
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json)
Hash identifier: /uFyQt314azQ8d7E8vI0kfMHVJlLYhOGWg7i3GBZSgw=
Subject key identifier: EE:50:08:12:79:57:B2:17:81:FB:CD:E5:86:DB:F9:26:DE:51:AF:DB
Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Certificate serial: 097B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
Manifest number: 0972
Signing time: Tue 12 May 2026 20:07:48 +0000
Manifest this update: Tue 12 May 2026 20:07:47 +0000
Manifest next update: Tue 19 May 2026 20:07:47 +0000
Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: A7T+t6nQgFrCm0fvo1d4zDpQfDddJ5tHamvY39yEqHo=)
2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: kE3nF4uoNwr26LdrqYbjd4NqQ6Wc0Q+IQHICEWbmAls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2427 (0x97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Validity
Not Before: May 12 20:07:47 2026 GMT
Not After : May 19 20:07:47 2026 GMT
Subject: CN=6a038893-7bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:7a:72:8d:30:d8:d6:8a:d9:92:00:ff:9e:
79:35:c1:7b:49:9b:89:ee:e3:f0:0a:eb:56:75:57:
3e:a0:f8:e2:e7:12:ca:1a:c0:8d:87:6e:4e:d8:e0:
60:fe:5a:06:a8:88:43:b5:05:a8:3d:18:da:93:13:
5d:73:b9:91:a9:c0:14:17:5e:a7:b5:9d:7e:13:58:
aa:69:3d:9a:f4:68:22:bf:a9:1b:ab:89:e0:24:b1:
f4:e1:27:b9:d4:b6:d9:33:f9:4e:fe:79:04:40:d7:
e1:1e:91:93:b0:d0:c9:8b:99:1d:55:46:36:42:5c:
c0:2e:bf:fe:fc:37:1b:ac:1a:30:a2:fa:94:cc:ba:
4f:21:0b:5b:e4:74:18:89:57:d7:91:05:33:51:96:
1e:69:75:83:68:41:60:9b:a6:5b:53:10:0f:fd:f8:
63:44:ff:0b:ef:f6:13:9a:cd:df:63:03:7a:db:2d:
f1:50:35:a5:d1:6a:b1:ea:02:45:38:62:cc:0a:35:
54:13:d2:ac:e0:91:54:82:6e:45:b8:f9:ab:9b:c2:
00:64:ac:d7:28:92:7d:13:ea:31:69:b4:4b:49:f5:
3a:1a:67:12:66:31:5a:20:09:00:64:5a:0e:14:ed:
fe:09:d3:ec:c9:f1:00:1d:3d:e3:0f:f9:bf:0e:7a:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:08:12:79:57:B2:17:81:FB:CD:E5:86:DB:F9:26:DE:51:AF:DB
X509v3 Authority Key Identifier:
keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:eb:78:f4:1e:8b:be:41:69:54:2f:24:37:0a:54:0f:17:06:
55:59:da:27:ab:cb:7b:a3:bb:62:1b:c5:3b:30:ea:6f:0f:a1:
6d:5f:cd:fb:eb:e7:42:4d:b4:5f:06:9f:ba:c6:67:cf:1b:2e:
bd:36:c1:04:42:32:8b:4d:54:b8:42:6b:cf:e6:10:ee:db:ac:
d8:48:07:df:37:44:29:46:24:a4:fe:09:34:5d:54:82:c8:83:
cd:bd:7c:18:8e:62:db:18:1c:e7:17:44:31:bd:23:40:5c:a5:
db:d0:41:46:85:ee:d6:37:21:fb:4b:04:e0:8a:1a:10:f4:85:
2a:ab:81:8e:9d:a1:50:b6:20:8c:5c:57:27:52:20:0a:76:ca:
99:55:86:97:70:08:bf:d0:21:a1:52:56:11:7a:2f:f0:37:84:
4a:bc:5f:ae:3b:fc:b3:c1:83:e4:35:80:55:fd:d4:b0:76:33:
c0:49:f7:55:6f:47:b9:43:96:57:3c:7d:6e:7c:fc:70:db:43:
54:75:36:f2:ac:01:6e:00:aa:3a:7f:41:cc:f3:44:96:5f:16:
4b:e6:6a:f8:f2:af:b5:11:c0:00:79:f9:74:6b:47:4f:23:10:
8a:fc:fb:5e:24:56:8e:c1:fd:92:b9:5c:e0:3b:90:81:41:ee:
86:b8:e4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:57 2026 by rpki-client