
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json)
Hash identifier: eCvKGPbq3vjK5iUhkXhjeWPDUHAF8/nMxUTMXJW44vo=
Subject key identifier: 07:57:D2:03:30:73:AD:57:40:7C:7B:CF:12:59:83:15:82:D6:E5:0C
Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Certificate serial: 0714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
Manifest number: 070C
Signing time: Tue 12 May 2026 22:03:49 +0000
Manifest this update: Tue 12 May 2026 22:03:49 +0000
Manifest next update: Tue 19 May 2026 22:03:49 +0000
Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: VDIVIefcq9I9pwJJSIhjYGPBneYwJJ5XbJTlyBnUrsg=)
2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Validity
Not Before: May 12 22:03:49 2026 GMT
Not After : May 19 22:03:49 2026 GMT
Subject: CN=6a03a3c5-e46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:93:45:a0:ea:59:c4:3c:f3:12:27:27:05:ac:
74:19:cd:8e:27:55:87:78:95:37:73:6d:a4:20:af:
91:89:7b:52:5a:8e:70:35:cc:c9:9b:41:c5:95:c3:
6a:c1:03:78:8e:aa:c5:99:82:33:a2:3e:a4:ab:57:
d0:c5:d9:1c:e7:3f:23:ec:72:88:27:a9:ca:50:a5:
65:ad:06:91:2e:35:18:d2:a5:d1:44:37:1e:bb:5e:
de:fd:8c:8e:c1:5b:4e:3b:84:8a:d6:87:e0:bd:a5:
70:ba:f1:f0:f6:67:f7:02:9d:c1:29:97:ec:d6:18:
2c:b8:e7:53:5f:3d:a7:22:d6:c7:2a:be:9c:0c:b1:
3f:c1:68:62:30:7f:f1:02:e1:0b:fd:e8:e9:b1:d0:
04:02:79:eb:26:ae:1f:c6:1e:46:59:00:7a:1b:2c:
dc:8f:57:85:54:47:ff:59:73:b3:c1:f8:c8:eb:ab:
62:64:9e:97:d5:09:8f:41:49:e6:78:19:df:2d:a6:
a3:53:67:cf:60:5a:33:14:5b:23:fc:aa:53:5b:a5:
ea:30:06:30:ae:dc:ee:f6:07:66:c9:f1:90:3e:f6:
e9:8d:02:f0:fe:db:7f:3d:df:6e:06:16:31:2b:b0:
be:10:af:df:41:d2:51:75:43:16:7c:cc:fd:f3:4c:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:D2:03:30:73:AD:57:40:7C:7B:CF:12:59:83:15:82:D6:E5:0C
X509v3 Authority Key Identifier:
keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a5:7f:df:b5:1a:0b:d9:ab:fc:35:4d:36:5b:5f:66:66:9f:
1d:c6:96:5a:64:7a:6e:2a:31:ae:f9:37:03:df:47:a4:51:19:
1b:a2:93:57:23:47:3b:57:c7:7c:40:b1:f5:37:8e:66:09:8f:
aa:1f:b7:2d:bd:40:46:bc:b6:36:0c:04:ec:0d:fc:58:83:12:
ff:18:c7:82:a1:35:34:73:bc:e2:74:57:ec:f0:be:58:63:60:
8c:81:6d:36:e0:47:fe:45:77:9e:6b:7b:d9:85:bd:89:19:5e:
2b:ad:28:cc:61:1d:5f:59:61:5b:43:83:e6:71:84:94:9a:42:
e9:53:e1:ba:99:e9:53:35:7e:0f:ad:6b:d1:80:74:b0:71:86:
51:53:35:5f:89:47:df:a4:ab:d8:35:8c:0d:3a:6e:91:b8:7f:
6d:53:bb:b6:ae:48:22:ca:67:0c:d9:28:b5:29:4d:e9:5f:3d:
af:0e:bc:92:ff:8d:7e:6a:4f:53:36:63:49:40:9f:5e:ae:e5:
a1:88:ab:f4:b8:81:13:b9:28:93:50:f0:19:2e:45:d4:2d:3a:
2b:50:69:9f:ba:35:cf:31:e9:bc:d7:08:fb:ab:1e:b5:a9:61:
65:dc:82:28:99:16:4d:e4:43:f9:0e:13:aa:2f:e5:9e:8d:92:
6a:19:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:20:33 2026 by rpki-client