg9VTTqWltMf
ELXBSg5zPWzvnxb7MRh8APMnAvfColxmhzktilSfVJv3Ua7tdCFA5WDjXBlGRnM1
oUmFeUiLmlJMUznfNBhme2tNBRZRjwxXbMa5r6SL1YoWGmQRuc7IzFROx7FWdWmx
RrfdMwVRVJ7VcGOgPQyI4QyA1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLerHKak
zlpqcKYQSRK8Iu85xH9bMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw
NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE
X2Z4RS1PTUltbXZYbGZfSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb9H9qSqfeO2O8NyLOQG/LCkrpgOWLRzLHRnNAX7pSJhRVTlBi3RqqgPtY8Ct
8gyZH4jHTZf2ie+vc2L+tOF/eDmmrJjF5YuxDOs3SetwdWQW0XvZPvDScvQkG7SJ
q9CEMNVaIkOAXlMN1OZGUp7fiR0Wj7JLBu8i4+7rIGNI8kbZUFeUOvCeOPtItMxz
UuFcV+5RhLoo/IMZFhr8yohBMAz5Z3357VK32nzEACtRlQviUxcmzOYEtQk585w4
45xS9KF9Khb0IjkPJzfcWBZ2tJQYMW9E+3Ytv74MqNt3cGJG7AQpt6YqZkmBPgMp
zxE//WUbkHNOgO1sGTOhrGvlyw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:52 2026 by rpki-client