
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier: wNFs88DPMEzmLde8kz10tNlQHOwjuJKv5G9LMMHXPxI=
Subject key identifier: 8F:AC:5E:2F:EE:8F:86:EC:15:79:AE:BF:43:AF:E7:35:0E:93:18:F7
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number: E4
Signing time: Wed 25 Mar 2026 05:46:00 +0000
Manifest this update: Wed 25 Mar 2026 05:45:59 +0000
Manifest next update: Wed 01 Apr 2026 05:45:59 +0000
Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: rl80eP5wx7ANd4R6xT7WxLgfL0W4pLaGYEA852Z3OSI=)
2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Validity
Not Before: Mar 25 05:45:59 2026 GMT
Not After : Apr 1 05:45:59 2026 GMT
Subject: CN=69c37698-70df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:b1:3b:51:7e:97:d9:f8:28:e4:c0:ec:ee:
9b:ae:57:ad:e0:9c:a7:6e:f3:10:33:7d:76:1d:fb:
c1:6d:3f:6e:39:1d:23:be:ee:d1:4e:87:f4:c3:5e:
b6:44:67:0f:31:cd:23:6a:eb:f6:39:2e:fb:30:f6:
93:c6:f7:1a:a1:10:a3:8c:10:23:21:9a:a7:05:6e:
fb:90:9b:a3:79:9b:f6:76:db:3a:9f:43:45:b3:52:
17:22:90:73:64:21:30:49:07:3b:76:a2:b4:a8:4b:
e2:0a:e2:03:27:72:5f:28:ba:38:61:96:dc:2a:c8:
4d:38:b7:a6:38:a1:dc:2f:8b:0b:bf:8d:10:45:c9:
17:c5:5d:e1:13:20:a1:09:93:51:7e:7a:09:7d:ad:
83:03:05:21:72:9e:7e:65:25:c2:74:27:b5:1d:ef:
4f:1c:90:41:fb:01:76:36:29:75:4b:d9:b1:e9:6d:
37:7a:6e:6b:c5:ce:20:79:2b:5d:99:d9:27:e1:50:
14:97:94:da:e2:6f:f7:df:ec:ac:c8:f0:bc:f1:0d:
e9:b8:da:79:ad:10:a7:60:83:b5:2f:67:c3:c9:42:
9f:24:86:2d:57:13:d3:c6:74:34:fb:0a:73:e0:94:
f7:0f:7c:5c:a0:c3:20:13:a7:cc:a2:e9:35:b9:4c:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AC:5E:2F:EE:8F:86:EC:15:79:AE:BF:43:AF:E7:35:0E:93:18:F7
X509v3 Authority Key Identifier:
keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e2:c2:3d:e7:f3:2d:5d:df:db:d4:1e:e4:2d:22:da:2f:77:
2b:40:32:60:b5:a8:f8:40:53:8e:96:c8:7e:5a:02:bf:10:a9:
58:e7:e5:3e:70:15:67:b1:77:ae:de:38:bc:32:e0:0c:e2:29:
c7:5f:76:b4:4a:61:8b:14:51:bd:00:23:f7:7c:c0:a9:a1:b9:
de:15:ee:82:02:54:70:5f:cd:37:33:c8:32:4a:ba:b3:c6:73:
9a:c3:60:4f:9f:32:25:3d:67:75:07:6e:64:7e:f4:53:4d:9b:
9a:c8:af:e0:74:7b:ac:0a:d4:73:05:17:6b:21:c6:b5:be:34:
0b:f5:19:c6:f3:d6:f0:f8:ef:59:93:8e:62:51:76:16:33:64:
43:2c:fd:23:72:bb:76:bd:86:18:2a:b4:9a:c5:c2:f8:f9:53:
3e:2e:09:1b:af:92:47:39:65:6b:ff:ae:29:ef:bb:3f:70:06:
f4:a5:75:72:04:dd:6e:47:db:fb:96:51:b5:8f:67:35:f0:ee:
76:a8:d7:54:b3:9d:0b:a4:37:97:24:e1:20:5a:55:74:a6:05:
29:60:1c:bc:ac:a8:63:85:2a:19:1d:40:e5:8a:6c:17:b0:a1:
59:81:37:3e:2d:f3:1e:7a:d9:59:99:87:28:2f:f3:04:2e:89:
cd:e6:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:51 2026 by rpki-client