
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: LMGrkiTrtKMZqnJzcrZ+i1/+gx+QDJuvF9eHGp8jaqM=
Subject key identifier: 2A:63:E8:88:CA:C9:75:42:EC:9B:0D:98:3A:84:F5:79:AD:69:D7:01
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 07A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 0792
Signing time: Sun 26 Jul 2026 22:17:03 +0000
Manifest this update: Sun 26 Jul 2026 22:17:02 +0000
Manifest next update: Sun 02 Aug 2026 22:17:02 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: 96V8FVD7JSfumlLpY7XdGzs9bnhGPcZdutcgTujgKWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954 (0x7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Validity
Not Before: Jul 26 22:17:02 2026 GMT
Not After : Aug 2 22:17:02 2026 GMT
Subject: CN=6a66875e-d48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:d4:b9:80:9e:ae:1f:29:c3:8e:0c:c9:87:
29:34:60:51:61:1b:b7:34:6b:df:0a:57:47:b5:8a:
d4:f7:5d:03:0c:b1:e3:c0:1a:d2:ba:01:00:ba:c9:
7a:e2:2c:f6:a3:c6:d8:76:96:8f:37:7c:ce:f3:c7:
c0:eb:31:27:5c:b2:2d:e9:2d:d4:b9:79:ab:6c:d0:
44:47:a5:44:33:12:9f:f8:3c:94:86:8f:d1:74:bb:
4e:e6:df:9e:e1:c3:49:a5:ca:83:04:fc:17:03:08:
b7:53:13:ce:50:38:83:3d:11:0e:12:5d:70:1d:d8:
70:0a:29:89:38:f0:95:7b:50:2d:bc:15:1e:08:15:
1c:a1:88:85:16:9b:30:82:43:8d:d1:37:fe:53:09:
cf:06:8f:ff:96:89:0d:ee:1e:a7:f8:bc:36:51:82:
ce:7b:1e:fd:47:ce:25:2f:fd:07:51:09:03:2a:d4:
b9:65:80:1c:07:47:44:a3:92:92:c3:84:82:74:69:
59:20:17:c3:cc:a9:8e:85:32:36:41:2e:5b:23:0a:
c0:7c:1a:b7:d0:d9:73:05:d8:60:7e:57:20:ae:ba:
93:93:c5:df:88:c7:51:ac:c2:6e:f3:70:23:18:e5:
bc:59:71:b6:97:67:c6:d2:aa:47:62:91:e0:6f:5b:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:E8:88:CA:C9:75:42:EC:9B:0D:98:3A:84:F5:79:AD:69:D7:01
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1a:50:a1:c0:80:0d:1c:c8:f3:a7:cf:2b:05:38:d1:fe:53:
ce:f0:58:24:00:f6:5b:da:09:e1:87:fc:af:be:da:b8:66:fd:
4c:ad:23:2e:71:f3:63:4c:21:75:b5:78:d3:a8:0c:00:8b:fe:
a6:e5:a8:37:65:73:fc:40:48:3a:91:24:50:c8:30:ae:c6:a8:
52:ce:a5:1b:01:4d:ea:8f:e0:09:c8:da:61:1f:dd:14:df:1b:
72:f4:46:d4:eb:f6:d1:f3:50:42:54:a1:da:52:37:b9:cb:1c:
d5:b4:08:36:f1:de:af:5c:c7:f1:13:fb:01:b1:72:f4:72:7d:
44:ea:2d:3e:0b:62:b7:51:67:e2:e5:83:7f:c2:02:1f:0e:2e:
e5:d8:8e:4a:eb:f2:5b:53:7d:26:e2:12:b2:0c:c5:6e:bd:ab:
f2:f8:30:d5:14:7a:54:fd:c8:a4:77:c7:be:19:d1:e4:5d:37:
34:f7:da:8d:56:f2:04:ce:59:30:01:0b:b8:b8:77:ca:ef:48:
21:eb:26:ac:e2:1e:d0:c1:bd:de:1f:16:e4:74:c3:48:24:0a:
a9:32:8c:05:32:02:6e:fd:92:35:6a:71:94:f7:46:f4:6e:f1:
a5:d1:d4:98:28:0c:a6:99:fa:ed:ba:cf:e3:02:e6:85:bf:b8:
89:66:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:24 2026 by rpki-client