
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier: xr2avAyHP8uYc5TPhOO4r2syTinzycW+FFWw6oY8YP8=
Subject key identifier: AC:2B:CB:E2:F1:B8:3A:8B:59:09:43:43:11:44:76:4E:97:85:D1:7F
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number: 0210
Signing time: Tue 29 Sep 2026 03:33:21 +0000
Manifest this update: Tue 29 Sep 2026 03:33:21 +0000
Manifest next update: Tue 06 Oct 2026 03:33:21 +0000
Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: SMhYcaz8BgMe/K6/eZG4kuFGRIieakn4Af8q1+VhjLk=)
2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 03:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Sep 29 03:33:21 2026 GMT
Not After : Oct 6 03:33:21 2026 GMT
Subject: CN=6abb3181-bc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:96:38:03:14:83:97:7d:f7:e5:46:30:28:
3b:6a:c0:79:37:d2:f0:f8:3e:37:ed:a5:74:a4:d3:
0a:f7:d1:0d:91:ee:c6:11:10:41:62:e2:db:3e:df:
55:96:49:9d:cf:92:98:1a:7c:04:f6:a8:36:7d:60:
99:90:97:9d:9e:de:3c:51:a9:b3:ec:ef:d4:a6:e2:
ce:77:c5:35:86:9b:ba:1b:69:5a:68:08:f2:81:53:
58:a1:e3:9c:1d:90:f6:4f:f4:c2:36:f9:99:ff:38:
77:5c:93:a2:0a:ec:1d:4b:8f:69:e9:c5:96:1c:50:
ac:03:54:aa:1a:4a:3f:d0:f8:e1:ff:d5:fb:b5:c5:
30:ae:22:e7:9a:ba:ed:c6:54:78:8e:a7:1f:4c:92:
33:1c:55:eb:9a:0c:fc:51:de:1f:ba:38:74:6c:31:
2a:31:bc:cd:d3:16:21:49:02:d6:76:19:6c:42:67:
04:03:9a:6b:19:eb:08:34:84:50:b3:c8:5b:10:47:
65:53:31:85:07:1c:02:db:96:9a:4b:18:25:d6:2c:
14:53:72:84:fe:8f:34:11:30:79:48:c5:55:54:46:
1a:ff:61:34:ee:85:af:61:5c:bf:75:b4:cc:9d:18:
38:e2:ff:38:c7:1b:1e:e8:b9:9b:36:e9:64:f6:64:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:CB:E2:F1:B8:3A:8B:59:09:43:43:11:44:76:4E:97:85:D1:7F
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:fa:32:13:df:df:90:34:91:77:ff:c7:bc:18:ae:b4:1e:8b:
2d:7a:44:be:f0:4e:9d:08:83:f6:4c:9f:56:17:9d:d6:9e:d6:
d6:af:12:23:8f:b0:f0:96:5c:94:ed:c0:33:41:7c:c0:ce:e4:
a8:70:ec:12:de:da:08:6d:b0:18:fc:ed:11:9a:5f:03:76:f0:
2e:5b:2e:f6:d2:5e:9b:90:4a:03:cc:0c:7a:e8:f4:05:8e:f7:
5f:c4:91:34:1d:25:67:72:f1:3a:6d:75:3a:fe:c1:de:39:11:
5e:32:76:46:1f:38:58:a0:9d:e5:e9:6f:22:25:56:4a:15:36:
af:51:2e:3a:01:12:26:27:12:a7:c6:e4:ad:42:25:28:43:a8:
c4:7e:63:d5:0e:17:2c:15:71:0a:59:17:a7:22:05:fa:31:f4:
db:58:50:83:e7:32:6c:8b:00:74:d3:58:78:f0:88:99:db:ea:
d8:20:68:cd:a8:e1:3e:df:00:8e:e4:29:9f:95:a3:46:2c:7f:
5d:1d:7d:95:f3:8c:6b:58:5b:04:34:f9:e5:3f:2b:5b:40:cd:
f0:62:85:53:f1:e8:ee:e1:a6:d2:4b:4b:91:15:50:9b:fe:68:
c3:b6:06:e8:fa:aa:50:63:66:a5:55:d5:e0:9c:81:e9:54:88:
82:e7:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:18:25 2026 by rpki-client