
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: kImZJo9/ClhgqKoxfvpJNP3jMkxCzP92uCKl30SWvwk=
Subject key identifier: C0:E3:34:35:B2:A3:00:DF:DB:3D:2A:25:86:62:51:FF:CA:EF:9C:B5
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: 0183
Signing time: Wed 25 Mar 2026 03:50:12 +0000
Manifest this update: Wed 25 Mar 2026 03:50:11 +0000
Manifest next update: Wed 01 Apr 2026 03:50:11 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: ga+nQ+ZkXdx0kjv3ofi4vrazgrT+bTH5DOqlQIjuwC8=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: vWnJyVtLSPDbnLnMtUfpOpsMizJZ3OX7bmaYpD3gaL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: Mar 25 03:50:11 2026 GMT
Not After : Apr 1 03:50:11 2026 GMT
Subject: CN=69c35b74-e1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:4a:68:a2:1e:c9:e7:cd:28:43:68:33:a7:
1e:14:cf:40:4a:2a:87:81:4b:19:8e:88:d2:ac:4f:
9d:a8:76:29:33:10:a4:85:7b:1d:46:fa:f3:1c:8d:
44:b2:f7:8f:36:28:e5:0e:af:96:a8:d6:67:57:44:
d6:52:c7:a9:1f:eb:1d:80:c7:14:b2:f0:8a:54:97:
1c:54:eb:b9:12:d1:e0:23:42:8a:50:9e:44:3c:90:
ac:51:d1:18:8f:64:17:91:a7:3c:2b:29:73:0e:a2:
29:1d:75:9a:ad:1d:86:5a:34:1d:21:c0:ab:3c:62:
a6:41:98:0c:f1:3d:ad:47:27:e5:c8:12:0a:25:b1:
e9:f2:0c:ac:5d:31:f5:4a:b1:f0:1f:15:f2:15:82:
b3:54:6e:1b:d5:fd:3f:9f:9e:da:76:0e:6a:c8:56:
7a:1b:a3:95:ba:4a:a6:77:24:bf:16:7c:33:f0:28:
61:48:bc:3e:06:3c:91:15:d1:95:27:27:23:e9:45:
7b:df:c7:d4:53:73:16:a8:4a:63:88:b9:2c:2f:f3:
7b:f0:53:8e:1d:b9:a2:3a:69:62:a1:b4:92:ea:52:
f0:54:23:8d:08:28:63:44:46:e3:39:48:7c:4f:81:
99:b7:cb:29:52:c8:06:8d:ff:fb:f4:f9:3e:46:be:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:34:35:B2:A3:00:DF:DB:3D:2A:25:86:62:51:FF:CA:EF:9C:B5
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:94:ea:3d:89:a2:71:74:02:26:2b:ed:6a:73:d1:88:26:19:
bd:63:88:8f:bd:7d:e1:be:ca:67:e3:42:88:5e:6c:b2:8d:80:
d8:b1:33:c3:1a:bc:3e:97:bf:01:0d:83:18:6b:e5:90:f6:83:
0e:27:dd:7e:7b:3b:84:30:a3:11:5c:36:e9:18:1a:9e:9f:e2:
08:d2:23:ec:37:1a:43:51:34:c7:39:3b:84:a1:88:f0:9d:fd:
ac:c8:32:92:73:c9:e8:eb:8b:de:93:65:2d:13:3c:25:80:2c:
c0:af:38:90:c4:4f:c9:ee:39:bd:ff:0b:fa:41:43:3a:1d:fb:
04:f7:07:28:6f:a7:30:6b:e5:5d:ec:68:af:38:85:ea:d5:e9:
48:07:11:f2:42:ba:f0:a3:b1:9e:7b:7d:de:69:a6:c2:7d:73:
db:8b:73:31:77:e0:8a:29:46:00:51:d4:d1:96:31:c2:a2:dc:
4f:ef:e4:5c:1b:ac:42:98:ac:a6:27:e2:8b:60:8a:4c:83:95:
ec:48:fc:56:d9:2b:77:c2:0b:44:58:f9:55:50:c8:a6:74:e8:
84:e8:9d:b9:02:aa:eb:53:7e:42:bc:73:10:7a:01:bf:ad:32:
1c:67:a7:23:d3:27:0a:d7:45:d8:04:5a:11:55:d3:3e:cb:a0:
59:12:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:32 2026 by rpki-client