
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: I/jRQdOJnpLs4flfQ2tQ4TcVtFbs5zaVovMQb/CQ6Oc=
Subject key identifier: 41:67:2C:82:B9:46:6D:CC:12:17:89:BA:7A:7E:AA:5E:74:CB:D9:F3
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 051C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 0511
Signing time: Sat 26 Sep 2026 23:41:34 +0000
Manifest this update: Sat 26 Sep 2026 23:41:33 +0000
Manifest next update: Sat 03 Oct 2026 23:41:33 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: G8gzU3pegvWJzfIiWaFW6stf3grf94jejm3i3hDqTTE=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Sep 26 23:41:33 2026 GMT
Not After : Oct 3 23:41:33 2026 GMT
Subject: CN=6ab8582e-8336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:2d:5b:62:cc:e9:d6:39:fd:3d:d7:7e:8d:
1e:3a:3f:9b:3c:e9:75:d0:75:75:11:80:51:6e:1f:
60:09:92:f7:c3:a5:f1:3c:df:be:0d:0f:78:70:81:
f3:10:4a:98:f8:6a:83:9e:d3:70:5e:60:6c:24:a6:
6d:9b:f1:24:25:3a:9a:a4:9d:db:02:1b:95:42:a7:
79:16:df:e2:c9:f7:f2:44:2b:3b:7f:a5:b9:ea:21:
c0:e3:26:55:a5:2e:5a:95:8f:93:47:76:16:e7:e0:
54:c4:c3:f2:5d:ee:70:82:12:e8:47:f8:12:bb:1e:
fe:94:ed:f5:00:5e:93:c4:b3:72:0f:12:57:c7:a6:
5a:21:a7:44:a8:0e:c5:29:6f:b0:67:7c:07:57:94:
a1:3c:95:82:77:78:23:ae:6e:87:0e:69:6e:70:69:
9b:98:61:4a:e4:e1:c8:c5:cf:43:16:61:58:63:fd:
dd:45:16:82:0b:01:eb:8d:c1:fd:75:b7:77:7d:90:
47:9b:2a:61:45:c9:87:b2:e4:98:a1:69:1b:2b:8e:
31:0e:cf:d7:1c:c0:63:37:df:5e:1c:05:c8:7c:d4:
40:80:29:b5:a4:31:89:9a:93:93:ff:f8:81:4f:71:
cd:b5:ea:f4:fe:12:7e:17:99:bc:16:7d:76:ea:6f:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:2C:82:B9:46:6D:CC:12:17:89:BA:7A:7E:AA:5E:74:CB:D9:F3
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:59:fe:74:15:c1:77:13:29:4a:21:83:b5:d0:3a:97:9f:
a4:1a:71:a7:55:31:d9:43:fa:69:cd:97:82:7c:db:a0:a9:30:
f0:2d:02:9b:ee:8e:17:ec:d2:8c:a2:9e:ba:ec:40:3b:9c:11:
98:0e:8c:f5:1a:3f:a4:f8:96:9f:d6:23:24:93:f7:a9:a6:73:
37:3d:ee:59:5f:b9:fc:4a:ef:c8:47:cf:26:72:b9:3f:e5:0e:
fb:91:3a:8f:0a:0d:8a:5a:60:70:f5:06:38:12:d3:46:1e:47:
e5:ec:2c:36:ae:b9:1e:c6:8f:e3:eb:24:70:9c:d5:a7:64:a1:
50:c7:32:9a:4c:86:d3:87:24:3a:d8:49:06:c5:92:2a:14:a0:
e9:08:2a:c8:79:e5:0f:26:19:b9:cf:3b:21:76:cc:f1:9e:d0:
59:6a:83:a6:13:c8:72:1b:b5:f5:47:3c:64:47:8b:e2:65:cd:
d2:fd:7e:d9:b3:de:35:4e:85:87:8a:89:81:10:69:cc:6e:89:
9e:fb:d8:12:1b:f0:03:b3:a5:4e:51:28:86:69:84:31:87:f9:
77:10:9b:96:91:6f:cc:9e:83:b7:3e:d7:77:39:e4:ea:fb:b5:
95:da:59:f0:ee:38:6a:3c:2e:06:06:b8:1b:44:09:8c:99:ed:
40:e6:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:48:51 2026 by rpki-client