
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier: /GHoOF16taqIJf6shh8NliRo0AAX/9BtJicnIMMH1hY=
Subject key identifier: 5C:10:B7:35:39:64:09:7D:1A:2F:1E:C3:FC:03:E9:E2:00:F4:74:9F
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number: 01BD
Signing time: Fri 17 Apr 2026 03:43:47 +0000
Manifest this update: Fri 17 Apr 2026 03:43:47 +0000
Manifest next update: Fri 24 Apr 2026 03:43:47 +0000
Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: SAlZTKkLGdUNKn/E4vkTs/Afd33DWxT2ZPbQCkOoe1E=)
2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Apr 17 03:43:47 2026 GMT
Not After : Apr 24 03:43:47 2026 GMT
Subject: CN=69e1ac73-6743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:7f:92:c1:d6:04:8d:be:32:43:21:af:8d:
16:7e:c0:60:9e:ad:1d:a7:d9:d6:6a:71:5c:7f:9f:
21:95:7a:58:a9:4e:71:7b:77:2e:e4:f3:d2:f3:f4:
1d:a4:54:24:88:e6:69:5a:64:c8:18:15:85:44:00:
3a:3d:fa:13:90:c9:14:a6:c2:a7:92:38:41:6f:48:
de:66:74:7d:28:99:50:5d:95:bb:34:1c:f8:1d:c4:
ca:55:8e:ac:d9:6f:1c:92:21:64:41:63:23:76:2d:
1e:cb:76:e2:f4:30:b2:01:a6:22:76:03:ba:6e:34:
a4:01:24:da:2a:e1:a5:7d:f0:57:82:e2:0c:c8:4a:
4d:92:87:5a:16:c3:03:78:fa:b1:48:bb:d3:25:c6:
88:5e:bb:42:c4:dc:c7:70:72:79:26:53:c0:9a:44:
0f:9c:14:2a:30:2b:f6:ce:f8:34:b5:ab:6c:59:8d:
4c:cf:33:9e:2a:ba:bf:a4:a6:16:5d:c6:ae:56:b6:
70:74:89:63:eb:38:2c:ca:df:bd:1b:5b:07:0f:1c:
ce:5f:96:0a:d0:5f:a7:23:83:4a:92:b4:48:95:8b:
3a:ad:c9:c6:7f:b8:a8:22:50:b3:c6:23:5f:2d:aa:
1b:0d:d9:41:0b:4c:61:25:a9:19:ca:f5:73:e0:67:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:B7:35:39:64:09:7D:1A:2F:1E:C3:FC:03:E9:E2:00:F4:74:9F
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:86:5a:1d:49:61:61:4b:81:dc:27:4e:b6:df:90:6e:f8:c1:
50:05:f2:ba:4c:af:37:82:65:53:af:b4:c6:82:22:27:ff:67:
5e:c6:f9:b8:73:d7:55:54:13:2e:c3:1f:b3:e9:6b:13:3d:83:
b9:7f:18:25:0f:fa:08:41:14:f0:c3:2d:7c:be:2c:52:53:bc:
a1:95:cf:43:ee:2a:ec:4a:a7:5d:00:0e:38:b3:98:89:be:cf:
47:52:8e:e9:70:7f:b5:97:22:32:3f:39:83:34:f0:10:9c:b5:
9b:db:c2:59:0e:1e:24:50:42:d1:9a:cc:ea:28:d3:3e:fd:6b:
41:e0:ee:32:ad:a8:6a:2c:0e:17:7e:f6:8e:84:bf:aa:ef:c2:
43:0c:9d:f9:c5:5e:27:05:d8:74:a9:c7:5e:dc:e5:d0:00:d7:
38:42:ba:ce:8a:4c:5a:50:1d:70:5f:91:25:48:2b:fa:2e:47:
2b:ec:0c:e4:f9:a4:ec:8f:00:b2:17:c7:31:7c:d0:51:80:a8:
ac:0f:a8:ca:ec:e6:7d:f0:51:34:a9:49:c0:0b:ef:43:b2:9b:
4b:10:28:1f:0e:ed:b0:83:e3:2d:b1:79:ae:6e:71:19:3e:03:
14:d5:38:8d:00:56:35:20:cc:1b:cc:a3:ea:d0:72:d1:0c:19:
d7:0b:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:39 2026 by rpki-client