
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json)
Hash identifier: dYdZHgeXJdAPeoBS/jtH4SGUohsrlYIdTjsVgNXlZXE=
Subject key identifier: DD:AF:7D:1E:A6:73:76:A1:24:C1:95:2F:90:D4:B1:F8:DF:08:F3:52
Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
Manifest number: 018F
Signing time: Thu 01 Oct 2026 05:30:59 +0000
Manifest this update: Thu 01 Oct 2026 05:30:58 +0000
Manifest next update: Thu 08 Oct 2026 05:30:58 +0000
Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: QE8gZukZYrUaHgTvvru0wKBQEEMBQCa3Y+Q4Ca0qaAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 05:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Validity
Not Before: Oct 1 05:30:58 2026 GMT
Not After : Oct 8 05:30:58 2026 GMT
Subject: CN=6abdf013-1b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:03:f3:83:6a:b4:c3:15:2a:d7:e3:26:90:
9b:63:ca:70:08:8c:56:9a:55:0b:54:d6:05:29:e1:
4f:9b:14:45:93:d2:0f:22:4a:55:bb:96:84:d0:77:
65:42:ce:2f:86:df:05:f3:1a:ca:d8:48:b6:4c:c4:
4d:50:37:02:f9:64:a3:e1:15:c3:11:ba:23:f6:fe:
1f:90:cd:c0:9d:fd:bb:99:ed:26:ef:38:81:aa:7c:
8f:14:1a:28:35:59:83:7e:bd:7b:13:f1:f9:c5:b9:
bd:94:72:3d:ea:04:fb:66:78:88:bf:2e:6c:ad:7e:
35:95:de:e7:5f:9e:cf:a8:02:78:5c:e1:84:52:16:
ee:eb:d1:c6:bf:1e:02:c2:05:0c:60:3b:96:b2:e8:
d5:20:1a:61:b2:a2:3b:86:57:27:0f:36:dc:30:56:
7a:43:61:7d:77:c9:dc:76:20:32:c6:44:26:64:30:
08:66:68:ab:f1:4f:b9:85:39:a7:d8:ea:fc:12:08:
cb:34:09:da:5e:cb:27:80:e4:81:d5:e3:cc:5d:7f:
84:65:83:d3:2a:16:0c:ed:e1:dc:97:ab:8e:51:3d:
93:12:48:41:35:6a:e0:19:71:a6:43:67:b6:02:20:
2e:e6:23:a0:21:97:d0:0b:fd:8d:21:54:42:5d:b6:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:7D:1E:A6:73:76:A1:24:C1:95:2F:90:D4:B1:F8:DF:08:F3:52
X509v3 Authority Key Identifier:
keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d8:78:01:e5:64:70:1d:ac:a4:86:2c:37:94:3e:92:6d:62:
8c:05:5b:23:ee:da:89:d8:11:99:93:bf:9f:52:85:29:b7:e8:
2b:69:07:33:50:47:95:73:24:63:5e:12:50:1c:0d:90:77:4e:
5d:8c:49:2e:3c:75:8a:a9:3f:cb:e5:22:1f:42:28:5c:42:1b:
f0:bd:0e:92:b5:00:96:74:19:d4:ec:5a:05:ac:2d:ae:65:fe:
c1:22:8b:13:1f:9d:43:92:2b:6c:9d:bd:88:18:12:fc:d9:b4:
9e:2b:19:77:e9:fd:94:d6:43:0a:e4:19:ca:33:50:a3:ef:c5:
92:fd:4a:fa:5f:be:81:1f:3f:1f:ee:e7:d0:0a:64:30:99:64:
8e:89:b4:2b:87:2d:03:68:af:15:5a:5d:e4:44:1f:64:6d:2c:
0d:14:30:64:fb:93:0d:ef:4d:74:44:a3:7e:74:a4:e6:dd:de:
dd:1b:53:4e:22:4c:f9:e5:27:3c:16:9d:c0:2a:0a:3a:d2:60:
c2:e7:f4:d1:b0:5e:f3:01:f9:85:d3:90:43:5e:06:77:be:6c:
87:f8:6d:d9:4c:61:72:8f:1b:64:50:bd:f9:bc:5c:a5:10:86:
b2:3c:35:42:bc:28:c3:85:a8:7f:76:26:98:d5:83:30:8e:6b:
8b:91:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:25:04 2026 by rpki-client