
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: TC9fTUJLeRl2AlEfq3qmS/yhTp7sB0AEIpCJ63uYfCI=
Subject key identifier: DF:18:47:A8:F0:6B:15:01:58:E2:4E:09:43:EB:7F:6B:E9:33:A4:DA
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 0761
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 0751
Signing time: Wed 25 Mar 2026 18:28:23 +0000
Manifest this update: Wed 25 Mar 2026 18:28:22 +0000
Manifest next update: Wed 01 Apr 2026 18:28:22 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: BFo+98Ie+Xkdr1vhbNdXxLio2n/NlWww3DVLU1Amy/U=)
2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: bFSS96O4radzazvR0OO67dPHVo81LQWTCGUGmX2A0Eg=)
3: 9398F508619611EBA485B448C4F9AE02.roa (hash: mGBSLne8/rU2A9xuOPlh+Kt9amKjy+mVgkjCDSndQxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 18:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Validity
Not Before: Mar 25 18:28:22 2026 GMT
Not After : Apr 1 18:28:22 2026 GMT
Subject: CN=69c42946-f50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:cb:f3:9e:48:51:7b:36:b8:ca:ae:c3:ef:
07:c4:a1:3a:9b:70:b0:91:0a:b6:0b:eb:85:ad:cc:
ca:ca:79:fd:c2:81:f2:ce:1b:b7:8c:73:91:e3:06:
1a:ef:e2:58:a8:f5:0f:91:09:6d:9b:0e:4f:48:2c:
24:8c:26:46:88:f3:d6:93:0e:99:1d:e8:8d:f6:28:
da:69:5a:a1:d3:f8:61:2c:ce:4a:7d:b9:f1:e3:86:
fd:ed:98:f8:e6:0f:83:07:65:2d:9d:dd:7d:cb:37:
79:81:6a:d8:de:96:1b:73:41:67:2b:25:ca:ac:9c:
8f:a7:07:56:93:d6:bc:12:e4:75:2b:58:43:cc:86:
cb:a8:b2:ae:f4:09:76:13:c3:10:2f:2c:a1:bb:73:
12:57:e1:f7:d0:a6:e7:a0:b2:2e:06:f5:54:0e:4f:
6a:8b:6c:74:0d:ec:c4:a4:b5:e0:bb:6b:68:d2:10:
d2:82:ee:da:15:54:18:bf:a0:8e:dc:f3:ac:54:65:
70:f3:56:93:69:e1:04:a1:d9:6d:89:26:9d:af:c2:
4c:24:ee:2d:f6:d3:59:90:71:73:fa:4a:70:9e:7f:
2f:3b:35:4f:8e:7b:a8:64:c3:9e:12:33:25:9e:42:
8c:b6:10:40:fd:a5:66:20:53:0c:e8:05:10:f0:07:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:47:A8:F0:6B:15:01:58:E2:4E:09:43:EB:7F:6B:E9:33:A4:DA
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:c7:8e:a0:b7:d2:8b:b2:1b:06:b7:d2:16:88:a5:e3:fc:79:
7c:df:f2:ca:2d:96:74:ef:1d:8f:63:4f:ee:25:b8:0c:0e:41:
6e:b2:2b:5d:0c:86:7c:d6:62:10:7a:a8:de:39:d4:50:da:21:
55:e9:75:73:02:c8:47:ed:a5:49:97:d0:81:b1:56:e3:bd:0a:
b5:98:81:9d:32:0c:1b:d3:ec:15:50:cd:21:01:a5:d2:67:28:
52:35:f5:29:78:f7:33:d9:9d:55:43:66:00:50:61:05:6e:cf:
7b:47:50:16:60:22:eb:0d:ce:9f:c7:30:df:a4:c6:81:fd:2b:
a1:a4:7a:23:60:76:fe:bc:89:72:f1:40:f5:7d:52:02:60:64:
62:10:60:8e:9e:32:a2:24:8d:56:63:e1:37:01:04:48:98:59:
38:79:cc:2a:d4:ba:4f:bc:14:b4:09:16:64:09:f3:7a:ba:af:
e8:2b:8b:4b:ed:e7:f4:c1:7a:54:16:fc:6a:85:59:72:22:d9:
4a:d6:ca:85:c9:ac:f0:08:cf:60:fd:c2:84:2d:9a:af:06:c7:
ce:9b:b0:19:34:cb:ef:35:41:4d:ed:b2:af:3c:25:00:82:9c:
98:64:71:ee:d7:55:bd:c9:08:c1:bb:37:29:a8:09:59:34:74:
9d:57:08:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5NjAxMTAvBgNVBAUTKDJBOTAwNzM0QzVFM0I5M0FDQTk0NzBFM0Y1QUREQURD
MkYyMTVCMzEwHhcNMjYwMzI1MTgyODIyWhcNMjYwNDAxMTgyODIyWjAYMRYwFAYD
VQQDEw02OWM0Mjk0Ni1mNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnZLL855IUXs2uMquw+8HxKE6m3CwkQq2C+uFrczKynn9woHyzhu3jHOR4wYa
7+JYqPUPkQltmw5PSCwkjCZGiPPWkw6ZHeiN9ijaaVqh0/hhLM5Kfbnx44b97Zj4
5g+DB2Utnd19yzd5gWrY3pYbc0FnKyXKrJyPpwdWk9a8EuR1K1hDzIbLqLKu9Al2
E8MQLyyhu3MSV+H30KbnoLIuBvVUDk9qi2x0DezEpLXgu2to0hDSgu7aFVQYv6CO
3POsVGVw81aTaeEEodltiSadr8JMJO4t9tNZkHFz+kpwnn8vOzVPjnuoZMOeEjMl
nkKMthBA/aVmIFMM6AUQ8AeXOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8YR6jw
axUBWOJOCUPrf2vpM6TaMB8GA1UdIwQYMBaAFCqQBzTF47k6ypRw4/Wt2twvIVsx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk2MC85QzZGN0JFQTYx
OTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVUcktsSERqOWEzYTNDOGhX
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0twQUhOTVhqdVRyS2xIRGo5YTNhM0M4aFd6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDk2MC85QzZGN0JFQTYxOTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVU
cktsSERqOWEzYTNDOGhXekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABceOoLfSi7IbBrfSFoil4/x5fN/yyi2WdO8dj2NP7iW4DA5BbrIrXQyGfNZi
EHqo3jnUUNohVel1cwLIR+2lSZfQgbFW470KtZiBnTIMG9PsFVDNIQGl0mcoUjX1
KXj3M9mdVUNmAFBhBW7Pe0dQFmAi6w3On8cw36TGgf0roaR6I2B2/ryJcvFA9X1S
AmBkYhBgjp4yoiSNVmPhNwEESJhZOHnMKtS6T7wUtAkWZAnzerqv6CuLS+3n9MF6
VBb8aoVZciLZStbKhcms8AjPYP3ChC2arwbHzpuwGTTL7zVBTe2yrzwlAIKcmGRx
7tdVvckIwbs3KagJWTR0nVcIuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:07 2026 by rpki-client