
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
File: kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json)
Hash identifier: UvBNs5qbSj1hMfJGDRAvl2jPcjbyhbouO4VEOum7Sas=
Subject key identifier: 86:94:6A:A9:10:C9:4F:35:D3:6E:14:18:8E:D8:45:12:A4:9C:7C:2C
Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Certificate serial: 0476
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
Manifest number: 0471
Signing time: Mon 02 Mar 2026 02:56:53 +0000
Manifest this update: Mon 02 Mar 2026 02:56:52 +0000
Manifest next update: Mon 09 Mar 2026 02:56:52 +0000
Files and hashes: 1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: USEuKuiH/4iJStm+xFyQwvZJ1fIfgff9sTXJ+seHjws=)
2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: VhGEnB8PzGlt9u4SaXKINqITdxnpUz15HT6SZJLBQQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Validity
Not Before: Mar 2 02:56:52 2026 GMT
Not After : Mar 9 02:56:52 2026 GMT
Subject: CN=69a4fc75-3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:39:9a:d5:42:09:28:61:1a:20:03:01:2d:6c:
c7:95:eb:ec:fc:4c:4e:13:c5:f0:be:f1:46:06:3e:
36:8c:eb:a6:b9:cb:75:5c:db:8b:a0:57:f7:f7:1c:
10:40:8d:e9:14:d5:41:bb:eb:2e:66:83:6f:e5:2a:
26:32:2f:97:39:01:b3:64:3d:43:1e:74:af:62:da:
c0:f6:18:a9:2e:68:9b:6a:60:5c:4a:29:3f:ed:e1:
0a:b9:60:80:de:7b:4d:bd:65:18:ad:46:cd:f9:cb:
7a:7c:3d:9a:5a:af:ed:30:da:03:ba:ed:3c:7f:c4:
0e:9b:b2:68:ce:71:d6:de:36:d0:d3:de:0f:94:db:
47:06:6f:36:7d:95:a5:73:df:2c:d7:5f:29:f2:1c:
c3:a5:47:60:79:41:3c:5a:38:25:f6:5f:12:70:20:
9e:5f:b7:d8:ad:91:61:e8:50:9b:77:3e:3c:11:17:
ee:de:9c:e4:0b:8b:1c:5b:70:2a:06:ee:9a:38:a1:
bb:27:20:0d:ce:6f:d4:05:f7:f2:56:97:14:28:e5:
28:06:fb:09:4b:b4:80:67:ec:a3:25:1b:ae:88:bf:
21:85:83:a8:88:50:63:f0:db:42:50:d8:42:f3:aa:
73:8a:5c:4b:67:80:05:e3:bb:97:58:ec:10:a7:fc:
ed:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:6A:A9:10:C9:4F:35:D3:6E:14:18:8E:D8:45:12:A4:9C:7C:2C
X509v3 Authority Key Identifier:
keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:29:e3:2d:00:bb:dc:61:d0:ef:5a:d9:15:af:6b:6e:aa:
e1:73:d9:f9:8f:f0:99:6c:0d:23:57:27:9f:03:f2:fb:df:3e:
11:d0:4a:b6:c5:79:a2:2a:ae:00:b7:5d:cf:66:ae:a2:1c:11:
7b:c6:f5:4c:12:2a:61:f3:83:f2:4c:0b:cc:e3:08:84:2d:2c:
25:c7:9c:99:10:a6:53:61:cd:f4:5e:28:6b:37:6b:d5:cb:99:
ba:47:a1:d1:0f:3e:f2:29:cc:19:f2:f5:10:a2:8d:da:49:6b:
10:46:09:96:93:fa:b2:e3:42:6d:96:9a:ef:39:00:1b:43:7c:
41:ad:94:08:c1:03:18:89:68:b0:b4:4c:8c:ac:55:f4:c4:74:
b3:86:81:f7:85:f0:31:2a:6f:dc:82:5b:c2:77:ca:2b:72:c8:
29:0a:06:34:90:67:fa:bc:60:f5:59:23:07:fa:93:d4:e0:1e:
dc:8e:99:9a:9b:86:7c:3a:fd:48:04:a9:8e:f5:8b:b8:0f:63:
49:67:41:5d:5a:76:ae:80:a3:2c:56:42:e5:01:44:c8:3c:45:
35:cd:71:3b:da:36:32:91:33:fb:fd:16:6e:a8:fa:b3:6c:07:
9a:bc:ce:98:6f:63:fe:0c:7b:be:6d:12:73:ad:f1:43:d0:23:
a7:d0:0e:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJEOTMxMTAvBgNVBAUTKDkwMUY5ODkxRkJGN0YyN0Q0MTZBMUVFMDZCMzFCMDE2
NUFBRTFEQzUwHhcNMjYwMzAyMDI1NjUyWhcNMjYwMzA5MDI1NjUyWjAYMRYwFAYD
VQQDEw02OWE0ZmM3NS0zZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8zma1UIJKGEaIAMBLWzHlevs/ExOE8XwvvFGBj42jOumuct1XNuLoFf39xwQ
QI3pFNVBu+suZoNv5SomMi+XOQGzZD1DHnSvYtrA9hipLmibamBcSik/7eEKuWCA
3ntNvWUYrUbN+ct6fD2aWq/tMNoDuu08f8QOm7JoznHW3jbQ094PlNtHBm82fZWl
c98s118p8hzDpUdgeUE8Wjgl9l8ScCCeX7fYrZFh6FCbdz48ERfu3pzkC4scW3Aq
Bu6aOKG7JyANzm/UBffyVpcUKOUoBvsJS7SAZ+yjJRuuiL8hhYOoiFBj8NtCUNhC
86pzilxLZ4AF47uXWOwQp/zt/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIaUaqkQ
yU81024UGI7YRRKknHwsMB8GA1UdIwQYMBaAFJAfmJH79/J9QWoe4GsxsBZarh3F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkQ5My8wRjg3NEE3NDdG
M0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2MzhuMUJhaDdnYXpHd0ZscXVI
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tCLVlrZnYzOG4xQmFoN2dhekd3RmxxdUhjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkQ5My8wRjg3NEE3NDdGM0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2Mzhu
MUJhaDdnYXpHd0ZscXVIY1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXrYp4y0Au9xh0O9a2RWva26q4XPZ+Y/wmWwNI1cnnwPy+98+EdBKtsV5oiqu
ALddz2auohwRe8b1TBIqYfOD8kwLzOMIhC0sJcecmRCmU2HN9F4oazdr1cuZukeh
0Q8+8inMGfL1EKKN2klrEEYJlpP6suNCbZaa7zkAG0N8Qa2UCMEDGIlosLRMjKxV
9MR0s4aB94XwMSpv3IJbwnfKK3LIKQoGNJBn+rxg9VkjB/qT1OAe3I6ZmpuGfDr9
SASpjvWLuA9jSWdBXVp2roCjLFZC5QFEyDxFNc1xO9o2MpEz+/0Wbqj6s2wHmrzO
mG9j/gx7vm0Sc63xQ9Ajp9AOyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:58 2026 by rpki-client