
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: Ednsm/zS+j8SLRE7PhP3refUZou57qJNNU19ZtQU2ps=
Subject key identifier: 28:B6:FC:B2:A9:DF:34:CB:2B:28:99:A7:20:A8:72:37:6B:E3:A8:80
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: 01E1
Signing time: Wed 23 Sep 2026 03:24:09 +0000
Manifest this update: Wed 23 Sep 2026 03:24:08 +0000
Manifest next update: Wed 30 Sep 2026 03:24:08 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: PAEsdku2iQ8j53rgoYwuq5EJeL2qLIpS0KhQn2aZoWM=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: VkTWZOhptlmUjpj+fKDaWZKr/by4lrIHVYy8lO2gJqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: Sep 23 03:24:08 2026 GMT
Not After : Sep 30 03:24:08 2026 GMT
Subject: CN=6ab34659-323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:95:74:73:31:be:b2:7a:ab:73:41:82:e7:
bd:69:40:e9:32:33:6c:c7:43:df:d2:e6:68:e3:ab:
66:69:15:c5:30:6c:c7:68:fd:8a:29:22:bb:da:0a:
13:03:13:72:2c:ea:77:ff:b7:7c:0a:9c:b8:cc:2e:
56:5e:7f:42:f2:34:17:5a:5f:7c:e6:33:84:f7:1d:
ae:de:82:5e:17:1e:75:94:55:4e:4d:ea:5e:aa:de:
2f:90:51:ea:93:e6:8f:27:b7:b8:f6:40:8f:e4:40:
a1:a6:b3:7b:85:91:57:91:7e:85:b9:58:b0:6a:de:
d3:97:d9:28:b7:4f:17:78:06:c6:2a:ed:17:51:7b:
49:d3:b0:44:31:2a:84:95:d6:94:86:52:d6:5c:0f:
7e:03:31:d8:c1:47:e1:d8:38:06:db:d6:d1:cc:0a:
3e:e7:ec:fe:6d:f4:86:79:30:28:cc:87:d3:51:81:
15:64:54:3b:b2:e2:52:e0:59:87:7a:ab:f5:09:50:
85:f5:1c:12:6a:c3:67:e1:47:7f:b9:90:38:06:9a:
c6:92:4f:ce:ff:a8:53:66:8b:97:b0:cc:d4:a9:e0:
99:a7:61:cb:f1:13:af:d1:a5:15:96:05:fc:94:2a:
e9:9f:e8:ed:1e:a6:68:15:e1:ec:97:d9:69:c0:02:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:FC:B2:A9:DF:34:CB:2B:28:99:A7:20:A8:72:37:6B:E3:A8:80
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ef:9f:5a:b7:ea:52:03:99:1f:2f:8e:cc:17:c0:9c:f6:9f:
a6:61:43:21:9d:14:31:75:8c:15:d4:29:01:2a:ba:d7:9c:a7:
bf:e9:ed:dd:d2:5e:41:65:df:92:29:38:15:4e:24:d6:f5:5e:
4e:3c:eb:ed:76:29:ca:d4:87:24:fd:b2:ae:ef:d0:fa:73:41:
a4:78:f4:14:77:d1:f2:95:46:ef:ce:ce:bb:17:2b:f9:05:8e:
69:f5:c4:2e:00:56:f7:9f:07:71:70:f4:67:2c:64:cd:f4:54:
ce:f5:cb:c1:31:46:dc:38:07:58:40:cf:da:f5:78:44:3f:da:
5e:a8:ef:25:1c:f6:d5:9d:0f:27:c1:dc:b0:11:15:55:41:a5:
8c:2b:1f:34:05:7c:da:e4:62:f8:72:f9:d2:79:a4:65:eb:a9:
84:d0:ef:f3:4c:d2:ff:c9:1e:cb:3b:39:0b:a4:1a:7b:25:f3:
14:31:ca:d8:57:be:2f:43:64:e0:5a:17:52:f1:e5:e2:cb:0a:
91:1e:bb:66:a0:63:59:f7:69:3f:0a:36:b2:60:ab:c0:4b:71:
58:dd:19:33:c4:83:20:5d:a4:47:3e:00:d6:ee:d4:95:16:cc:
a6:53:69:60:46:c5:f7:48:53:70:93:09:d5:2c:9f:52:73:95:
33:64:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:20:09 2026 by rpki-client