
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
File: kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json)
Hash identifier: Ep399Kvr7A8anX0i9daJg7LU2CvOMpt0XAU2HmiSBco=
Subject key identifier: A3:C1:D3:9D:90:40:8D:7D:6B:EA:4D:8C:4D:18:B6:BB:83:12:BD:D0
Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Certificate serial: 04E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
Manifest number: 04DB
Signing time: Sun 20 Sep 2026 23:34:11 +0000
Manifest this update: Sun 20 Sep 2026 23:34:10 +0000
Manifest next update: Sun 27 Sep 2026 23:34:10 +0000
Files and hashes: 1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: 0ElI5i+sICJwBQDcozQrk36AYC6tkY4xcIS46WU0siw=)
2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: 2diXZhIHeiTIXtGE7hgkGrF2mxwMF4mve/3rvi/DmaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1249 (0x4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Validity
Not Before: Sep 20 23:34:10 2026 GMT
Not After : Sep 27 23:34:10 2026 GMT
Subject: CN=6ab06d73-e099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:21:9d:49:31:56:79:84:27:0d:24:c4:24:
d2:d7:89:62:33:79:d6:48:08:03:01:f9:3f:8d:d8:
a8:4b:6c:dc:0e:44:96:38:e7:63:9a:ba:5c:20:17:
38:44:cf:70:c4:c9:38:03:bb:44:15:55:41:98:87:
d1:2f:56:07:b6:a7:b7:bc:86:74:85:39:cc:c6:c5:
e3:f9:1d:c7:53:5a:e7:43:2c:6e:27:b3:68:ae:92:
9f:19:76:48:de:62:8b:fd:52:1a:cf:f5:65:5c:d6:
59:45:f4:bf:06:a0:ce:a4:b5:7c:26:ac:8c:a4:56:
dc:0e:c5:c0:74:d7:07:cc:30:70:c4:4a:35:2a:92:
42:f5:2c:b2:32:0f:9d:7e:aa:ea:e8:78:30:0a:d3:
20:6a:68:d4:59:3b:28:02:41:40:67:3b:30:75:e2:
f2:53:de:69:00:b2:39:36:3d:a5:c5:db:e4:86:24:
c6:1b:ea:d0:99:e8:6e:1a:b6:ba:a3:f2:e5:a4:ae:
85:56:41:98:12:8c:85:d0:b9:37:a8:0d:df:e5:e4:
48:af:28:11:8d:21:94:9e:9e:a9:db:2a:dc:60:cb:
da:80:70:63:e4:7d:ff:c6:e0:00:bc:ee:5e:85:1c:
4e:84:7d:2c:fb:6e:56:69:89:98:f3:45:e3:22:c1:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:D3:9D:90:40:8D:7D:6B:EA:4D:8C:4D:18:B6:BB:83:12:BD:D0
X509v3 Authority Key Identifier:
keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:1d:b0:4b:bc:54:54:9d:d9:85:cd:39:59:25:19:ce:94:64:
af:ba:3d:50:b9:b3:33:e4:a5:9e:5c:d0:08:b3:61:03:e3:9c:
95:c4:b7:aa:a4:cc:fc:b7:ad:d6:18:aa:fc:96:9f:76:4b:7a:
f3:7f:7f:d5:77:84:72:91:e6:3f:75:50:25:cc:26:27:dc:e2:
b7:91:9c:10:23:db:f4:7c:2b:67:16:28:0c:76:be:cc:67:79:
d8:30:ae:be:ca:dd:e4:12:c8:be:3d:7f:2a:57:76:64:fa:c1:
85:81:8d:5c:36:4c:51:18:0d:78:6a:af:b0:0d:1a:8c:be:c7:
e5:ce:91:f6:0c:5c:c5:a9:b6:88:18:ab:98:a7:5c:ab:4a:51:
80:7a:0c:04:0c:d8:fe:26:fb:80:0e:cc:cb:70:1e:9b:64:51:
ca:1f:e6:96:8d:89:01:0f:18:c9:75:9a:94:d4:02:7d:3d:c4:
f1:48:9a:ca:c3:f1:68:ea:48:89:c1:56:4f:78:1f:25:9e:41:
66:94:65:65:ca:41:f3:96:a1:0e:67:26:92:f2:03:a2:68:ca:
b9:dc:ac:8d:47:7a:ee:4e:7b:92:61:ff:11:ea:d2:cd:94:0f:
4d:28:64:bc:86:a7:95:75:0b:01:7b:d2:1d:ae:10:71:3a:a5:
35:9d:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:15:47 2026 by rpki-client