
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft
File: kaNAPNs-fi5T9OZhBZESgyz5-M4.mft (raw, json)
Hash identifier: phVcRIhu/kABZfvOb/+9t5i/WnXMHj7c0iemX3Rlug4=
Subject key identifier: 6B:53:72:BB:A8:CA:58:F2:50:99:8B:7E:AA:45:D4:00:50:EF:4A:F0
Authority key identifier: 91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE
Certificate issuer: /CN=A9188D0F/serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 10:29:59 +0000
Manifest this update: Thu 23 Jul 2026 10:29:59 +0000
Manifest next update: Thu 30 Jul 2026 10:29:59 +0000
Files and hashes: 1: kaNAPNs-fi5T9OZhBZESgyz5-M4.crl (hash: XFyVHV+kuo8rYoXbZhLnhnjMG+cJ+BaHDv+j4sOhJE8=)
2: 40244FE624D011F1874701DAA9833773.roa (hash: BvmoKK2bVrC8ISg+I54hyLICIuNcMLRT4N3gcv8pi4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl
rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D0F, serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE
Validity
Not Before: Jul 23 10:29:59 2026 GMT
Not After : Jul 30 10:29:59 2026 GMT
Subject: CN=6a61ed27-abb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:52:3c:25:a4:ed:96:b8:5c:11:02:2a:f9:
54:d1:90:bf:f4:9e:83:ff:f4:6e:37:a5:13:45:90:
61:f3:30:bf:d8:2f:3a:ce:ca:61:02:b2:92:3a:c2:
e5:b3:2f:12:34:7d:31:e5:fb:b5:96:1a:fa:c1:92:
1d:c3:b4:1b:ec:a5:49:d5:3e:26:4a:0f:6e:58:9c:
dc:23:a3:44:2f:83:88:de:3b:a0:ce:31:35:65:e3:
77:54:51:31:2d:98:2b:b4:f4:5a:65:b7:dc:ad:7f:
c7:9a:93:4e:ce:f5:d8:dd:68:76:82:df:70:b2:64:
5c:f4:e8:16:01:34:bf:55:c8:75:7c:d8:9f:b2:82:
f5:c6:13:3b:9e:7e:fe:53:c2:9f:d7:b2:73:cb:14:
8d:ca:bf:27:27:17:52:bf:5c:31:20:d2:31:0b:1f:
5e:a4:ba:ed:83:54:95:89:43:43:74:0c:c0:1f:a1:
10:c0:63:37:25:a5:0b:0a:4a:4b:f5:55:f7:23:b3:
79:68:b0:4d:da:57:56:67:5d:19:da:f8:d5:4f:8c:
a7:92:ed:70:28:c1:88:89:17:80:21:97:9a:b7:fa:
7b:84:a3:d1:bc:7b:5c:86:09:0d:9b:16:c5:0f:63:
27:e3:66:37:dd:75:cd:14:65:a7:c0:40:d3:69:69:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:72:BB:A8:CA:58:F2:50:99:8B:7E:AA:45:D4:00:50:EF:4A:F0
X509v3 Authority Key Identifier:
keyid:91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:38:34:43:46:14:11:d5:ca:e7:16:19:77:0c:5a:90:27:7a:
55:93:06:08:ec:78:11:74:84:5f:a1:52:87:fc:5f:1b:68:f3:
3d:1c:bf:1c:0e:d2:3a:14:52:27:51:b3:fc:4a:78:d4:8d:cb:
54:c9:a3:3a:cd:0b:ac:c1:ac:73:c6:e3:16:c2:2b:97:0c:43:
03:f0:fd:44:73:d1:47:dc:86:22:ee:db:42:3d:9d:77:f3:f5:
bd:3d:77:43:1c:c3:93:e1:c3:8d:26:84:2d:b1:2f:dd:90:de:
fa:c9:0e:d6:e8:01:60:32:b0:11:c3:7a:8f:14:8b:99:3e:8d:
30:ab:15:13:84:a3:16:85:bf:33:ed:2b:b1:4f:f2:92:77:8d:
24:25:52:a6:e7:dd:a9:1d:77:a2:ae:8a:d1:73:11:9f:67:4e:
3c:7e:51:58:29:23:f6:74:48:61:14:51:34:7b:d2:21:ef:fe:
60:8b:97:2d:ec:49:50:85:d8:59:31:53:cb:4b:78:2f:ae:35:
07:45:a4:a5:8f:33:b1:c3:58:f8:16:a3:29:6b:4b:3d:04:5e:
6b:85:be:e7:48:68:0d:e8:43:48:cf:53:48:15:92:7c:62:6c:
84:19:1b:ee:78:42:50:6a:7d:70:17:70:f6:08:31:fb:63:d8:
62:8c:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:33 2026 by rpki-client