
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json)
Hash identifier: AXOZJUcyq2A2Mlt4M+/zhG8i/7uhTVjA+Y+nHjS6uw8=
Subject key identifier: EE:65:EB:8C:76:82:64:24:64:4C:B2:06:AA:27:B2:12:AE:FD:91:BF
Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Certificate serial: 0376
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
Manifest number: 0376
Signing time: Thu 15 Oct 2026 01:14:54 +0000
Manifest this update: Thu 15 Oct 2026 01:14:53 +0000
Manifest next update: Thu 22 Oct 2026 01:14:53 +0000
Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: yL5N3GTyqzBuJMw7K7X0rePXYcfOSKUelVsH+G33bx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl
rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 01:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Validity
Not Before: Oct 15 01:14:53 2026 GMT
Not After : Oct 22 01:14:53 2026 GMT
Subject: CN=6ad0290e-8cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:85:c9:dd:64:35:4c:76:e8:aa:7b:e1:e1:
a5:e1:e1:c6:2c:6a:47:7a:d9:70:e6:b5:78:95:be:
b8:8b:7f:d6:59:d4:f9:1a:bc:ee:11:49:01:81:3c:
ea:76:4c:da:0c:c0:46:0a:df:36:6c:88:3f:6c:4e:
0b:3a:e4:c7:fe:bc:77:bc:27:85:fe:0a:51:d7:b1:
61:3c:77:d9:a3:9b:b8:b3:8c:f9:2a:7a:90:10:d3:
2b:86:99:ff:a1:ff:43:65:19:9f:8c:d1:34:fb:d4:
91:7e:e4:c2:9d:67:3f:ab:1f:4f:61:50:35:b6:cc:
24:8e:8a:7f:55:f7:a6:18:f3:5f:b0:29:33:cf:71:
e8:dd:95:18:0c:83:1e:66:3b:c8:b3:8f:e1:3b:38:
b4:46:9d:a5:78:6d:35:72:4d:db:61:55:9b:ef:cc:
ec:5f:c7:39:8c:93:da:6e:e4:45:37:da:9c:a6:b8:
ab:41:1f:01:50:3e:2e:42:71:9b:37:9a:17:d2:dc:
64:73:31:6f:83:52:10:d9:72:cd:35:84:64:92:3b:
c0:08:4b:fe:df:f3:75:62:46:1d:11:e9:2d:8b:20:
b8:07:b7:1a:9f:d8:81:12:73:53:93:5d:90:17:19:
5e:8f:b5:58:11:98:29:6a:ba:b4:7e:06:01:5b:da:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:EB:8C:76:82:64:24:64:4C:B2:06:AA:27:B2:12:AE:FD:91:BF
X509v3 Authority Key Identifier:
keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8c:d9:69:46:b6:e4:78:ac:50:f0:38:ab:8f:cd:0f:25:b0:
1f:ca:dd:c0:3b:f3:b0:7f:cf:49:6f:3f:7a:7a:9c:c0:37:d3:
a9:ea:59:f6:26:55:f7:9b:f9:a5:dc:a2:3e:58:bf:92:e7:b4:
0f:64:cb:6d:eb:0a:c6:2d:7f:f6:d6:0e:60:2e:74:62:53:9c:
af:78:dc:5f:e0:43:b9:f2:d9:76:d0:9e:cd:d7:a0:a6:8a:f4:
2b:27:33:d0:eb:cd:b3:20:b7:4f:0c:47:91:ac:63:a5:d7:10:
ed:a8:75:49:32:76:12:d9:38:b6:ce:ac:5e:a1:0e:44:95:09:
b2:2a:12:6d:bd:75:1d:da:19:a0:17:19:a9:d2:d5:f4:6e:f6:
ed:e1:46:0b:cd:84:6d:13:f0:0a:e0:c0:c9:8c:ba:69:db:f8:
23:a2:0f:af:f3:cc:7c:ec:a7:dc:4b:21:c8:08:2c:2f:cd:98:
87:01:93:69:19:7d:30:50:c2:13:22:2f:63:bc:6f:d7:18:c7:
e4:36:8e:21:ca:aa:e0:60:aa:6e:91:34:b0:05:cd:e1:92:b9:
81:de:bf:18:46:74:fe:0e:47:9c:6a:44:38:56:2f:af:3b:34:
14:e4:c0:24:06:bc:d4:85:eb:67:c4:38:68:94:6d:0f:8b:67:
41:52:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:32:40 2026 by rpki-client