
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json)
Hash identifier: WvyW/AeQzFe1xeOhGguvB3oodE5aoI1nm+qHWHUfP/U=
Subject key identifier: 01:97:4C:84:4D:E7:DB:D8:18:8F:DD:8E:3C:24:9F:89:91:E2:88:74
Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Certificate serial: 06E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
Manifest number: 06DE
Signing time: Fri 12 Jun 2026 21:06:27 +0000
Manifest this update: Fri 12 Jun 2026 21:06:27 +0000
Manifest next update: Fri 19 Jun 2026 21:06:27 +0000
Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: tVWRTfCnDHCMnV4Herbfh2ggxAH8M2+EIOgSUL4/76E=)
2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768 (0x6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Validity
Not Before: Jun 12 21:06:27 2026 GMT
Not After : Jun 19 21:06:27 2026 GMT
Subject: CN=6a2c74d3-b6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:6e:d4:4a:e9:73:cb:71:ac:cf:d6:47:8b:
25:03:ec:bc:3f:9b:b3:40:d5:f2:37:ba:a1:b1:63:
f0:91:25:bd:4f:3b:37:ee:3d:88:28:58:82:95:9d:
cd:e4:97:d6:8c:6e:0d:90:7e:98:1a:6e:a5:6c:74:
f6:25:d3:93:c1:14:e3:53:d5:93:11:84:30:6a:65:
ee:70:b4:72:77:01:69:3f:e9:2f:f7:d8:88:11:96:
d2:4d:bc:04:92:dc:af:d8:35:b5:ec:93:0c:cc:d6:
a8:c2:41:5a:3c:ab:48:d7:cd:18:75:2a:76:a5:d0:
6d:1d:4f:c8:e8:4a:77:a8:12:e0:37:57:db:02:95:
cd:50:de:78:6e:02:39:23:82:d9:69:79:e6:c9:b8:
58:ee:02:e8:83:da:40:4f:13:83:77:31:bc:6a:ae:
6b:73:cb:4b:b1:b8:50:2c:cb:08:1a:0f:63:1b:c1:
35:f0:4b:13:12:27:88:30:1c:8b:c4:6d:28:ce:11:
d8:ab:bc:be:60:3a:2f:c5:32:83:5c:93:69:c6:cf:
cc:fe:a8:22:47:c6:3c:22:ca:4e:02:8b:e5:46:2b:
76:2a:18:f4:8c:57:59:56:b9:e7:77:8a:b0:54:24:
e8:e1:0c:83:2c:ba:49:d5:2d:12:62:09:1d:ae:4b:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:97:4C:84:4D:E7:DB:D8:18:8F:DD:8E:3C:24:9F:89:91:E2:88:74
X509v3 Authority Key Identifier:
keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:a3:a7:2c:c0:49:35:c6:dd:27:c4:ff:92:01:cc:f7:ab:
b7:43:8c:dd:69:b9:0e:28:4a:5a:55:f3:5d:ac:00:a9:9b:5d:
09:d6:54:e0:53:4d:46:48:68:eb:43:7d:62:7d:62:e9:5f:4c:
70:ee:1e:9f:76:50:ad:59:0f:e9:09:6b:a9:a7:cb:b4:c3:9b:
33:d9:6c:f6:f0:9c:99:5c:b3:d2:cf:3a:3d:28:a3:b0:7a:fe:
5f:34:1d:39:40:e6:95:51:29:f2:93:43:4c:e8:09:2b:b8:f5:
b8:4e:0f:12:65:3c:f2:ac:15:09:39:ce:ef:7c:df:ef:cc:43:
17:46:b6:ff:d3:41:6a:31:2d:04:a7:27:1f:1c:12:c1:b6:2b:
a6:b1:56:c5:88:29:40:f6:55:67:91:b8:9d:17:db:f9:5f:e3:
83:0e:03:26:dc:de:e7:08:3a:03:4c:b1:44:33:bb:37:80:94:
f6:2e:13:c6:cd:93:27:7f:ec:cb:f8:db:42:3c:e6:68:fa:54:
2f:7b:86:6d:38:cb:95:d0:a4:d7:1e:87:7b:9c:25:71:89:4e:
ae:7c:da:fe:cc:12:c9:83:47:30:86:38:f4:24:d5:75:d5:14:
c7:d5:70:90:46:4d:7f:32:ed:ee:9f:5a:ca:74:c4:de:e7:a5:
45:6c:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:51 2026 by rpki-client