
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json)
Hash identifier: zsOqa8jf1RpyPxVgazw3A0Saj24ey90huNAVX54LQ5Q=
Subject key identifier: 73:F1:9D:13:E3:D0:AC:63:EA:3D:70:BE:74:6D:C9:54:F9:48:2D:B2
Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
Manifest number: 0752
Signing time: Sat 26 Sep 2026 21:52:46 +0000
Manifest this update: Sat 26 Sep 2026 21:52:46 +0000
Manifest next update: Sat 03 Oct 2026 21:52:46 +0000
Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: hp3j1c8lwwuufbjfqSD7U62KNcO0xBZp6dOsXbxnNtM=)
2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Validity
Not Before: Sep 26 21:52:46 2026 GMT
Not After : Oct 3 21:52:46 2026 GMT
Subject: CN=6ab83eae-0663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:25:bb:76:38:a5:3f:df:4b:32:b6:ff:23:
22:43:e8:42:aa:d6:d6:9c:14:8c:28:2d:89:13:10:
a5:cb:f4:e0:03:04:00:0c:27:e3:7d:78:ca:dc:a4:
53:40:74:9e:6d:f2:7f:53:e6:8b:36:7c:ac:24:8c:
84:33:9c:36:07:4b:97:38:0c:a9:62:07:58:d3:70:
bc:c1:69:25:ad:d3:17:44:74:ac:03:c5:96:5b:83:
1b:80:96:4a:b8:c8:c2:c6:a0:3c:53:0a:7d:a4:50:
34:c2:88:5c:03:fd:1f:09:b3:57:43:82:dc:79:a5:
64:06:a0:7a:42:32:09:c0:d8:c7:fa:fa:a1:82:a4:
1b:e8:d6:8b:9d:95:e8:e7:7b:d8:24:4a:56:a4:2c:
4b:70:3e:e3:c6:e7:f1:3c:c3:53:7f:c4:f8:5b:8d:
61:82:42:c5:10:77:2a:0c:ae:b7:3a:20:74:c8:80:
2e:f3:aa:3e:c7:1a:f6:9e:d2:98:fa:d9:91:8f:be:
6e:7d:cd:af:8f:cf:a1:b2:b1:47:f6:5a:5b:62:cf:
79:f4:5a:8b:3b:5a:0a:89:99:77:79:42:51:2d:bf:
20:56:21:5f:58:63:e6:40:ae:4e:0c:57:e5:08:98:
b0:6b:a6:d3:60:bd:b1:6b:09:9c:db:76:32:fd:72:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:9D:13:E3:D0:AC:63:EA:3D:70:BE:74:6D:C9:54:F9:48:2D:B2
X509v3 Authority Key Identifier:
keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b7:f7:b4:5e:6b:3b:34:61:49:87:54:4d:e5:07:ec:38:ed:
b1:00:35:0c:c1:52:39:79:6b:66:45:dc:5a:68:23:ba:b6:07:
c4:49:98:3e:b2:5b:ab:5d:d0:2e:ae:a0:a7:42:20:16:ca:63:
e9:0f:da:f2:ff:3a:58:f2:e8:3d:f1:b5:5c:89:37:71:99:3a:
08:6b:83:c7:cd:b5:0c:30:5e:66:5b:2b:ea:ce:f8:d1:2b:1a:
08:72:d2:b4:3f:5c:57:df:03:82:31:99:4d:ac:4b:08:45:da:
28:45:bf:68:19:f7:88:da:4c:7c:80:be:14:62:a6:22:ef:cb:
f2:c4:c6:b2:5b:13:2b:1b:45:9d:0e:cc:14:30:d8:cf:c3:31:
1d:6c:1a:d2:f9:e6:58:d4:13:fa:01:16:86:fc:b6:ff:1c:60:
7b:2a:40:ab:70:bc:48:21:7f:6c:0b:90:4f:36:0a:34:89:d4:
88:76:80:34:0a:cf:2d:a3:6f:21:cb:93:57:a5:be:bb:b5:0b:
77:84:6b:7b:03:8f:62:9b:58:a9:59:45:33:ed:2f:4d:78:cf:
d6:7e:8d:e5:33:05:fa:9e:d4:6b:e3:9b:d8:08:3e:41:b1:2c:
00:19:49:39:af:b6:1f:6c:06:0f:fe:93:8d:1c:bd:ca:52:ab:
6c:92:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:06:55 2026 by rpki-client