
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json)
Hash identifier: mTzprrK2/msvciNIW3So+j/tPt70Bjq86HNO/+FFiqc=
Subject key identifier: 0E:E6:12:08:C0:F1:37:80:7C:CB:F8:D3:EE:34:38:97:9E:58:68:BC
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
Manifest number: 2790
Signing time: Tue 24 Mar 2026 16:12:38 +0000
Manifest this update: Tue 24 Mar 2026 16:12:37 +0000
Manifest next update: Tue 31 Mar 2026 16:12:37 +0000
Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: +WVW1z9z6CaUiF1ky8jhskxa3mZE7RtEL0wB63ggzCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Validity
Not Before: Mar 24 16:12:37 2026 GMT
Not After : Mar 31 16:12:37 2026 GMT
Subject: CN=69c2b7f5-bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:1f:45:51:8c:ef:f2:df:6d:d5:3c:b6:1a:
37:11:9b:77:56:a7:a0:e1:f2:24:22:80:fe:af:b1:
bb:72:63:e9:69:50:c7:0a:11:7d:8e:ca:ef:76:9d:
5e:78:d9:d2:b7:d2:a0:8b:2c:91:80:3b:61:31:9e:
0e:d4:05:4c:83:94:04:22:bb:b8:58:5b:cf:20:76:
9d:30:c7:f0:48:54:79:cb:b4:d7:9b:5a:62:d4:82:
5a:d3:c5:d5:01:cc:26:94:a3:b6:50:e4:30:60:38:
f3:58:64:3e:d8:af:40:16:f4:50:10:a4:cb:b1:56:
1e:c7:66:31:9e:eb:d8:88:4a:e3:13:2a:d5:7b:ab:
1c:41:a5:56:1c:ce:0a:a2:c6:9e:c6:48:a9:f4:fe:
5e:cc:67:0b:b8:33:79:ef:56:d7:6c:ed:c5:4c:bc:
81:c8:2d:10:c4:29:7f:af:e3:d6:04:92:03:e7:c9:
0d:18:d2:f4:6b:f7:9b:42:28:67:50:4c:94:9f:43:
b9:54:32:6a:d5:6f:03:3c:00:28:f2:d1:3e:49:f6:
19:9b:9c:66:95:ec:3d:fb:c6:c0:1b:1b:3e:01:a5:
3f:04:72:7a:dd:e8:0c:19:1b:fe:d8:69:9a:d0:84:
14:6a:ee:e9:f6:d1:8e:1d:f8:10:cf:94:9d:fa:7a:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:12:08:C0:F1:37:80:7C:CB:F8:D3:EE:34:38:97:9E:58:68:BC
X509v3 Authority Key Identifier:
keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:8f:14:a6:1f:76:fb:3d:91:5f:05:99:e9:8f:38:67:30:73:
82:6f:47:6e:7f:8a:68:57:b2:7a:74:07:b7:83:89:14:58:21:
41:83:11:d5:75:1e:03:c4:65:97:11:93:3d:9a:ed:f3:6c:06:
47:7a:04:27:99:80:1e:70:ca:2b:3b:35:1b:ad:fd:d3:52:d5:
45:ad:92:aa:74:71:62:e3:be:56:a1:b3:1f:24:7c:57:be:e1:
64:97:f9:3e:55:91:64:25:b6:c4:45:e8:01:4c:ac:74:6c:e2:
6f:90:3e:a7:aa:eb:eb:aa:9f:04:5c:7a:cb:4a:7d:0d:cd:0b:
e5:22:e6:cf:8a:fc:4c:fd:ae:76:b4:1d:6d:c4:3d:3c:d4:9f:
d1:cc:0a:6b:b2:6e:7d:2d:4e:f7:8a:95:4b:f3:b2:d4:2d:d2:
07:23:97:1b:07:81:6b:e8:f5:28:82:04:27:c5:d2:1a:28:f0:
91:19:17:b1:cb:14:7c:e5:2b:a9:c6:6f:08:61:2a:d9:81:32:
e8:3c:37:e1:e6:96:05:0f:8c:09:7f:93:23:a7:68:c7:8d:a2:
12:f8:76:de:47:b0:aa:df:b9:49:28:c7:c0:89:16:ee:1a:5d:
f7:96:fd:f9:66:d5:0b:d4:38:23:4e:20:21:47:03:11:14:32:
b8:28:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:11 2026 by rpki-client