
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier: xn++ThC1jtA6GOrZ6OehNm6vMjdkJgpTIecZuLW24V8=
Subject key identifier: 3A:3C:18:06:67:CE:CA:9F:7E:8C:56:01:A8:AA:E1:12:6E:16:14:E4
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number: 0145
Signing time: Sat 03 Oct 2026 06:07:04 +0000
Manifest this update: Sat 03 Oct 2026 06:07:03 +0000
Manifest next update: Sat 10 Oct 2026 06:07:03 +0000
Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: fbD45FxE9tVcoiqU/Yjxd65TqyRnW2uID0lY3eq8czA=)
2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Validity
Not Before: Oct 3 06:07:03 2026 GMT
Not After : Oct 10 06:07:03 2026 GMT
Subject: CN=6ac09b88-f653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:c4:de:44:17:45:17:47:de:de:1e:06:eb:
6f:b3:1d:3e:c7:d6:34:a7:2f:af:01:cf:b5:7e:b6:
70:53:ca:42:db:5f:e5:62:f6:ea:c6:dd:98:47:39:
ba:89:a4:50:95:bb:2c:79:d2:35:2d:c6:ed:f9:99:
0c:67:82:95:8a:65:43:c3:1c:cb:6e:bf:8d:05:4f:
de:08:ed:fa:57:ee:e6:11:24:ad:9f:ab:e5:c1:d2:
83:54:8d:f8:a0:26:bd:b3:70:b6:dd:b6:be:d2:68:
fb:30:61:22:83:07:67:b9:b3:da:28:55:08:fe:b0:
42:44:f0:5e:b1:9f:3c:90:9f:4d:09:5a:e1:f5:cc:
b6:ae:8c:ac:77:a4:90:cb:d8:0d:b7:98:71:d9:ba:
7a:dd:4a:4c:40:0f:aa:02:1f:c2:4b:a1:fc:14:9a:
1a:87:03:87:9a:a6:3d:5a:dc:ea:05:e4:6b:34:f3:
f2:00:e3:0a:9e:a2:be:e9:76:eb:5e:e2:8f:d5:0c:
2b:9f:41:61:0b:08:d6:29:fe:96:7e:cc:7c:95:16:
0c:ce:75:67:aa:2f:11:af:0d:aa:cb:89:d4:2b:31:
a2:b9:ac:89:dd:95:37:b4:e2:2e:ff:90:d8:ab:72:
74:29:72:f2:f5:fd:e5:4c:17:01:67:de:b3:9e:45:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:18:06:67:CE:CA:9F:7E:8C:56:01:A8:AA:E1:12:6E:16:14:E4
X509v3 Authority Key Identifier:
keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:21:cb:4b:ac:b1:1d:b1:6a:ca:7f:57:15:34:80:4b:41:bd:
f8:ef:49:7e:93:29:4f:62:4f:8f:10:46:d7:74:f3:35:2f:b9:
60:f2:63:44:56:ab:81:fd:ec:ea:0b:65:9f:32:56:03:b8:3c:
35:69:37:c5:53:3d:4c:28:8c:4c:f9:00:f0:4b:3d:31:90:36:
a6:3f:54:85:4b:a7:8d:3c:7a:3a:bf:50:06:db:c0:b8:ba:5e:
49:55:84:a0:36:ec:6d:60:a0:8d:8e:4b:9d:37:eb:7f:4c:7d:
a9:c1:7a:7a:45:0d:5a:57:14:4f:ed:8b:a7:27:67:9d:f3:9a:
f7:2f:47:ef:c2:8b:59:c3:35:35:33:8f:be:7f:cb:89:ea:76:
f2:ca:1e:7e:ea:22:07:e5:c3:b8:3e:5b:f9:14:02:b8:0b:dc:
ec:4b:1e:24:00:12:36:b0:e9:6d:b1:a5:36:ad:61:21:66:aa:
14:33:49:0a:25:49:e7:cb:f2:80:26:5e:91:44:5a:86:11:0b:
49:c0:ea:3e:53:01:b8:4f:4d:5a:ca:95:e3:f0:2e:3b:68:2e:
66:24:5e:9d:02:4a:b6:eb:71:f1:b3:b3:3f:2d:04:f3:38:d1:
7f:8c:78:05:80:84:f9:52:d6:82:43:f0:cc:9f:9a:7b:2f:41:
da:84:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:17:22 2026 by rpki-client