
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json)
Hash identifier: DC03obHIQ1yfkEL2kz9XkW0TPHo9jXCl+fqNZAkG4pw=
Subject key identifier: 7D:10:62:11:5F:62:0E:D5:EA:BA:DC:94:48:C0:61:10:19:68:B1:44
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
Manifest number: 0467
Signing time: Thu 26 Mar 2026 23:54:48 +0000
Manifest this update: Thu 26 Mar 2026 23:54:47 +0000
Manifest next update: Thu 02 Apr 2026 23:54:47 +0000
Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: ooAEMwJnn7L3WQEQ6ZICbv1Vidbxyhww6PKQUCjZUNE=)
2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: esobtMTQ83ifAe3YqijDiKUn/KklzpUoFIodQFJNV+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 23:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Validity
Not Before: Mar 26 23:54:47 2026 GMT
Not After : Apr 2 23:54:47 2026 GMT
Subject: CN=69c5c748-8f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:5a:ae:0b:ec:0e:57:f2:bd:52:6d:4a:0e:
e7:75:fb:6f:fb:1d:84:86:63:57:52:c2:23:81:c6:
6d:45:c2:b2:7c:a9:a6:62:cb:04:9a:f5:12:92:4b:
28:7d:51:da:03:c1:b2:da:a7:64:0b:45:2f:c0:20:
1f:fa:c9:81:0d:5b:08:f1:db:1b:c9:0b:f6:97:02:
96:68:30:43:e5:94:81:c4:36:86:bb:b1:5e:ee:71:
3b:4e:7b:64:e2:89:0a:47:62:ce:75:1b:da:97:bf:
9f:ac:84:ea:6b:7a:1b:e3:4e:1f:a6:ff:56:be:fa:
47:09:90:0d:94:75:9c:aa:27:4b:b8:e8:64:98:f9:
96:81:2e:65:c5:f5:cc:b6:d9:bc:00:72:0b:52:97:
4a:a2:59:6c:7b:a2:c7:39:9d:4e:b3:3a:5d:f7:4c:
3f:a9:13:5b:14:1f:a9:2d:5d:ce:2d:ec:1a:4b:78:
2c:90:7d:21:71:95:c7:fc:41:80:89:45:43:28:2f:
44:fb:ab:3f:91:b3:9b:a4:7b:fc:32:4d:70:27:0d:
99:53:8c:78:bf:0e:35:73:3b:d9:38:ba:e9:45:0d:
1a:2a:08:e8:44:e1:a9:67:1d:5d:aa:8f:da:c8:f6:
2c:40:87:1a:66:e2:f9:9d:c4:8d:45:dc:4a:08:fe:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:62:11:5F:62:0E:D5:EA:BA:DC:94:48:C0:61:10:19:68:B1:44
X509v3 Authority Key Identifier:
keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:6d:48:24:80:24:2f:75:2c:6c:28:c7:40:d5:54:a1:17:62:
ce:fd:6a:e2:2b:84:7f:d5:10:83:65:fb:05:d7:d5:58:5a:17:
56:b9:3b:73:b7:66:e4:05:5d:b1:e6:f3:6f:4d:bf:04:09:97:
31:27:df:8f:4f:8d:cf:d1:77:ed:e2:a7:d1:02:56:e9:f3:a7:
87:de:5e:f0:88:c4:d5:91:b4:a3:8a:5b:d3:4e:ba:48:51:18:
d4:f1:65:69:67:86:dd:b4:34:fd:4e:b4:2b:56:55:f4:18:5f:
02:d9:3e:05:6e:cd:b9:e3:33:36:26:49:15:54:af:5d:3e:02:
33:0d:25:dd:2b:3f:12:d8:88:49:d7:7f:d0:d2:be:fc:4f:80:
93:be:da:a0:89:08:b4:48:11:41:d5:fd:7b:59:58:ad:89:20:
5e:92:3e:8e:a2:77:67:f7:33:38:47:fd:68:fe:c4:3a:6e:b1:
1b:aa:5a:5a:75:9f:ca:3a:3c:56:72:45:b8:37:92:f6:15:d9:
cc:1f:8a:92:4e:34:0b:8c:3a:82:29:48:6f:e7:66:13:f4:f2:
dd:2b:54:14:e3:69:f7:2c:03:d7:ba:f4:b9:b1:4f:b5:68:c9:
f0:fd:bf:08:62:e5:91:1e:62:35:b7:d9:ea:ae:29:0d:38:53:
70:7c:d2:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD
QUMxMjhCNEMwHhcNMjYwMzI2MjM1NDQ3WhcNMjYwNDAyMjM1NDQ3WjAYMRYwFAYD
VQQDEw02OWM1Yzc0OC04Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7JFargvsDlfyvVJtSg7ndftv+x2EhmNXUsIjgcZtRcKyfKmmYssEmvUSkkso
fVHaA8Gy2qdkC0UvwCAf+smBDVsI8dsbyQv2lwKWaDBD5ZSBxDaGu7Fe7nE7Tntk
4okKR2LOdRval7+frITqa3ob404fpv9WvvpHCZANlHWcqidLuOhkmPmWgS5lxfXM
ttm8AHILUpdKollse6LHOZ1Oszpd90w/qRNbFB+pLV3OLewaS3gskH0hcZXH/EGA
iUVDKC9E+6s/kbObpHv8Mk1wJw2ZU4x4vw41czvZOLrpRQ0aKgjoROGpZx1dqo/a
yPYsQIcaZuL5ncSNRdxKCP7TzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0QYhFf
Yg7V6rrclEjAYRAZaLFEMB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4
OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np
MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3
VlJWMko5NXlGT25Ld1NpMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeW1IJIAkL3UsbCjHQNVUoRdizv1q4iuEf9UQg2X7BdfVWFoXVrk7c7dm5AVd
sebzb02/BAmXMSffj0+Nz9F37eKn0QJW6fOnh95e8IjE1ZG0o4pb0066SFEY1PFl
aWeG3bQ0/U60K1ZV9BhfAtk+BW7NueMzNiZJFVSvXT4CMw0l3Ss/EtiISdd/0NK+
/E+Ak77aoIkItEgRQdX9e1lYrYkgXpI+jqJ3Z/czOEf9aP7EOm6xG6paWnWfyjo8
VnJFuDeS9hXZzB+Kkk40C4w6gilIb+dmE/Ty3StUFONp9ywD17r0ubFPtWjJ8P2/
CGLlkR5iNbfZ6q4pDThTcHzSDA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:31 2026 by rpki-client