
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier: IVqTVEZIqsCXghCvSS7FHzIrJEHIBWyBO5rnaEybQPw=
Subject key identifier: EF:C1:21:38:97:1D:D3:4E:DD:BF:BB:90:1B:0F:38:01:83:42:68:FC
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number: 020D
Signing time: Wed 23 Sep 2026 03:00:49 +0000
Manifest this update: Wed 23 Sep 2026 03:00:49 +0000
Manifest next update: Wed 30 Sep 2026 03:00:49 +0000
Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: qbOCiRgIVXLxxAJMR0upPzGYFsikc01qhRTNwKkEnb0=)
2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Sep 23 03:00:49 2026 GMT
Not After : Sep 30 03:00:49 2026 GMT
Subject: CN=6ab340e1-02f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:9e:5b:ce:26:ae:3a:3b:58:31:4e:d8:47:
59:5c:73:a5:72:6e:44:b5:18:c3:ed:45:3a:60:c4:
6d:de:b0:9a:b9:04:4d:6d:4b:44:68:26:37:98:92:
1a:6d:fd:67:6b:18:a3:ff:cb:cf:98:fe:dc:89:55:
9c:3d:9f:25:34:5c:95:d7:78:97:72:87:fa:e0:9b:
e1:b5:e5:a0:2c:28:1e:bc:ef:3a:c4:1e:8c:3e:ee:
7c:1a:54:c4:28:7b:17:b2:d5:ef:db:4f:07:37:98:
59:db:90:c5:94:8e:a3:61:be:3e:cb:8a:86:2d:be:
43:6c:a2:3b:f4:2f:d3:b2:dc:72:ae:ed:be:fd:08:
0e:28:03:f1:75:f2:e2:8c:ff:04:22:10:7a:a1:69:
6c:e2:45:a5:d5:a7:32:3d:01:39:55:a5:9d:44:32:
f7:69:da:85:8e:9f:06:ce:40:7f:a6:54:56:74:79:
91:d5:17:3b:5c:84:94:bf:c8:06:42:6a:c0:07:6f:
cb:2a:b9:c1:de:69:25:18:25:4f:27:54:39:7f:b9:
ad:a2:07:11:7f:cb:d0:e2:a1:a1:c9:cf:0b:da:2b:
53:c5:ce:d4:db:67:62:51:39:8e:9d:1f:f9:1b:d2:
a3:4b:c1:e1:94:6e:f8:1d:9d:a4:df:9f:80:7f:a4:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C1:21:38:97:1D:D3:4E:DD:BF:BB:90:1B:0F:38:01:83:42:68:FC
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:80:60:ed:37:62:7f:c4:51:08:a0:61:ac:47:28:ce:ad:01:
14:f6:91:e2:83:e7:94:15:ea:f0:3c:1f:23:fa:e7:d4:ad:34:
73:10:a7:d5:08:0e:fc:03:52:33:89:aa:17:67:3a:dc:d2:53:
2e:38:de:0e:ce:e5:a6:5d:d1:ce:25:5a:f5:af:05:43:59:1c:
05:3e:22:9f:d6:c5:06:fe:73:20:54:5f:75:65:63:49:10:41:
66:ce:6d:b6:13:9d:2d:2b:4c:a2:a4:f8:52:5c:d7:9b:bb:b4:
fd:d9:e8:3e:df:80:f5:f4:b1:fb:2c:96:d7:a8:fc:92:4f:44:
1d:96:13:ce:b6:17:95:7d:78:dd:7f:75:92:e1:fa:48:87:30:
62:fd:3c:ef:9f:c8:ad:4e:d8:bf:73:a0:cb:a4:49:ea:40:2d:
b1:24:48:46:56:9a:7b:ae:74:63:33:86:29:8e:32:2d:3f:77:
fd:d0:39:db:56:d9:20:47:e8:66:64:07:73:93:2d:59:ef:73:
cc:59:83:5e:01:f3:21:fb:68:6f:70:ab:df:81:84:8b:9d:42:
d5:47:e8:6a:af:3b:51:6f:00:57:54:fd:60:1e:8b:12:0d:20:
46:0c:e0:1d:9d:30:fb:20:f9:ed:17:db:2a:9d:1a:cc:e0:26:
4f:27:48:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:34:33 2026 by rpki-client