
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: zb7PPYe9ZoCcTH3CpmSIZbVJFBqD/JsvnaazZaMZUPo=
Subject key identifier: D4:37:D1:28:66:41:55:5C:A8:4B:14:6D:E9:E2:33:38:5B:44:E8:B8
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 077A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 076A
Signing time: Tue 12 May 2026 21:44:13 +0000
Manifest this update: Tue 12 May 2026 21:44:12 +0000
Manifest next update: Tue 19 May 2026 21:44:12 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: GlLem0BZ+5Nkfdk2thm9fh/o394/kg3U7Ht6v0G+9gY=)
2: 9398F508619611EBA485B448C4F9AE02.roa (hash: mGBSLne8/rU2A9xuOPlh+Kt9amKjy+mVgkjCDSndQxk=)
3: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: bFSS96O4radzazvR0OO67dPHVo81LQWTCGUGmX2A0Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Validity
Not Before: May 12 21:44:12 2026 GMT
Not After : May 19 21:44:12 2026 GMT
Subject: CN=6a039f2d-3045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:ce:13:da:03:c4:39:2c:7c:2c:00:18:65:
cc:4d:c7:50:21:78:0d:6d:83:71:21:ab:93:63:bd:
b4:f7:09:60:fb:c8:11:d0:c8:b4:94:e1:8a:59:fc:
51:19:18:b5:92:bb:59:65:b8:ba:4c:c7:8c:05:30:
fb:5c:37:8e:a9:8f:e3:a8:8f:95:8a:fb:1d:24:bd:
67:cc:29:05:12:bc:32:37:91:4d:68:42:1f:97:02:
98:af:7a:ad:b3:79:9e:fd:91:4b:be:b6:92:88:d3:
54:63:74:32:6e:a9:ba:d8:f6:15:58:82:18:65:19:
ed:ee:ff:5b:e1:46:96:c1:f4:df:26:38:94:6f:6a:
f2:14:28:48:b8:c8:21:3c:7c:69:21:94:08:df:20:
d1:c2:19:cd:4e:6e:ae:21:a9:4b:f0:a2:40:cf:1b:
8f:fd:ef:3e:ec:b2:a0:11:b9:8e:18:46:61:d4:03:
65:15:3b:c7:a1:34:75:c8:53:6e:4b:15:fe:f5:79:
bb:cd:39:4a:15:58:60:05:ed:c8:bd:a5:bc:d4:e6:
47:a2:e1:c1:cc:87:3d:f8:b5:e7:07:79:03:b3:68:
2a:fe:3f:8c:2d:b3:b0:9f:cd:27:cb:4c:96:bc:ac:
3d:09:48:ea:32:62:53:fb:e8:9b:29:70:78:4c:2d:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:D1:28:66:41:55:5C:A8:4B:14:6D:E9:E2:33:38:5B:44:E8:B8
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:51:2e:f5:93:a2:39:dd:a3:08:63:69:4f:df:3e:09:4f:fe:
ed:a1:af:3c:0e:63:c9:de:b9:64:13:6a:37:75:2d:3e:07:7c:
30:54:03:37:1f:07:93:7a:bc:94:7e:48:9a:46:7e:45:37:c1:
5d:02:05:b1:87:a8:fc:c6:d6:59:c8:3a:0d:a4:22:99:80:96:
a3:ca:12:d2:53:68:20:99:80:53:84:75:eb:8f:19:71:3d:c4:
46:cf:3c:07:21:16:bf:35:58:66:c9:98:6c:e2:38:34:3d:d5:
70:40:e9:d0:7c:56:55:fa:90:e4:67:fa:b7:6d:b4:b3:53:95:
b8:fd:17:78:e9:83:74:a1:73:98:ee:72:4c:92:c5:7a:aa:bf:
53:7a:c7:2f:67:02:26:22:90:53:60:26:51:4e:6d:be:06:3a:
da:ac:65:95:7a:7f:1f:16:40:31:f1:0a:7a:83:fa:74:a9:8d:
cf:c1:c9:43:8b:46:83:f0:2a:ea:86:bc:7d:c3:11:9c:18:e1:
11:59:22:96:f3:d6:d8:48:08:30:7e:13:20:ca:a6:7e:6e:38:
93:a4:e2:11:e4:9f:4d:72:a3:9f:5d:22:69:0d:66:af:8d:3c:
81:6f:0d:ca:33:35:93:bc:e2:0a:b6:7f:1f:a7:0a:04:ca:87:
48:c3:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:49 2026 by rpki-client