
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json)
Hash identifier: NP+rt2Ql5cye6hqnn2HMnJY/tXycTqGedL4RTjYi1/c=
Subject key identifier: AB:EC:41:0E:A1:D9:BC:E7:73:76:EC:2A:C3:1E:6B:B7:A3:76:C0:A1
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
Manifest number: 01FF
Signing time: Wed 23 Sep 2026 02:46:56 +0000
Manifest this update: Wed 23 Sep 2026 02:46:56 +0000
Manifest next update: Wed 30 Sep 2026 02:46:56 +0000
Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: pHah2L215zslQrQ/DlPIjTABpe/TUB7djHCs68+SsPU=)
2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Sep 23 02:46:56 2026 GMT
Not After : Sep 30 02:46:56 2026 GMT
Subject: CN=6ab33da0-e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:4e:96:47:ee:9c:56:98:d1:c7:27:bf:97:
b3:77:13:39:d5:84:b2:88:fd:85:f7:0e:b7:a3:05:
f7:6b:e7:2d:39:b5:6f:3d:d9:83:d9:74:d7:80:d8:
68:29:ce:6a:a5:2b:1a:00:e6:e6:60:1c:70:ab:d6:
76:1f:19:8d:a5:85:12:74:4e:69:b0:11:24:d4:cc:
0d:56:d8:eb:de:46:a1:df:7d:36:24:fb:5d:30:f8:
6c:df:f3:1c:4f:84:e6:89:2b:5c:fc:b5:d2:18:db:
72:34:a1:96:56:45:12:19:66:45:4f:05:01:23:8d:
46:c5:24:75:f4:77:1f:36:fe:2a:a1:16:29:00:72:
eb:78:c1:c8:a2:8f:05:c6:af:75:44:d3:85:6a:dd:
49:86:70:98:df:3a:2e:a6:ef:06:b6:6f:b5:9d:2b:
92:ee:ee:8d:01:21:b6:cc:66:f4:0a:9a:39:5c:cd:
26:70:03:96:3b:85:c2:4d:f3:60:c9:a6:6a:00:fc:
ea:c6:fe:8c:0c:0a:be:11:25:1f:f4:40:00:14:57:
07:5c:a3:fe:fe:88:85:c2:79:0c:86:8f:42:36:66:
34:bc:0d:32:9e:9b:02:52:dd:50:89:46:4f:b6:a8:
f2:16:68:54:69:28:cb:fd:87:e2:34:d4:b5:05:d3:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EC:41:0E:A1:D9:BC:E7:73:76:EC:2A:C3:1E:6B:B7:A3:76:C0:A1
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:d9:23:a6:4b:13:b2:01:b2:57:ff:e4:fa:ff:e3:fc:b4:
b9:e7:71:30:1c:5d:44:4d:1c:fd:37:9f:72:b3:aa:1d:c9:81:
96:cf:69:3b:6a:23:ed:aa:cc:f5:c1:05:e6:78:e5:38:a8:07:
cf:2c:ef:3d:0e:40:82:00:fe:b5:9a:be:c6:2a:2b:0b:18:34:
d6:8a:ba:47:3e:d9:91:04:08:16:6b:34:6d:e0:6c:ab:db:87:
e6:b7:e7:41:a9:1a:33:41:81:1e:27:c7:f6:d3:6e:23:6d:5a:
c2:86:f4:26:67:9b:78:b4:9d:b7:68:0f:72:bd:a5:39:be:18:
d8:38:38:9e:39:26:91:4d:18:f0:49:d4:a6:85:a5:ef:d6:3f:
25:a4:8b:44:5f:08:f2:30:03:f8:a7:d2:cc:29:de:9a:77:b3:
6c:36:5e:9d:37:a9:34:a6:68:2e:d9:79:78:a9:7e:06:be:1f:
34:c3:8e:c7:3d:1d:d7:07:e0:27:62:19:84:da:56:46:09:05:
13:58:73:f9:37:0c:4c:9a:f7:46:c8:ad:c6:56:d2:a2:8c:13:
9d:27:d4:fb:64:19:5b:62:6a:e2:f6:62:a0:a6:2e:91:08:08:
49:dd:5b:bb:bc:98:28:10:00:b3:2f:3e:b6:b5:de:62:ca:54:
dd:62:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:13:55 2026 by rpki-client