
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json)
Hash identifier: +RQDkE1XqCbz8JATMZBFjwNF81kaHNQH2lt2IJhqPdg=
Subject key identifier: D9:9B:25:37:13:13:A7:CF:13:5D:BC:EC:5E:F4:39:EA:B0:98:20:51
Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
Manifest number: 012E
Signing time: Wed 25 Mar 2026 04:44:23 +0000
Manifest this update: Wed 25 Mar 2026 04:44:22 +0000
Manifest next update: Wed 01 Apr 2026 04:44:22 +0000
Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: 1KB1vCElEssCRlvLMOuq9XdJy3TbAbaIYSlC4qAAIag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Validity
Not Before: Mar 25 04:44:22 2026 GMT
Not After : Apr 1 04:44:22 2026 GMT
Subject: CN=69c36827-f357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:0b:4f:cb:ac:b0:99:68:3e:1f:db:50:4d:
f1:bd:75:38:a0:ea:78:cd:47:be:6c:19:82:9f:17:
65:67:21:06:3c:d9:dd:05:7a:38:37:ee:c1:ee:33:
85:2e:79:89:4c:45:ed:92:72:50:1d:fa:de:f9:28:
b1:f8:7c:76:63:b3:aa:82:22:ae:02:aa:16:4c:db:
0a:67:18:40:69:9f:7f:3d:2c:d6:49:a3:ac:a5:a2:
e6:91:5b:16:71:37:ea:9e:89:11:51:a4:fb:22:50:
5d:72:53:3d:f8:3b:73:2f:18:e6:ea:f9:b4:f3:47:
f4:6c:85:4b:30:14:50:f3:59:7a:48:8d:9f:b2:69:
c6:69:6f:86:c5:bf:f9:4e:0b:88:ff:34:a6:21:ef:
8d:ca:f2:31:3b:42:10:ce:35:a0:50:c8:7f:93:ad:
c1:d1:b9:01:0e:eb:30:c6:bd:eb:23:5b:c4:1c:1f:
85:b2:68:04:0b:28:df:e9:29:02:15:db:99:8e:dc:
a8:d1:9b:42:56:c1:29:88:b4:93:f1:95:c9:c6:7e:
d8:db:24:e5:bc:94:cd:0e:e1:85:1f:71:f7:6d:7b:
5d:d8:ec:51:8d:4b:82:55:58:55:40:5d:2e:7f:76:
3c:3a:82:f5:99:57:ce:a3:03:a2:1e:7b:c2:5d:02:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:25:37:13:13:A7:CF:13:5D:BC:EC:5E:F4:39:EA:B0:98:20:51
X509v3 Authority Key Identifier:
keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:48:d5:29:b0:8a:84:aa:c8:ef:ef:4a:46:d7:d5:24:a8:b4:
96:ec:ab:b3:4b:7a:ff:1d:26:89:95:a2:4f:7e:fd:a7:6f:f7:
ed:77:5e:c3:ce:34:6a:af:c1:20:ca:f8:71:24:cf:87:de:45:
6c:8b:fb:57:b6:38:49:a5:de:ac:f8:8f:ff:d8:39:dd:5b:d4:
4d:2b:ab:8a:c3:b9:63:e9:2f:1e:be:c2:34:db:20:83:0a:57:
5b:ce:b1:ff:5c:61:02:b5:b7:9c:02:83:15:76:3d:fe:ec:83:
a6:54:b0:96:f9:31:79:7f:91:99:52:3d:b3:43:97:4d:53:9b:
c9:1b:13:60:76:33:f5:9b:8b:6a:be:0d:66:7a:e4:ca:87:af:
22:1c:e4:f9:fb:48:b9:4c:10:85:1f:c0:34:fd:bf:bd:58:63:
30:be:4f:c8:eb:47:b8:07:40:92:83:be:cc:32:a2:05:86:6c:
0a:3e:7f:2b:31:df:e3:17:ae:fb:da:30:a7:86:3a:aa:74:f7:
97:4e:bb:a5:36:0c:5b:7e:d3:23:28:8b:cf:c7:27:35:b9:7d:
de:65:75:e6:bb:b5:70:85:9f:23:f2:e6:0e:d0:49:68:80:68:
15:56:98:49:74:86:a8:d7:3b:37:dc:3c:4c:a1:94:fa:d0:a9:
15:26:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:26 2026 by rpki-client