
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File: rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier: cOx6C07GvPcIoieT8C0WdHFUXDIEc5qBmot8nZaVdq0=
Subject key identifier: 72:C4:48:4F:E9:AD:C0:50:B8:AF:06:13:69:3A:42:A9:8F:1D:37:D0
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer: /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial: 0695
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number: 068D
Signing time: Thu 24 Sep 2026 22:22:55 +0000
Manifest this update: Thu 24 Sep 2026 22:22:54 +0000
Manifest next update: Thu 01 Oct 2026 22:22:54 +0000
Files and hashes: 1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: ays5tDrIOslteexghuMR/uws6xfFfI5nhhZNd/la+tk=)
2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: /7GQrcZaUkyFCy4xnDHa3+/pctLBgTVaEdIXqerR8/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919905B, serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Validity
Not Before: Sep 24 22:22:54 2026 GMT
Not After : Oct 1 22:22:54 2026 GMT
Subject: CN=6ab5a2be-6257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:aa:7e:28:43:16:7f:30:03:00:f5:f2:27:
71:79:f2:62:c5:cd:a0:76:b3:17:be:99:77:0d:62:
f0:80:b1:2e:16:a6:66:53:9d:62:39:11:51:c9:77:
85:f4:01:33:15:e9:1d:e7:74:f0:1c:d2:78:80:e3:
1d:46:3b:43:61:44:73:27:ae:2e:9b:40:b1:74:eb:
78:e8:b0:71:0d:6f:ef:ea:22:0b:f0:9d:99:6f:de:
29:1e:bf:93:9c:b3:0e:67:1f:8a:a2:5e:8a:24:c9:
d0:0e:28:cb:bc:89:c2:f0:d2:8a:08:07:48:fe:1d:
21:54:18:f1:ce:e8:da:f5:e6:67:31:8a:bd:02:67:
b4:a2:b0:95:0d:60:42:67:aa:65:af:d9:34:90:49:
9c:41:02:66:0f:20:35:45:39:9d:ae:48:35:2c:ef:
c1:85:8d:91:a2:c7:40:7d:7f:d8:1c:3c:44:78:7f:
8b:75:6f:49:37:79:0d:b7:93:ae:b7:cc:dc:04:46:
8d:3a:80:51:06:b3:90:50:4b:5d:9c:2c:65:d9:5f:
6f:6c:8d:0c:42:ab:b5:ef:b1:b6:c9:1b:6e:69:87:
ae:b7:c2:31:a2:66:47:fe:5f:f7:01:a0:46:ef:bd:
41:4a:8f:d0:8b:65:2a:d0:81:76:c2:16:ce:68:0c:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:48:4F:E9:AD:C0:50:B8:AF:06:13:69:3A:42:A9:8F:1D:37:D0
X509v3 Authority Key Identifier:
keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:2c:aa:d6:f9:f7:46:dc:4b:28:80:0f:da:d9:b8:99:11:
08:52:56:4f:18:5a:9b:fd:9c:d1:67:99:65:6f:b7:ca:7a:e2:
5b:d2:6d:06:c8:ab:b4:ab:02:b2:3f:7c:95:7e:8e:5f:87:ec:
a5:52:cb:be:38:8a:fe:7e:27:46:da:6a:2d:29:e7:6c:82:ee:
40:9f:bc:20:88:8e:e3:cb:a3:e3:7b:00:94:9f:46:90:d3:c3:
08:3b:c2:29:64:ff:47:16:86:1a:0e:dc:f4:49:f1:71:65:90:
eb:85:d3:d3:ce:80:c6:d7:28:ae:1f:49:80:39:0d:4f:59:3b:
98:81:72:01:f6:54:37:ab:a2:4e:41:2e:77:af:05:ff:1a:b9:
bd:50:04:b1:7c:85:b4:10:9f:07:d9:fc:3a:09:2e:54:8e:ec:
fa:65:22:30:49:89:cc:cf:f8:43:a7:34:08:a7:44:b0:3b:8c:
86:be:03:5b:cd:59:0d:ad:cd:8c:76:ae:58:28:c7:11:0a:02:
7b:65:0e:14:88:26:81:b9:09:8c:84:f9:16:73:dd:b6:b6:10:
23:46:70:b0:a8:67:8e:3b:fc:29:21:26:79:bd:d6:98:cd:a3:
7e:9d:2e:40:96:42:fa:c3:6c:58:02:18:7f:63:cb:86:c6:08:
a9:41:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:09:29 2026 by rpki-client