
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier: 3GsmItAN/7OU6zsxcz7EZ5W9f9ZHAg/KV3s5It2NFz8=
Subject key identifier: 44:0E:68:7D:52:15:80:8F:24:F8:A8:B1:74:8B:B0:60:8F:98:7A:F7
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial: 06E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number: 06D7
Signing time: Tue 22 Sep 2026 21:59:01 +0000
Manifest this update: Tue 22 Sep 2026 21:59:01 +0000
Manifest next update: Tue 29 Sep 2026 21:59:01 +0000
Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: /aJcjekfKEwPzfk62Fmau++7BUh3ONSsPeAqHKHK+/M=)
2: B8E6481655AA11F1ABD37D4A9B833773.roa (hash: 8rIA49TPHJ0ZY3EFKpWm3baP6XZiOHgLCBv2FhYMWYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Validity
Not Before: Sep 22 21:59:01 2026 GMT
Not After : Sep 29 21:59:01 2026 GMT
Subject: CN=6ab2fa25-f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:5a:d5:a8:e6:bb:6b:d5:00:25:58:35:46:
7b:98:17:cc:96:ee:57:6b:96:df:4f:0a:33:f8:25:
58:7f:36:d3:a3:a5:bf:1e:42:ca:de:b1:8e:dc:2d:
4c:fb:7d:2e:e2:41:f6:28:1a:f6:fe:0e:f7:c0:36:
b9:20:9f:a8:4c:ce:70:a9:e8:f4:d1:65:d3:e6:ee:
90:f9:dd:56:b6:f7:7e:04:42:fc:17:33:b8:66:a1:
2f:af:db:76:0e:21:0e:15:55:81:58:ec:c3:97:e5:
6e:b3:80:eb:39:e0:52:86:16:2b:43:b3:42:b3:2d:
97:c0:9f:3b:6d:79:b7:53:7a:7a:ee:45:f4:2a:d1:
23:a8:ac:38:22:e9:74:91:6d:68:91:5a:5b:32:ca:
fb:df:bc:55:e0:13:c8:14:e6:37:9f:0a:82:ac:39:
c5:77:c2:cb:70:22:fd:a2:13:49:9e:b6:70:3e:15:
44:15:46:02:5d:dc:bf:1e:50:17:0c:bd:d5:da:6a:
89:1d:44:a9:43:fe:a9:3c:89:88:0a:b4:5c:0b:79:
93:e6:4e:4d:f8:9c:dd:1d:f3:fa:f2:b2:eb:4e:28:
bf:02:d4:86:bf:6c:81:c3:95:44:59:08:ee:df:d0:
0b:00:cc:88:fe:00:9b:33:6a:f5:28:0c:a3:e2:dd:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:68:7D:52:15:80:8F:24:F8:A8:B1:74:8B:B0:60:8F:98:7A:F7
X509v3 Authority Key Identifier:
keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:e7:cd:84:e6:7c:ea:5f:c7:29:41:b4:de:a9:76:bc:be:0e:
55:95:b3:10:ce:58:0b:9e:63:fa:91:75:77:4b:0a:4a:c2:40:
c8:88:be:ba:ac:a8:45:a6:27:ad:8c:35:11:15:eb:48:46:e7:
68:46:f5:87:b1:c4:d1:2e:25:43:65:58:a8:1a:2d:af:d2:a1:
81:70:65:34:22:4d:4a:30:89:7d:d9:a5:ff:28:83:b8:6a:f8:
f6:ee:49:a8:26:52:fe:0c:1c:60:df:db:ff:97:d6:44:57:15:
ce:86:13:0b:7b:28:41:15:3d:cd:54:90:06:79:62:89:96:3f:
8b:eb:f8:5b:88:6d:ce:6b:0b:a4:54:30:08:6a:dc:6d:07:ed:
fa:29:20:e0:98:9a:c5:8d:f0:8a:42:41:f3:61:cd:74:58:41:
35:43:cd:34:4b:0a:8b:34:49:9c:b0:1e:4d:6f:da:4b:c5:52:
ce:09:e3:41:9c:dd:fd:b3:0c:50:33:c0:ea:05:56:ab:4a:88:
48:18:c1:ef:76:9b:72:0a:9f:40:10:a1:24:04:39:99:0c:27:
fb:3c:32:36:4a:25:f0:81:03:ac:92:ef:d4:cf:c3:c8:28:a9:
97:18:89:d2:d7:3a:9e:69:8e:ae:01:ac:88:5d:49:34:00:ea:
f2:89:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:05:48 2026 by rpki-client