
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: CsTAhigLyQNffwuEuJV1x7YCWklb+glDQWEsMqsK5mI=
Subject key identifier: BA:D9:07:B0:63:CE:11:74:EA:EA:C5:6F:C6:3F:71:49:E5:ED:62:17
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: 01C1
Signing time: Thu 23 Jul 2026 05:15:46 +0000
Manifest this update: Thu 23 Jul 2026 05:15:46 +0000
Manifest next update: Thu 30 Jul 2026 05:15:46 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: Ptar5gBRRKpU61bPbPksHfcE13xqdj2YSzgz/27cxKs=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: VkTWZOhptlmUjpj+fKDaWZKr/by4lrIHVYy8lO2gJqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: Jul 23 05:15:46 2026 GMT
Not After : Jul 30 05:15:46 2026 GMT
Subject: CN=6a61a382-c5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:92:ae:b2:77:bc:44:1c:09:c7:b8:7f:a5:
05:e9:ab:a8:1b:4d:2e:45:66:49:c3:6c:9f:2c:88:
b3:1e:2d:32:b8:6e:16:36:d9:e2:81:60:10:7b:cf:
c4:91:e1:09:e7:40:f4:ee:0b:82:87:49:8a:a1:40:
30:06:5c:1e:be:84:c0:84:3c:b4:6d:92:13:e6:c0:
d9:9c:f8:9f:b5:a3:47:a0:20:0f:61:14:d8:22:63:
39:61:b0:ef:ca:3e:c9:84:0b:c3:ef:24:31:9a:13:
37:39:ff:2a:3d:f7:f0:ac:8a:79:d3:99:ed:ec:f1:
97:9b:18:7d:bc:aa:3e:91:be:da:e7:aa:ce:e2:06:
c7:ea:33:68:e7:4d:fe:78:5c:68:07:09:90:55:fc:
94:0e:f0:a6:68:ee:db:9c:ca:36:0f:10:ec:bf:95:
1f:f1:12:60:2f:65:5e:12:d4:be:8e:ee:86:ed:42:
f3:69:18:2e:ec:08:cd:ab:84:0b:42:70:62:d9:dc:
7b:b0:00:e9:c1:ae:72:60:58:c0:2e:42:bb:5a:5e:
f8:96:4b:7a:0e:1a:9b:31:e8:42:20:91:e0:83:da:
1b:6f:a8:0e:2c:93:b0:cb:b4:e2:fd:fc:0b:fa:9a:
1e:ea:88:cc:61:30:d3:ea:e5:a7:00:9e:d6:9f:25:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:07:B0:63:CE:11:74:EA:EA:C5:6F:C6:3F:71:49:E5:ED:62:17
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3a:5b:19:26:f0:ad:c1:60:cf:ff:a6:75:b6:cd:ff:83:cc:
f2:66:32:ba:89:41:c9:98:05:96:6b:c0:ac:f3:3d:55:c8:42:
01:c5:9d:0a:52:df:6d:1f:09:8d:8a:b5:6b:96:e2:d4:00:53:
92:16:a1:a7:d3:af:f6:1c:88:b7:10:a0:cb:1a:d4:81:01:33:
8e:14:74:5a:c9:b7:d9:ca:9c:f2:f2:04:b7:b2:ea:63:29:36:
dc:17:99:5b:ca:6b:84:94:a6:ec:35:33:af:bf:82:0c:13:2f:
a3:88:b6:10:71:46:fb:f1:a8:8d:48:40:92:14:9b:98:1f:a8:
4c:fa:7a:c4:d7:01:a2:67:3e:85:a1:09:32:da:ed:9d:5c:fa:
e3:f6:48:5b:81:6d:68:85:89:7d:a7:eb:63:ce:37:9f:39:60:
18:0f:89:34:8e:cc:31:48:a1:57:8b:fe:13:3c:8f:23:44:d0:
eb:01:d6:a4:1c:8e:b6:c5:4b:5d:31:8f:a8:c3:5d:8a:3e:5d:
ee:90:fb:da:e6:37:98:89:04:f9:95:71:d7:66:8d:2d:ac:fb:
be:dd:a4:4d:4c:f1:1f:65:f3:8c:10:c7:19:e4:10:f1:34:41:
12:38:24:97:f6:27:f4:f7:db:20:19:ae:fb:1f:71:6d:a7:ce:
34:2a:20:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy
NDlDQ0M4RjQwHhcNMjYwNzIzMDUxNTQ2WhcNMjYwNzMwMDUxNTQ2WjAYMRYwFAYD
VQQDEw02YTYxYTM4Mi1jNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA642SrrJ3vEQcCce4f6UF6auoG00uRWZJw2yfLIizHi0yuG4WNtnigWAQe8/E
keEJ50D07guCh0mKoUAwBlwevoTAhDy0bZIT5sDZnPiftaNHoCAPYRTYImM5YbDv
yj7JhAvD7yQxmhM3Of8qPffwrIp505nt7PGXmxh9vKo+kb7a56rO4gbH6jNo503+
eFxoBwmQVfyUDvCmaO7bnMo2DxDsv5Uf8RJgL2VeEtS+ju6G7ULzaRgu7AjNq4QL
QnBi2dx7sADpwa5yYFjALkK7Wl74lkt6DhqbMehCIJHgg9obb6gOLJOwy7Ti/fwL
+poe6ojMYTDT6uWnAJ7WnyWZtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrZB7Bj
zhF06urFb8Y/cUnl7WIXMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD
RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54
ajl5QzB3QjZuVFFrbk15UFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtDpbGSbwrcFgz/+mdbbN/4PM8mYyuolByZgFlmvArPM9VchCAcWdClLfbR8J
jYq1a5bi1ABTkhahp9Ov9hyItxCgyxrUgQEzjhR0Wsm32cqc8vIEt7LqYyk23BeZ
W8prhJSm7DUzr7+CDBMvo4i2EHFG+/GojUhAkhSbmB+oTPp6xNcBomc+haEJMtrt
nVz64/ZIW4FtaIWJfafrY843nzlgGA+JNI7MMUihV4v+EzyPI0TQ6wHWpByOtsVL
XTGPqMNdij5d7pD72uY3mIkE+ZVx12aNLaz7vt2kTUzxH2XzjBDHGeQQ8TRBEjgk
l/Yn9PfbIBmu+x9xbafONCog/A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:31 2026 by rpki-client