
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json)
Hash identifier: Mgd3x1RwfnDvzhJvkcP210jYovHj2LjuBLOm09U7gcs=
Subject key identifier: 29:D1:3D:C1:A2:DF:9E:90:46:53:4D:09:46:4B:A6:78:56:69:3C:F5
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
Manifest number: 01B0
Signing time: Sun 19 Apr 2026 03:26:14 +0000
Manifest this update: Sun 19 Apr 2026 03:26:13 +0000
Manifest next update: Sun 26 Apr 2026 03:26:13 +0000
Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: RdCiEaGUaliyNfJ8fCqRwkBv4sC1pYFXQH9mn7BU2+I=)
2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Apr 19 03:26:13 2026 GMT
Not After : Apr 26 03:26:13 2026 GMT
Subject: CN=69e44b56-2164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:1d:0c:82:30:10:bc:94:dd:ce:ce:02:8b:
80:c7:72:1d:3f:88:27:3c:40:b5:5c:1f:8e:c9:25:
ba:3a:d6:61:5d:d7:c6:60:f4:52:3a:c3:f0:b8:9a:
99:8e:3f:96:7b:c6:67:c8:fc:22:1c:af:48:43:2d:
13:c4:6c:18:30:3c:9e:a7:78:7a:ef:fa:28:c1:dc:
bf:11:26:d7:06:db:9a:bd:d7:47:fd:a6:50:7d:bc:
bd:2d:f3:d1:dd:72:05:3c:66:49:bd:07:b7:83:fc:
97:44:a8:88:3a:69:ad:2e:01:33:61:5b:0c:d7:d8:
81:a6:20:c5:c1:f7:c4:f5:39:4d:57:6e:4e:f2:7c:
55:7c:64:c0:45:fa:84:1e:7a:ac:39:bf:02:5a:05:
85:e2:2e:39:8c:70:f0:b4:f9:87:0b:1a:9d:3b:62:
0e:bb:23:1b:92:64:20:48:1b:a5:79:3a:c8:a4:f8:
ac:4f:d4:fc:0c:ee:3c:e6:6f:b5:e9:e4:91:5e:0b:
7b:ee:dd:c3:23:04:c2:35:b0:a6:99:89:7d:f3:89:
a5:58:6e:c9:c3:04:62:25:ca:38:49:3f:89:98:cb:
03:45:9d:44:e9:1e:ab:fe:3d:da:f0:13:61:96:ff:
1c:64:d7:41:b3:02:74:b3:69:60:38:cf:f0:4f:8c:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:3D:C1:A2:DF:9E:90:46:53:4D:09:46:4B:A6:78:56:69:3C:F5
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:ce:43:27:c4:d0:1a:ec:2b:42:f7:97:24:b0:c3:74:d3:
28:b9:a9:91:1e:2b:30:73:bf:7e:d0:97:71:ab:c6:36:7d:bc:
72:d8:71:a0:b5:b4:1a:d7:0f:2b:a1:3f:1c:71:eb:df:07:ef:
75:74:8b:c0:2f:7b:fa:6e:6e:e8:97:68:67:82:7e:62:38:83:
5b:43:dd:df:ce:53:91:91:85:f3:1e:09:d5:2d:a0:23:66:5d:
5c:21:69:98:fb:d1:26:57:d4:ab:4e:bb:29:e7:75:04:53:15:
65:c5:f5:23:26:7f:64:e1:02:02:76:ab:17:24:3d:0d:f7:07:
f8:c4:41:37:84:b3:05:f7:08:6c:a1:55:70:8b:23:10:3f:4c:
04:a4:fe:34:fd:c2:a6:53:48:27:11:9b:21:bb:53:60:3e:ad:
3d:70:2d:47:86:d6:a4:ea:29:a1:2d:69:3a:f6:74:0e:be:8b:
c0:3b:eb:fc:3a:44:a9:c1:6d:ff:aa:25:a5:45:51:90:17:0e:
f7:7d:df:b1:05:f0:7f:9c:5a:d1:2f:09:a6:ce:d3:e0:db:53:
c0:1b:1a:9e:8e:4a:39:ab:bb:76:f4:6a:c1:00:10:63:ac:61:
18:ab:da:15:c7:55:1b:38:9d:63:8a:51:31:34:3c:d0:99:89:
e4:2e:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:29 2026 by rpki-client