
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json)
Hash identifier: p7hP5BsAC0QjIz46dewKBCCZilgX3+HHURcHMy173iU=
Subject key identifier: 0F:26:F4:8D:82:86:48:96:A7:6E:39:02:D3:21:35:32:3E:83:F4:7D
Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
Manifest number: 06C1
Signing time: Thu 16 Apr 2026 21:02:56 +0000
Manifest this update: Thu 16 Apr 2026 21:02:55 +0000
Manifest next update: Thu 23 Apr 2026 21:02:55 +0000
Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: 6EU0KiGgOjiZKkG3wg1F/f+fQvyuZtZg6Xmv902yC6s=)
2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Validity
Not Before: Apr 16 21:02:55 2026 GMT
Not After : Apr 23 21:02:55 2026 GMT
Subject: CN=69e14e80-0fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:f8:96:72:b4:d2:a1:4b:49:86:bf:80:8b:
16:29:18:c9:47:8c:d2:a1:d5:1f:b3:0f:e5:16:c6:
bd:e9:4f:39:dd:a6:9a:ed:16:e9:29:3c:5f:61:da:
70:eb:5e:d3:e4:5a:35:33:81:16:72:ca:71:4c:99:
16:83:93:3e:02:da:1d:1a:24:35:7a:60:e1:8c:8f:
11:06:a7:03:00:cc:a0:ad:47:f8:74:77:26:ab:6f:
0e:8f:7b:04:2b:b5:a2:b9:1c:a2:25:05:22:2a:19:
a5:7c:38:e4:0f:d1:bb:21:74:c4:a7:1a:64:1d:7f:
9e:63:d1:dc:f7:26:31:62:07:63:01:ac:ac:be:47:
34:f8:1c:36:49:7a:01:0a:63:34:a6:6b:35:20:5e:
41:52:a4:2a:a4:1a:ed:98:82:52:b4:ac:f0:f0:72:
68:c7:e1:7f:90:c6:59:d7:e2:8b:9b:07:35:1a:f4:
37:91:14:a9:bb:15:e8:df:67:82:35:ee:bb:31:2d:
f8:d5:55:f0:57:45:0f:0b:c6:0b:29:c0:a7:30:e3:
af:70:c1:20:ae:de:44:07:1a:68:dc:3b:22:23:ba:
de:e9:55:a0:ae:ca:c4:59:8a:71:c8:2c:9b:92:fc:
40:4b:3d:b3:dc:42:12:92:f9:a2:93:a0:51:37:ce:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:F4:8D:82:86:48:96:A7:6E:39:02:D3:21:35:32:3E:83:F4:7D
X509v3 Authority Key Identifier:
keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:60:21:67:a4:2e:1a:ad:00:7a:48:be:cf:fb:71:7c:55:df:
ce:69:6d:ca:ac:23:03:51:7f:c4:e1:3e:68:11:a5:6b:32:92:
1c:aa:cc:a9:ff:d2:80:b9:cd:46:e3:58:e6:21:e4:67:6f:89:
da:dc:dd:52:67:80:9f:d6:b0:e6:b3:3c:12:70:bb:4e:1d:69:
4b:ad:20:35:78:75:af:be:4b:b4:68:35:d8:c7:80:cf:37:87:
8b:86:46:4d:95:95:b8:3d:8e:39:d7:98:bb:95:05:67:53:11:
f2:89:fa:37:d7:3d:96:1e:fe:0c:17:aa:af:34:74:1c:d2:d0:
21:8d:89:cb:72:d1:d4:74:80:27:aa:4e:76:00:7f:3a:23:50:
17:03:ea:fd:50:f0:15:2c:46:ad:a4:6c:fd:0e:fc:a5:3c:2a:
71:24:0e:32:2a:c1:a5:fa:8c:1d:3c:cb:e6:99:0c:18:06:2d:
b5:c1:8c:8c:5c:b9:69:6d:7b:d3:1f:58:e4:cb:de:28:5a:d9:
e9:af:53:1c:1c:16:8c:35:5a:cd:e0:f5:27:8b:bd:3e:fd:ba:
10:78:28:9b:70:2e:9a:d9:e4:e0:e9:7e:bd:fd:1e:2b:a5:c7:
ce:23:65:1e:d3:6a:3f:50:0e:06:7b:b4:e7:d0:43:92:ca:b6:
cd:20:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:51 2026 by rpki-client