
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
File: KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json)
Hash identifier: 6qCR/Xjzd7pWStyOSWKNvRub5Cup+ziC5FCxmmeRC2E=
Subject key identifier: 73:55:FD:99:49:46:32:D1:72:6B:D8:62:7F:19:60:56:30:F5:DE:D1
Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
Certificate issuer: /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
Manifest number: BC
Signing time: Wed 25 Mar 2026 06:12:00 +0000
Manifest this update: Wed 25 Mar 2026 06:11:59 +0000
Manifest next update: Wed 01 Apr 2026 06:11:59 +0000
Files and hashes: 1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: W4xC1L8ZM75pkKG+B8o4o6LqxbVw6FsjCbUQDt7XI6M=)
2: 3CF5A86C088211F0BB90C23EC4F9AE02.roa (hash: MswLuuXELfgYCKXqS/8YmwIxT/Vpx6aTamI6VsJX25Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Validity
Not Before: Mar 25 06:11:59 2026 GMT
Not After : Apr 1 06:11:59 2026 GMT
Subject: CN=69c37cb0-c23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:68:a8:cc:a2:46:22:a1:3e:ab:8b:db:67:
37:46:60:4a:6d:e1:25:2c:6c:47:9a:fc:a5:28:20:
78:97:4b:84:cd:90:84:c6:af:b0:34:b4:2c:d6:b4:
8e:bd:80:58:07:a3:29:83:ba:38:f5:39:92:26:7b:
af:99:78:e1:f4:be:e3:94:0f:6a:4a:7d:6b:71:16:
e8:9a:46:a6:8b:7b:ce:68:c9:84:a8:80:be:0e:af:
32:80:f2:42:ce:10:d8:3d:ee:87:86:c5:67:89:5b:
27:5a:0d:51:3a:7b:59:b3:9c:9e:fd:d7:d6:5e:19:
40:c3:98:88:c2:02:36:06:fc:d4:47:2c:0d:01:d0:
f3:26:aa:23:27:b2:4e:23:1e:7d:63:5d:f6:51:a4:
5a:9e:a8:23:bd:54:af:28:a9:3e:e1:1e:ea:b1:f4:
67:31:24:93:0a:a9:ae:4e:a1:9c:7c:7e:f9:ed:cd:
f6:69:3c:c6:14:e6:75:6b:ad:60:30:90:4b:e6:10:
37:23:a9:0f:a5:b6:b4:6a:6d:1a:13:76:be:bc:b2:
82:f6:7b:88:c2:54:38:43:fd:b1:f5:c6:de:90:bf:
3b:1f:dd:71:f6:77:b9:29:c9:62:fe:38:ee:ef:1a:
86:f5:51:2f:e5:0e:14:fb:cf:4b:65:fe:b3:63:f8:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:FD:99:49:46:32:D1:72:6B:D8:62:7F:19:60:56:30:F5:DE:D1
X509v3 Authority Key Identifier:
keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:15:ac:70:ba:7e:ea:55:a8:65:5e:f1:bc:04:58:45:61:ca:
74:14:27:06:dd:ec:a8:03:d9:6b:bc:c1:9a:37:c7:1e:81:f8:
e4:52:ad:8a:f4:c0:bb:38:d4:3a:bc:fb:3a:a3:77:dc:d2:87:
68:1b:1d:8e:ef:c9:d1:cf:f7:1c:3a:51:5d:7c:07:22:4b:e3:
bf:e4:3b:0a:0e:e1:58:b5:2d:27:4f:d7:91:14:4f:c1:00:06:
40:9d:a4:f7:93:d7:cf:65:56:e2:38:2f:6f:0a:67:b8:6f:c6:
3f:3b:71:aa:d3:ba:e5:45:13:62:fa:29:66:be:8e:fa:72:01:
59:29:67:60:8c:b9:55:34:cb:91:b7:2e:b3:a8:3f:ef:00:90:
a8:b7:27:6e:85:d1:e7:03:d4:7b:e8:5b:ec:20:bb:49:21:e6:
1d:9a:5d:19:3f:1b:c1:9b:05:03:2b:19:1b:ae:ae:37:90:d0:
2d:a3:f3:3e:2a:de:71:bd:96:ac:42:e8:e2:a4:b5:4c:07:99:
3b:da:6e:a9:59:4a:78:4b:1b:c7:8f:cd:19:d3:5f:3d:17:5d:
7b:b9:a0:fd:75:31:d4:33:6d:d4:a8:c3:3e:e2:57:d0:1b:30:
c2:79:c2:e8:25:4f:31:c4:41:f0:7b:60:47:53:53:b1:3d:ab:
44:48:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:52 2026 by rpki-client