
$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json)
Hash identifier: 2IELC+qKdX1oLhRSYsOFMha9xpyxKkhl8hBA+j/enk8=
Subject key identifier: BD:DA:DC:66:6C:96:00:77:D2:B8:5C:B6:0E:BE:45:77:E0:42:32:0B
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
Manifest number: 0190
Signing time: Mon 27 Jul 2026 06:07:54 +0000
Manifest this update: Mon 27 Jul 2026 06:07:53 +0000
Manifest next update: Mon 03 Aug 2026 06:07:53 +0000
Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: QP61mmbgqAMRunzxmXLrXVFBzfk6MmcuS27wPYvr43s=)
2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: m9PVqT0U37yXO4ZBkmsSwAW86j+V8m+FgHiO1R6bfj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Validity
Not Before: Jul 27 06:07:53 2026 GMT
Not After : Aug 3 06:07:53 2026 GMT
Subject: CN=6a66f5ba-2c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:85:76:98:54:bb:87:d9:d9:10:ca:15:42:
cb:a5:de:64:a5:a6:43:7c:7c:bf:4d:8e:bd:42:a4:
b2:09:34:e2:86:c7:6b:66:90:51:3a:ed:ce:d9:c5:
69:2c:4e:bd:08:f4:3c:a4:aa:79:01:5e:b6:e7:df:
4d:f6:0d:e5:7c:a3:56:4d:80:64:96:d0:9d:e6:aa:
de:b2:85:ab:8a:43:12:59:a9:52:b7:b6:3b:e3:7c:
7b:bc:be:7c:b2:92:68:a7:61:0c:b0:0d:c5:8f:01:
2b:7b:93:33:86:69:77:01:a0:1a:0c:25:74:d6:ae:
fe:9b:f8:7d:db:f8:d6:e1:df:18:0f:20:cd:c4:c9:
43:21:da:ab:f7:a2:d0:b2:de:b9:dc:75:c8:78:09:
aa:ca:a8:77:b0:f8:ac:fb:91:ef:90:cd:a1:92:40:
a9:55:97:f9:ae:8c:da:6e:af:9d:89:25:a6:c5:e0:
41:e5:d8:ac:e0:54:38:a1:5a:15:0d:2b:e5:9b:a2:
7a:31:1e:4a:b2:98:fe:4e:50:9c:cf:17:12:f1:da:
46:1b:68:52:72:66:59:d9:98:b3:d0:13:f5:4a:4a:
bb:29:7c:f1:18:3d:75:5f:de:d0:08:75:ab:fc:f5:
c4:d0:df:50:b9:1b:53:de:b2:1c:a9:5d:37:0f:b9:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:DC:66:6C:96:00:77:D2:B8:5C:B6:0E:BE:45:77:E0:42:32:0B
X509v3 Authority Key Identifier:
keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:c3:ec:5b:63:5c:43:0f:71:9b:23:b8:43:94:84:5f:86:
e7:b6:83:7a:b4:cb:92:f4:f1:8b:65:e0:10:09:a2:08:51:58:
29:d7:5c:12:f9:de:ea:28:5e:52:91:72:6e:72:22:56:5e:d1:
8f:24:a1:4c:ef:19:84:62:f7:56:82:11:a8:08:b4:b1:95:ba:
9e:c6:08:ac:bd:fd:88:14:97:39:76:e2:65:60:3d:4f:4b:04:
0b:12:2e:9e:64:3d:eb:ff:67:ca:47:02:29:08:08:b0:b4:ba:
33:40:8f:47:f4:57:c3:bd:2d:7d:50:8a:32:6e:ca:78:7b:ee:
6a:3d:8b:8a:07:6e:49:62:94:d5:93:cf:49:ca:d1:22:4e:02:
77:60:ce:5e:ca:5a:ae:f7:52:97:19:5d:75:13:95:11:14:9d:
bc:84:44:1a:1d:c3:37:5c:1e:a6:f5:0a:25:f7:8f:eb:b5:38:
b0:d0:1f:6e:00:71:ad:94:96:e8:ec:6f:bc:c3:91:6d:70:12:
f6:e4:62:93:69:fc:ec:d7:b6:e5:ec:db:40:d3:07:e5:4c:f4:
62:7f:46:97:a2:0f:cd:04:e9:e0:60:77:5f:16:aa:6c:83:e7:
19:84:a0:15:7b:76:e2:ac:74:7b:a9:b2:62:a4:4a:e8:18:51:
8c:5c:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:26 2026 by rpki-client