
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
File: kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json)
Hash identifier: ucPbUipdetyXKQoHMq8vyZTQjbWG0bT4XaFHz17chSs=
Subject key identifier: 47:54:00:77:6E:77:C1:21:CB:52:81:DA:D0:0B:85:2F:EE:F1:54:E3
Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Certificate serial: 0491
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
Manifest number: 048B
Signing time: Thu 16 Apr 2026 23:55:13 +0000
Manifest this update: Thu 16 Apr 2026 23:55:13 +0000
Manifest next update: Thu 23 Apr 2026 23:55:13 +0000
Files and hashes: 1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: sPtAn+ZHnGN/9HTH2jwtK8nJ4zTkzc1uo6UhQkiNV6A=)
2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: 2diXZhIHeiTIXtGE7hgkGrF2mxwMF4mve/3rvi/DmaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Validity
Not Before: Apr 16 23:55:13 2026 GMT
Not After : Apr 23 23:55:13 2026 GMT
Subject: CN=69e176e1-1d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:7d:43:54:d5:d8:a8:d8:23:fb:a7:e8:11:
c2:63:66:80:38:72:5c:d6:f8:87:18:e6:df:1a:5f:
ff:a6:66:8c:2b:2a:c1:51:88:7e:6b:36:a7:b4:ba:
bd:f6:03:8f:22:ef:ed:64:c3:8a:fa:ff:2e:75:c6:
a3:3a:f9:9b:a9:c1:42:dd:73:dd:c2:5b:7b:c1:20:
4d:78:4e:d2:3f:e1:ba:f8:25:2d:96:22:a6:8e:40:
05:4e:f0:a9:c1:33:a8:68:f8:c0:80:aa:da:f8:78:
5f:11:41:2e:06:c0:65:44:43:bc:19:09:e3:4b:2a:
36:84:57:b2:b6:e6:15:ab:b1:fb:64:ef:c7:13:31:
e4:47:c0:3f:a0:ea:4e:ab:aa:b6:29:47:50:eb:76:
f1:dd:8a:a4:19:ad:73:c6:31:fe:c6:30:ff:83:66:
b9:58:80:6e:ba:5a:d4:d4:79:40:c4:e7:75:fa:1b:
76:a3:9f:3f:d4:d3:5a:9c:58:0a:a5:10:c0:e1:90:
da:a3:43:db:14:95:25:ec:02:3a:4b:35:61:61:cb:
2a:de:fe:f4:00:86:4e:b9:d0:89:ed:a3:5d:94:96:
30:3e:02:6d:3c:fa:96:11:c9:fe:0a:1f:59:8a:a4:
eb:88:35:e0:d3:37:78:9d:d4:08:d6:20:04:7e:f0:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:54:00:77:6E:77:C1:21:CB:52:81:DA:D0:0B:85:2F:EE:F1:54:E3
X509v3 Authority Key Identifier:
keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5c:46:52:a2:0f:91:b4:03:9f:df:be:fe:57:22:36:19:e9:
23:80:2c:3c:fb:af:b2:e7:ef:0c:72:5a:6d:b3:af:e6:5c:85:
bc:27:30:8f:23:33:27:90:2c:48:f2:20:e7:6c:e4:3e:e8:29:
c8:85:29:2f:75:b0:94:e1:df:92:f1:41:80:d9:5e:c4:66:ee:
b5:62:e4:81:c8:db:b0:fb:e5:05:10:35:9f:b8:37:f4:5e:a7:
d2:a9:3d:9b:fe:5a:15:5f:d2:42:d2:1b:0f:b9:f3:99:c2:6e:
9f:da:1b:3e:23:15:4e:c8:7a:66:f9:87:dc:58:b8:a3:25:23:
2d:e1:39:8d:f2:bb:8c:14:b6:a9:d8:95:cf:81:39:63:dc:de:
26:37:d2:a4:23:16:f1:c5:b0:fd:3d:1f:35:70:20:d7:3a:ee:
ae:40:bf:79:a9:85:fa:56:4c:0a:0d:fa:52:02:16:86:dd:55:
7c:77:53:fb:4c:6f:6d:ca:73:8f:a5:8c:9e:22:d6:c8:de:dc:
17:3c:80:20:ad:e7:59:41:4f:72:ba:a6:15:d3:4b:dd:c2:a8:
9a:55:eb:84:65:b1:77:4f:d0:df:b6:39:09:35:33:46:ab:f9:
ec:11:ee:91:0f:36:d1:42:2c:65:b8:15:49:ce:14:9a:9b:26:
51:a6:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:53 2026 by rpki-client