
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: Ipeb0bMNhnzzmqnLqTETvPtK+kXrt8kO9o89due2kOY=
Subject key identifier: 86:BD:1F:24:84:47:EB:C0:20:4D:84:79:88:6D:34:7E:FA:2A:72:05
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 076D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 075D
Signing time: Thu 16 Apr 2026 21:36:17 +0000
Manifest this update: Thu 16 Apr 2026 21:36:16 +0000
Manifest next update: Thu 23 Apr 2026 21:36:16 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: NFKFCuZUBLr7yttdt2htgTlR/q0DK+Ry5Q0UtZro9O0=)
2: 9398F508619611EBA485B448C4F9AE02.roa (hash: mGBSLne8/rU2A9xuOPlh+Kt9amKjy+mVgkjCDSndQxk=)
3: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: bFSS96O4radzazvR0OO67dPHVo81LQWTCGUGmX2A0Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Validity
Not Before: Apr 16 21:36:16 2026 GMT
Not After : Apr 23 21:36:16 2026 GMT
Subject: CN=69e15651-318d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:0f:c0:fe:73:95:f0:c4:03:50:9d:fe:38:
34:5f:99:92:d3:c1:7d:a0:57:81:c7:79:e1:07:0e:
eb:ea:d2:af:3e:a3:7b:de:9b:3e:f9:92:19:b5:e2:
97:2e:df:f8:3f:e8:75:59:93:a8:98:b8:0b:f4:91:
6f:e8:82:91:d9:db:89:1c:8b:11:9b:e0:af:49:b2:
85:4c:8b:9b:2d:c8:bf:1f:d8:fc:ec:89:28:cf:5e:
d0:75:bf:75:b5:9f:cd:60:5e:01:31:47:af:d5:77:
78:8b:97:3e:25:2c:36:25:f6:01:24:21:08:2e:6a:
b8:f9:05:71:2c:ab:6a:30:ef:9a:ef:b3:cb:ca:bb:
8f:47:c8:c4:61:f3:48:21:6d:4b:6c:69:e8:99:4a:
2c:0f:d7:f1:28:11:8d:1c:9c:18:3f:a7:e5:1c:b4:
77:ff:9e:07:a5:90:66:ef:38:16:92:2e:da:fb:4d:
91:27:90:ee:34:a6:b2:ea:6e:43:ef:6f:6a:6a:1d:
7c:38:b4:00:7e:c1:15:e7:6d:5a:40:20:a3:35:c2:
d1:5d:6c:2c:f1:1a:fb:f3:d4:a4:c6:93:f5:ad:f7:
95:a7:64:73:b6:44:6d:08:06:21:18:aa:72:9b:c2:
30:c8:32:ac:46:f6:72:35:fb:1c:b0:89:63:96:eb:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:1F:24:84:47:EB:C0:20:4D:84:79:88:6D:34:7E:FA:2A:72:05
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:7e:88:bf:22:51:09:a4:f9:34:51:f4:80:70:fe:3b:cf:09:
d4:6d:36:1b:9d:c6:ad:ae:04:20:b3:65:ff:05:33:2f:41:39:
93:ff:26:9a:27:d6:77:45:94:b3:6b:bd:d0:31:f1:f3:ab:38:
09:7f:93:3a:08:21:dd:ef:8e:56:43:27:6e:d2:6a:a2:ef:3f:
16:d4:f1:67:29:59:63:15:03:33:f3:31:5b:66:31:c7:91:a4:
cc:3c:2f:f1:46:e3:82:b3:e6:8f:cf:3a:dd:4e:45:3e:42:8a:
9d:14:28:34:f4:e9:da:0e:6f:b9:59:d4:82:1c:fb:a5:5a:41:
52:99:14:10:e4:26:6f:6d:e4:43:d7:bc:4f:09:bf:21:6f:d9:
6a:29:f9:89:0a:69:f2:43:56:1f:d1:1b:8d:76:78:6a:be:58:
f5:54:dd:28:91:f6:0f:59:a9:d2:01:4b:c0:79:6f:8f:74:ed:
23:4f:9a:b3:80:84:b0:cd:97:42:c7:1c:46:6a:cc:6e:f1:f4:
80:29:be:36:71:67:cf:47:c7:b0:54:46:8d:2f:83:59:2d:70:
4e:92:18:78:29:24:57:ae:b6:c5:75:25:fc:62:0e:ea:a9:b4:
e2:f8:a0:24:4e:97:e4:43:66:b3:08:92:7b:c6:68:46:8c:d0:
f2:7d:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:26 2026 by rpki-client