
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier: w3VJgrBlQnguh30F254NutrVGOLFk39W/K6Qfk7kegE=
Subject key identifier: 3D:1E:32:C4:58:46:EC:07:D7:CC:DE:93:64:E4:93:FB:39:E7:E9:21
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number: 0175
Signing time: Fri 17 Apr 2026 04:27:29 +0000
Manifest this update: Fri 17 Apr 2026 04:27:29 +0000
Manifest next update: Fri 24 Apr 2026 04:27:29 +0000
Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: b/D6wK71DiS92g+MDyKQfQk+caZOE4PSkOVCBS/2fKs=)
2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: 0cQ7lL+Dgw4MdHfwJ/NaEJmV6pZpv3TD2ijoWRCbMbA=)
3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: XulmFJ+sIF5UMyQAz/MmaZcZch5QE26KdzQqhFjBUzg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Validity
Not Before: Apr 17 04:27:29 2026 GMT
Not After : Apr 24 04:27:29 2026 GMT
Subject: CN=69e1b6b1-b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:39:e6:0d:93:dd:b0:f5:37:ed:09:98:09:
28:94:29:ce:2c:bd:93:f2:68:89:bb:d0:2d:43:7f:
d5:43:f5:d9:b6:a7:ec:d8:51:57:88:9e:8a:64:16:
70:46:82:8c:f8:5b:1e:e3:a3:1a:7b:79:ac:a1:2e:
2f:e7:72:85:c8:93:0f:f9:95:a3:34:fa:24:79:12:
c6:f3:ee:83:2d:eb:76:5c:d6:d8:54:ec:5c:6a:37:
a9:e9:2e:04:00:a5:e4:87:cd:05:bb:d2:8b:74:b6:
3c:94:23:1c:80:2c:0b:6e:4f:15:57:da:e6:f5:fd:
9f:67:1d:2d:55:8d:ac:75:d8:9e:5c:16:81:d4:6c:
ab:49:94:a0:6d:a6:42:41:82:d1:e5:98:5d:17:da:
e6:07:6e:5b:e6:e8:cd:a6:0c:bc:b5:3a:ea:b5:99:
e9:39:14:78:4c:ad:ec:11:2c:b6:9f:10:4e:da:42:
bd:33:f3:c2:e3:9e:8c:f1:2f:32:f7:75:07:dc:4d:
42:88:dc:5f:24:39:47:31:b9:f3:75:e8:b1:ae:24:
ce:e3:2c:d2:b5:c9:d0:c7:0b:62:0e:af:73:37:08:
92:20:70:97:d5:2d:dd:67:c3:92:a0:ff:67:82:b0:
59:dc:20:ed:cb:68:ce:cc:b8:2c:9f:00:b7:01:ef:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:32:C4:58:46:EC:07:D7:CC:DE:93:64:E4:93:FB:39:E7:E9:21
X509v3 Authority Key Identifier:
keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bd:df:bf:10:40:43:ec:80:16:19:5e:69:13:65:91:ed:2b:
8f:77:bd:f7:79:3d:78:4b:0b:ed:bb:48:aa:e9:d7:d9:5a:df:
9f:5f:c0:5a:5a:03:0f:0c:f8:1f:a9:15:5d:16:1d:08:dd:50:
04:7d:10:ca:03:07:55:28:0a:11:f3:39:2c:61:82:4b:c4:36:
c4:85:56:a4:7c:7e:52:bb:39:66:7e:03:74:d0:d3:f5:84:9a:
0e:43:d1:c8:73:f8:59:46:72:55:8b:01:76:42:41:f8:bf:33:
9a:5c:1a:bb:f0:5c:b7:06:d2:be:e5:19:88:48:ce:c2:40:25:
2b:31:14:13:a0:c3:c3:56:2f:46:e1:8e:18:26:c7:4a:2b:63:
2d:64:b9:5d:19:dc:17:d5:f2:d5:12:ae:d0:09:aa:02:7b:72:
56:43:73:5d:28:f7:96:1d:8f:9b:88:3d:0d:06:f0:19:d4:15:
85:46:2a:fd:96:57:f3:8c:27:93:6b:e1:d9:4d:ab:a4:ae:89:
78:a8:c1:2c:1b:c0:96:34:5e:4c:35:3d:d9:cd:d9:b0:6f:88:
96:2d:d7:08:72:c0:13:b8:b6:7d:ba:2c:1c:2e:26:e8:3b:fa:
34:8d:b2:58:f1:74:bc:3c:a6:1a:e8:66:a7:a6:64:f7:db:20:
34:32:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:46 2026 by rpki-client