
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier: rjHawrawtbLGJb/vpZA3cWB+8B2Eb5ZRxyPv0RrP/3Y=
Subject key identifier: D0:57:4F:E6:B2:A8:F0:E9:0D:14:34:3F:6D:42:9D:6C:DA:41:F0:7C
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number: 84
Signing time: Thu 23 Jul 2026 09:28:45 +0000
Manifest this update: Thu 23 Jul 2026 09:28:45 +0000
Manifest next update: Thu 30 Jul 2026 09:28:45 +0000
Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 7jNwPnC7P03GDAj/wrFoHEcZMBkzxrUZlMD+3V6wfXs=)
2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Validity
Not Before: Jul 23 09:28:45 2026 GMT
Not After : Jul 30 09:28:45 2026 GMT
Subject: CN=6a61decd-cf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:6c:40:98:3b:e3:b7:97:4f:a4:dd:bb:69:
67:e3:e5:dd:56:54:5b:e2:82:d5:76:5a:e1:01:21:
6f:05:65:dc:e5:41:9e:39:91:01:b8:15:54:57:aa:
f2:96:88:6d:82:ed:ff:d0:25:d4:31:66:3c:e1:fc:
03:5b:9c:91:0d:d1:a5:07:56:9c:85:38:57:59:1d:
30:7b:a0:f3:56:2a:fa:04:18:c0:2d:7d:1a:22:d5:
66:69:b9:02:80:a7:d4:72:01:0b:60:47:3e:65:cf:
16:60:0e:24:b2:60:76:f5:ec:83:14:11:5e:36:94:
8b:78:f7:41:cb:ae:50:4c:4d:47:c2:9a:b9:bd:90:
e4:0f:46:d8:0d:2c:8e:d7:be:4e:71:fa:ae:ff:98:
ec:4d:27:89:ae:bd:99:a9:ee:c4:69:41:91:90:99:
26:60:21:38:69:08:4d:4e:b3:5b:dc:26:8f:93:ed:
2e:f0:f4:98:df:f9:8a:2b:c7:16:9d:3a:84:22:92:
4f:81:de:e7:a8:c4:f6:9c:a8:d1:ff:1e:85:f1:7c:
ab:4e:ca:d9:1e:12:dc:c2:22:c2:86:f1:9b:cb:f0:
10:35:0e:ca:43:74:af:a7:80:f6:fc:8f:20:18:f2:
d1:e1:53:b4:4f:44:f7:62:58:1b:73:4e:a3:30:a7:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:57:4F:E6:B2:A8:F0:E9:0D:14:34:3F:6D:42:9D:6C:DA:41:F0:7C
X509v3 Authority Key Identifier:
keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:76:89:11:70:b5:d6:f2:33:e2:ad:8e:8e:05:d9:6a:cc:28:
41:5c:a0:16:0f:4f:40:7b:34:39:9d:a2:32:fb:bc:6a:fe:dd:
e6:33:14:e7:2d:32:e4:88:d3:93:3a:a6:b0:2d:fe:c3:79:03:
e0:a3:cb:71:1a:8b:b2:36:31:5d:d0:df:b5:e6:db:0a:35:71:
08:63:ed:70:80:4f:16:e0:a8:b8:e4:cf:89:d1:dd:60:68:fe:
21:60:a4:a0:32:fd:43:90:6d:dd:b5:95:f6:6a:06:bb:95:04:
ed:d3:a2:ac:bb:ce:e0:18:71:fa:60:cb:07:da:e0:21:c5:e6:
5e:9d:9b:ea:36:4f:8d:bc:14:98:d8:5e:17:53:8a:65:5c:4f:
cb:3c:50:d3:7b:a1:7d:d7:86:a8:e5:b0:63:cd:e9:70:c0:f1:
ae:8d:68:0f:dd:f5:54:58:0f:67:9c:cd:8b:3f:ef:99:93:cf:
a9:97:48:a8:6c:d3:32:2b:7e:51:5b:fb:f9:aa:c0:5f:e6:62:
69:e0:bd:61:af:aa:c2:7c:9f:8c:8a:14:51:46:80:da:58:3b:
1e:e9:ab:68:2e:a8:6c:8f:94:c1:82:91:6f:76:ea:7a:c7:45:
50:e4:db:b7:17:46:81:9f:59:f3:ed:3a:53:78:df:b0:a8:15:
c8:6b:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:29 2026 by rpki-client