
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier: q8hkC+eXTRNJ+ci098270EDM+dOYfyW+Ev59oU4J+lo=
Subject key identifier: 3E:F3:BC:25:80:10:22:F7:69:22:3D:01:C7:49:6A:AA:34:52:93:E1
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number: 70
Signing time: Sat 13 Jun 2026 07:53:03 +0000
Manifest this update: Sat 13 Jun 2026 07:53:02 +0000
Manifest next update: Sat 20 Jun 2026 07:53:02 +0000
Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: g76bIusQg1JnarLmIht0HoUS7Kt0YMiwmJmyOQ2tffk=)
2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Validity
Not Before: Jun 13 07:53:02 2026 GMT
Not After : Jun 20 07:53:02 2026 GMT
Subject: CN=6a2d0c5e-cbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:b6:d7:63:b3:a5:ad:25:16:43:31:23:95:
eb:5d:89:aa:45:05:c5:08:81:44:6b:44:36:7e:c4:
48:72:8c:1d:4c:ec:5d:1f:4f:c3:21:9e:12:0e:d1:
2c:91:44:85:13:29:88:90:a1:73:8a:67:86:15:ad:
9c:cc:11:4d:0f:ed:e7:61:19:39:ba:8e:06:56:8f:
7e:e9:52:d7:79:21:0a:63:41:96:2b:9a:8b:d5:4e:
95:36:76:7e:63:4d:88:7f:93:5c:e1:09:34:dc:aa:
eb:0c:33:a6:45:44:e2:5b:67:89:6b:40:64:2e:41:
b7:25:dc:84:73:31:24:1a:34:87:87:10:90:1d:00:
ac:75:02:f2:35:fa:60:9c:bc:cd:0f:c5:9c:42:e4:
10:7f:56:88:ca:95:de:98:c9:08:da:38:1a:29:60:
03:87:9b:37:6f:b9:af:31:d3:25:f6:e2:b1:67:6d:
3d:05:04:81:6f:3a:83:a0:b8:ae:ae:5c:b2:6e:b9:
bb:2a:d6:31:d5:cb:e2:d5:b1:d4:4f:a1:05:9d:e1:
fa:f1:cb:59:d7:3e:1e:9c:42:ae:05:86:15:8c:35:
d4:81:fa:e5:99:56:1d:75:b6:23:34:73:5d:bc:a1:
4d:59:65:64:d6:b1:b7:12:e8:d0:fa:e5:fc:ea:04:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:BC:25:80:10:22:F7:69:22:3D:01:C7:49:6A:AA:34:52:93:E1
X509v3 Authority Key Identifier:
keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:aa:31:6c:e4:7a:57:dd:ae:83:96:09:82:b6:f4:6b:a6:
34:51:d2:13:7f:a6:12:33:ea:9e:0c:90:4e:f4:4e:1d:39:e5:
07:c5:f7:c3:7e:82:b7:8e:01:25:8e:a2:b7:88:51:2b:eb:0f:
21:07:ee:e2:15:9b:a9:08:a4:0d:5d:ce:f1:ec:38:a7:9f:c0:
fb:42:a1:3e:37:67:6a:ea:66:0a:24:ac:74:34:12:1f:02:89:
10:ea:55:1c:a2:23:c4:dd:72:4f:ee:7d:57:9c:65:87:75:60:
ea:29:77:17:3a:3c:2e:9e:fa:0f:c9:6f:25:31:91:be:7b:81:
f8:f8:3a:fc:d6:c4:ab:60:ee:98:e5:25:f2:27:69:ac:d7:70:
3d:59:bc:96:d0:78:c1:03:8e:bf:ec:ae:05:ca:14:5e:ad:52:
18:fb:37:5f:79:8d:17:0c:19:fa:c5:c2:73:bd:cf:f0:7d:02:
ed:0f:17:4f:c3:1c:04:49:c0:10:c7:d5:db:65:f9:23:39:6e:
49:3b:19:3a:26:98:6d:e0:02:0d:ba:eb:a1:f2:2b:a0:45:7b:
24:5f:27:b5:12:9d:72:6d:b9:60:28:69:3e:35:87:31:de:d2:
9c:90:c6:9c:45:ae:61:c1:ea:45:22:7d:81:f3:0f:d3:9b:ef:
3c:1b:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:42:10 2026 by rpki-client