
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier: FOalGlTaWa3AQSZJWEnpmRfGhyHExfBGN1/qPNxyyxU=
Subject key identifier: 09:48:BA:EC:7A:23:B2:EB:30:47:59:40:2D:69:EC:63:4C:7F:A0:64
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial: 069A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number: 0690
Signing time: Tue 12 May 2026 22:33:30 +0000
Manifest this update: Tue 12 May 2026 22:33:29 +0000
Manifest next update: Tue 19 May 2026 22:33:29 +0000
Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: qdMybufmlFMPtQt4XaRn3KyAwK3v0lwmeY6kEGmMNUg=)
2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: S40NIyhP5u7/UlmLJYX9/RykdcdP5gu6OSoqCbZEohA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Validity
Not Before: May 12 22:33:29 2026 GMT
Not After : May 19 22:33:29 2026 GMT
Subject: CN=6a03aaba-17cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:46:62:53:b8:cd:7d:ff:b6:2e:a3:6b:b4:
80:50:53:46:c0:41:cb:38:f0:3f:6a:f3:2c:54:e2:
4d:8e:75:73:64:9e:2e:ae:c7:17:6d:92:e9:bf:9e:
1d:7a:4e:f6:53:74:36:19:80:1c:f8:cd:f4:49:f0:
3b:6b:20:fd:b1:ad:24:33:cd:61:fc:e3:e2:d0:29:
62:7a:76:b8:85:70:33:b5:77:ac:17:a2:5a:cf:23:
52:62:9c:59:d4:75:ef:4a:29:47:59:21:f4:1b:c2:
f5:fc:86:01:f1:aa:c3:5c:51:db:2d:dc:46:7f:39:
31:3f:9c:ac:89:fd:cf:e5:e4:e4:ee:e2:19:6f:82:
74:60:d6:1f:ad:8e:af:49:c9:16:33:f4:3d:f7:75:
b0:6b:6b:3b:db:64:46:73:a5:5d:e2:29:d3:d2:bc:
3d:68:8f:15:f5:15:91:73:46:c2:86:e0:78:83:90:
0d:18:45:55:de:bf:68:4a:6d:e1:38:7c:e1:87:19:
37:56:82:d2:25:21:b4:bd:1e:5a:07:3c:f5:28:10:
a5:cb:0d:a2:0f:fb:8b:bc:50:23:78:f0:1c:8d:82:
56:a2:ba:8a:a6:8e:e1:50:ab:ee:9e:aa:71:5b:e8:
37:d3:ff:a0:87:f4:c2:1e:79:cc:90:3e:6f:e7:ef:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:48:BA:EC:7A:23:B2:EB:30:47:59:40:2D:69:EC:63:4C:7F:A0:64
X509v3 Authority Key Identifier:
keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:57:9a:b9:4a:28:c0:f0:7a:29:06:1d:6e:5a:d6:af:37:
13:1e:ea:90:92:1e:eb:da:0e:a9:d9:62:ad:0a:8e:db:ac:29:
f1:e7:9f:8f:b7:95:2b:a7:b5:57:18:68:33:b2:5e:56:9b:86:
da:19:20:74:0d:1c:95:db:bd:7c:42:ef:5e:fc:1b:c0:5b:1f:
8e:80:ce:a0:e6:03:f2:79:d6:cb:58:98:cd:58:3b:d3:8e:40:
da:a9:54:ef:6a:2e:8d:af:86:5e:6e:70:3b:cd:0c:34:4d:d2:
30:b6:ed:28:9f:f9:2f:0f:f3:29:00:8b:51:33:0c:80:70:b4:
5b:87:29:a4:15:53:44:10:e2:15:4d:31:b2:93:1e:4f:04:87:
ef:e5:8b:3f:8f:c8:a1:c7:2d:5d:d1:3a:76:03:92:cf:81:57:
e9:6d:30:e5:60:6f:fa:32:49:01:0a:be:53:a6:af:10:c9:13:
58:12:15:a0:f5:bc:db:09:d9:f3:19:fd:49:96:1d:06:c9:6b:
cf:c3:cf:17:33:d6:55:58:43:b0:ad:cb:56:06:c1:cf:7f:1a:
8e:1f:91:18:3d:80:e8:89:72:18:83:38:11:38:fc:b9:e1:74:
24:f0:34:a0:5a:84:2e:b6:24:c4:2e:07:88:fe:7a:2f:f9:69:
7f:60:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:00 2026 by rpki-client