
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: 4zEsdVsBye6s6nfakBMzWg8go9L8dl+kCvtejvbXhNU=
Subject key identifier: 07:7F:C3:EC:D7:6A:36:14:65:C6:B0:80:87:B0:59:D8:0D:3B:88:CA
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 04E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 04DB
Signing time: Fri 12 Jun 2026 23:50:55 +0000
Manifest this update: Fri 12 Jun 2026 23:50:55 +0000
Manifest next update: Fri 19 Jun 2026 23:50:55 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: C0Pg66hXpONnB3YAfwerCU7GHPhPOd81r2Al5NSzcyg=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Jun 12 23:50:55 2026 GMT
Not After : Jun 19 23:50:55 2026 GMT
Subject: CN=6a2c9b5f-60a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:94:c9:8d:cf:6a:9b:5f:ad:93:a4:87:dd:
ea:c1:35:ca:51:be:30:cc:a3:17:37:42:73:c2:19:
03:06:33:d8:f2:47:03:51:12:2b:60:dd:79:df:a2:
2b:49:6c:94:f1:8d:d1:15:60:fe:09:bc:58:71:f9:
2e:95:c7:1c:f8:c1:4b:37:98:a3:28:13:b0:bd:a2:
20:d5:cb:4b:5d:ad:c9:76:47:64:c5:d8:44:93:5a:
04:b2:e5:3c:b1:72:db:be:ae:19:68:09:e6:23:58:
66:0f:32:6f:dd:68:c3:8b:97:2f:87:8f:0b:2a:b2:
3f:82:92:40:ee:8e:47:aa:70:3f:68:22:1c:b2:d8:
ab:56:be:d8:de:d7:e5:5a:ab:18:8e:df:ef:0b:42:
12:2c:10:99:0f:b7:ea:3f:27:c0:98:8e:0b:a7:d0:
f6:c9:1d:c3:b7:13:30:e6:fe:2b:47:38:90:e4:b6:
f1:7c:2a:ea:a1:38:66:14:03:3d:30:1d:52:c0:ec:
b6:d5:42:14:83:30:05:5e:f3:98:f0:78:9e:9d:ef:
53:e5:e8:19:dc:20:94:a6:cf:97:83:02:e5:5f:f6:
3b:f1:20:c7:33:7d:35:75:2e:5a:fa:ce:f3:7a:78:
f8:0b:66:d4:04:c8:67:6b:81:46:a0:e3:db:af:47:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:C3:EC:D7:6A:36:14:65:C6:B0:80:87:B0:59:D8:0D:3B:88:CA
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:90:b4:1e:01:19:38:b1:17:7d:47:13:e1:c4:e0:c6:5b:f3:
ca:bc:a8:61:b1:ff:b4:71:9b:db:48:99:00:f4:99:de:91:8d:
fb:7a:44:c1:ab:db:88:42:69:28:f8:5a:29:c4:6f:08:3c:ef:
3b:58:c4:f1:09:a0:86:bb:d2:96:b9:cc:ad:b6:5c:1f:f3:33:
1e:10:81:08:37:3d:f1:24:8a:49:eb:17:3b:47:d3:2c:45:d3:
50:bf:72:05:7e:18:5e:6f:7c:c7:f3:ee:c3:f1:a1:35:19:9e:
d4:92:1a:41:b0:6b:cc:4c:0d:a9:9e:fb:ff:6b:10:f1:f2:8f:
03:ff:39:08:14:1e:05:cd:82:f6:8f:83:32:93:2c:fa:be:b3:
1f:21:cc:fa:b6:2f:4f:4b:6d:14:67:66:7f:77:5f:e0:00:c6:
89:94:2c:c0:9e:13:44:72:0c:98:07:87:99:3e:ec:60:a4:e2:
35:70:a0:b8:bc:35:12:9e:8c:52:0f:92:8d:2b:34:1b:63:02:
14:bf:85:c7:2e:57:8f:a7:78:66:25:df:c7:62:18:4b:f5:08:
54:d3:15:b5:6d:43:4f:12:33:e3:45:99:4c:fd:0e:c1:ac:ea:
9b:34:c8:3d:b6:cb:a4:88:b5:15:4d:9b:8f:ca:77:0a:46:3b:
67:c9:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:40 2026 by rpki-client