
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier: pEwBPtdjXeF3/ddprIWsfOyh/Wsvf+hc/taI1bbz0PA=
Subject key identifier: 7B:B9:0D:73:14:93:FF:B3:4A:73:20:72:6B:0A:A3:46:7D:F9:49:6D
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number: 0144
Signing time: Mon 21 Sep 2026 05:23:28 +0000
Manifest this update: Mon 21 Sep 2026 05:23:27 +0000
Manifest next update: Mon 28 Sep 2026 05:23:27 +0000
Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: m1OGg5jrjPWU67ycxL3RV6z/63V8k3kP3GAqvYcWPSU=)
2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: Zi/te3DkYZD7Ur8Et0yqHz8Mq+SfZzIYRRKwYI5AslE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Validity
Not Before: Sep 21 05:23:27 2026 GMT
Not After : Sep 28 05:23:27 2026 GMT
Subject: CN=6ab0bf50-8d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:ca:a8:cc:1d:46:14:94:e3:20:6a:fa:67:
8a:f5:70:0d:da:3d:50:ec:ff:7c:e3:cd:52:c3:13:
fd:dd:5b:8e:33:ea:24:d2:d1:b8:da:09:a8:1b:46:
eb:2c:5e:ab:9f:98:58:9c:00:13:ac:66:70:a2:c9:
85:81:0b:f1:2c:47:52:c7:01:7c:26:b6:1e:b1:f1:
43:ba:3d:66:3b:c3:78:c5:f3:31:45:0b:83:53:b6:
cf:8c:b4:71:72:fe:e0:f8:b7:68:2c:22:7a:31:f5:
d7:98:65:b2:55:ea:62:c1:73:9b:52:06:77:0c:73:
27:cb:83:e7:51:7d:ba:4d:d8:4b:77:23:c4:ea:8d:
cd:ec:33:dd:ed:69:88:4f:05:1d:9a:3c:00:72:0c:
f3:a9:91:94:b2:b5:eb:52:2f:11:5a:f2:27:79:d4:
23:dc:d8:b3:48:6a:ef:66:5c:93:0b:e7:86:d8:89:
48:19:fd:34:73:ac:01:8c:f0:97:b6:89:75:d4:09:
63:29:70:11:97:59:77:c1:5d:62:57:ae:88:c3:bd:
87:fa:ec:e1:99:f6:dd:6e:eb:70:73:79:74:a0:c5:
a9:c9:63:99:50:60:7c:ca:c8:a0:f5:15:fd:9b:b7:
2b:2c:f3:94:20:0a:df:73:2f:38:a8:6d:2f:0f:ed:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B9:0D:73:14:93:FF:B3:4A:73:20:72:6B:0A:A3:46:7D:F9:49:6D
X509v3 Authority Key Identifier:
keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:da:3d:29:a8:a7:9d:e0:a0:b3:d8:80:50:18:23:a7:71:ac:
9c:3d:21:35:6d:2a:e4:39:e1:a9:2c:89:01:56:0d:ae:ca:61:
f3:23:74:1f:e7:52:65:78:06:b4:2a:2c:61:d0:a7:03:09:63:
0c:ad:fa:de:6c:90:e7:64:ec:4d:cd:b4:2a:e8:09:d2:90:b1:
b9:fc:f8:d7:31:14:d7:a8:18:a8:1e:8d:42:5a:0b:3a:46:13:
cd:24:31:4b:c1:37:65:ec:0a:1d:d3:8d:53:3a:1e:4f:81:9d:
b5:1f:c0:b2:88:1b:32:ef:c3:7a:01:d7:2b:43:4a:fe:09:15:
c0:60:64:b5:8d:b8:b6:b2:4a:42:16:47:16:bf:fb:e7:01:9d:
dd:c5:50:26:dd:2d:3c:da:1e:6b:76:be:fa:57:ea:95:e1:73:
4c:95:85:96:b2:e2:4c:20:43:a8:82:ff:97:a1:1a:d7:98:4b:
a4:c2:b3:d8:49:a6:5d:ab:b4:a0:7b:af:07:92:40:d1:ee:75:
00:87:02:aa:99:22:26:f3:fb:ec:f2:8f:51:96:55:d0:4e:5f:
48:99:da:5a:66:69:81:1b:ae:8e:56:0e:c3:7d:ef:1b:ba:cb:
6a:ea:aa:89:c9:d5:f6:ab:d9:ea:74:6e:e4:ab:3f:aa:6a:23:
e2:bc:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:02:15 2026 by rpki-client