
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier: 9YTszsix33SeGCO89KmL/TxxIGW2RE78KNxNhRqyWkU=
Subject key identifier: A7:7B:05:09:EC:75:CE:4F:85:7D:A3:D0:BB:7F:89:DC:78:D1:E1:4D
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number: E7
Signing time: Wed 25 Mar 2026 05:38:35 +0000
Manifest this update: Wed 25 Mar 2026 05:38:35 +0000
Manifest next update: Wed 01 Apr 2026 05:38:35 +0000
Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: cBjyioH3TA+w5gcDmIvnHfd/T+IvCw5D7yydMnLNAtI=)
2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: yevu27JexQC1pFGY5em0jam11butIck0VftNXiMexLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Validity
Not Before: Mar 25 05:38:35 2026 GMT
Not After : Apr 1 05:38:35 2026 GMT
Subject: CN=69c374db-b573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:fa:fa:1c:5a:c6:06:12:22:a4:61:18:e0:
06:f4:f5:b2:14:6b:18:9d:f7:72:2a:2c:6f:1c:73:
fe:1a:2a:82:0d:d6:50:bf:a0:7e:8d:59:dd:d1:36:
c4:03:2c:f6:70:cb:60:af:f9:c0:85:8e:2c:29:50:
5a:21:1e:0c:60:bf:a7:c2:bc:50:33:f6:23:d4:cb:
7d:ae:d1:fa:4e:00:53:66:a4:dd:bf:84:b8:7e:ed:
2c:73:59:9d:4d:84:0a:ac:71:d7:fc:27:35:fa:ab:
a4:5f:49:a2:08:13:73:9f:11:98:3b:8b:9e:b7:eb:
5f:7a:10:2d:61:c3:62:aa:56:95:6b:27:04:c1:fb:
c1:01:22:54:42:0a:64:57:83:9f:84:39:3e:12:17:
8d:30:d5:09:ee:43:7f:49:a7:82:3f:d8:49:38:aa:
2f:96:ac:22:9d:f3:5b:62:89:ec:80:e1:f6:8f:d3:
04:ec:39:81:92:6a:2b:3e:6c:ab:ad:06:c2:e6:9d:
7b:6d:e4:e5:90:3b:41:58:89:d4:77:76:5a:ca:20:
8f:c0:5d:91:f1:e8:78:ea:44:c7:73:38:a4:7c:bb:
03:9c:c9:65:f4:ee:fa:6d:63:b6:a8:13:42:28:7c:
ac:9c:50:66:88:1e:cc:7d:a3:89:fc:e1:32:6c:ec:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:05:09:EC:75:CE:4F:85:7D:A3:D0:BB:7F:89:DC:78:D1:E1:4D
X509v3 Authority Key Identifier:
keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:da:f4:89:1d:7a:a8:33:a6:1d:de:30:0a:fe:fe:4f:b9:
85:61:00:6f:27:d8:8d:a6:06:07:17:c7:98:45:01:25:23:8d:
de:57:76:46:2e:ce:34:fc:63:bc:ff:42:ab:d5:28:61:83:bd:
81:4f:3b:9f:b5:be:53:87:d3:c1:40:26:8a:2f:43:42:24:a3:
58:b5:69:0b:d3:44:c5:8a:9c:a5:d9:74:4d:13:c9:50:6b:e9:
37:a8:b0:d1:37:c9:52:4d:5a:55:7f:ac:e8:9c:42:98:01:08:
6a:d8:70:40:c8:ba:c5:e7:20:f0:d6:be:a0:a6:78:c2:92:46:
fa:38:77:5d:5a:e7:75:9f:56:87:9b:57:ca:b2:11:7b:6c:17:
3d:fc:c3:32:51:05:17:78:07:f3:ce:8d:18:fc:cb:4e:4d:c7:
9a:6a:f9:5e:a5:f5:2a:d3:5a:96:4c:30:f8:7d:50:e2:25:87:
e2:02:e7:91:c7:b5:a5:40:a0:eb:52:8a:ac:ce:26:7d:c1:51:
1e:46:1b:88:82:58:87:af:d8:22:8f:55:00:ed:33:e3:ee:c7:
96:55:00:7a:ec:52:9f:dd:53:00:3a:9a:c7:7c:ec:73:be:b9:
a1:a0:6c:58:60:f0:a0:06:06:81:97:67:ab:9e:ee:af:0c:d8:
68:13:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:52 2026 by rpki-client