
$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File: rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier: my5V+cSruyVwUK+oplKx/Cx+2PYdh6heNy3agFtL3Rk=
Subject key identifier: EB:26:63:E6:29:97:5C:CB:DD:94:6E:E6:2F:60:E6:06:AB:F8:17:BF
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer: /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial: 0628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number: 0621
Signing time: Mon 02 Mar 2026 00:51:30 +0000
Manifest this update: Mon 02 Mar 2026 00:51:27 +0000
Manifest next update: Mon 09 Mar 2026 00:51:27 +0000
Files and hashes: 1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: cgklRcqwYld9d67DpWeIJvlSZ1vPVgxc+LomucF61co=)
2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: pIzlQIo1teMnXltG2bbIgb5DMh87y0gd2JDDDBIFb8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919905B, serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Validity
Not Before: Mar 2 00:51:27 2026 GMT
Not After : Mar 9 00:51:27 2026 GMT
Subject: CN=69a4df12-0b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:12:5c:3e:35:e4:0a:0d:39:ac:89:55:57:
15:af:d9:42:10:b5:2f:7b:cf:89:2d:a5:c7:c9:85:
ad:22:18:81:42:9f:0b:69:8a:ac:26:09:56:0c:a4:
a4:e9:56:67:19:09:0b:09:c4:e0:3a:f6:9f:c0:23:
6d:d9:35:8d:9e:97:af:11:68:ce:4b:5c:c1:b8:5d:
f9:3c:f2:4d:a0:8b:da:7b:a0:27:a2:ee:a6:d3:7f:
7e:90:7f:72:d1:ef:51:69:f4:e1:e1:39:f6:28:6e:
8c:e8:fa:9c:da:df:98:d6:cf:24:b1:ab:c9:ea:41:
e5:9e:ed:f1:5e:d7:9b:72:70:02:58:8d:53:65:52:
19:cf:7a:cc:db:84:a1:d2:b3:24:47:ca:3b:f9:72:
4b:f9:2b:14:7d:40:8d:59:be:bc:e4:ff:49:4a:28:
76:bf:e6:33:e2:05:d3:46:05:67:26:cc:d0:a9:eb:
06:b5:7c:c2:fc:61:11:bd:db:fc:6b:0e:33:17:2b:
38:26:fc:40:16:53:1f:6e:0c:53:7e:09:92:cb:5c:
b8:68:92:5c:d1:77:23:c0:31:32:0e:bf:2c:cc:2e:
32:19:db:ce:17:73:59:a8:f6:a0:b3:57:87:9f:a8:
c2:50:bf:a6:80:8e:4f:d1:df:88:1a:3d:bd:ea:59:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:26:63:E6:29:97:5C:CB:DD:94:6E:E6:2F:60:E6:06:AB:F8:17:BF
X509v3 Authority Key Identifier:
keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:9b:74:07:23:b4:5e:d3:70:03:e7:07:eb:8c:4e:0d:d6:24:
f9:d7:5e:c8:01:d6:97:7e:e9:99:65:50:cd:55:a0:aa:8c:14:
ea:2c:51:37:bc:44:d0:13:e3:05:52:a4:46:88:04:de:7a:1d:
db:b3:38:e6:7c:43:61:e2:04:26:64:4f:b4:a1:e6:bc:6b:8f:
13:f0:fb:7e:02:80:78:c9:ca:22:72:63:81:27:04:b9:1d:0d:
00:17:51:33:33:4a:15:86:5d:ff:a0:e8:0c:15:a7:23:67:b3:
ab:2f:2b:9c:c1:63:10:2b:1e:c6:15:a0:cc:0d:33:c6:f5:f6:
71:ac:5b:e6:b1:98:35:ca:16:a8:d6:45:cf:28:e2:36:6a:39:
32:98:75:07:4c:11:b2:54:9c:f8:20:ab:00:0e:df:fa:ed:23:
18:61:64:fa:b1:83:a7:57:9d:f5:2e:78:96:d8:3d:74:a6:e8:
59:d5:8a:5e:d7:b5:d7:6f:59:ac:06:25:02:54:b4:41:39:45:
a4:f9:d5:ca:cc:f9:bf:d9:d8:31:e7:de:f3:25:02:02:78:b8:
1b:31:54:39:b2:a9:9c:e3:54:64:8a:0d:2e:09:1a:b7:6e:6d:
c1:32:c2:13:3e:66:65:90:7d:75:5a:e8:2e:76:87:84:f4:35:
b8:8d:a0:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkwNUIxMTAvBgNVBAUTKEFDQTkxRUE0MDk3RDlFOUYzMUY1NkVGQUM2QkQ0OEYw
MTZCRTk4RDMwHhcNMjYwMzAyMDA1MTI3WhcNMjYwMzA5MDA1MTI3WjAYMRYwFAYD
VQQDEw02OWE0ZGYxMi0wYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhISXD415AoNOayJVVcVr9lCELUve8+JLaXHyYWtIhiBQp8LaYqsJglWDKSk
6VZnGQkLCcTgOvafwCNt2TWNnpevEWjOS1zBuF35PPJNoIvae6Anou6m039+kH9y
0e9RafTh4Tn2KG6M6Pqc2t+Y1s8ksavJ6kHlnu3xXtebcnACWI1TZVIZz3rM24Sh
0rMkR8o7+XJL+SsUfUCNWb685P9JSih2v+Yz4gXTRgVnJszQqesGtXzC/GERvdv8
aw4zFys4JvxAFlMfbgxTfgmSy1y4aJJc0XcjwDEyDr8szC4yGdvOF3NZqPags1eH
n6jCUL+mgI5P0d+IGj296lm2OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsmY+Yp
l1zL3ZRu5i9g5gar+Be/MB8GA1UdIwQYMBaAFKypHqQJfZ6fMfVu+sa9SPAWvpjT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTA1Qi8xNjZGQzg4NkQz
RTcxMUVCOTk1MDFEMjRDNEY5QUUwMi9yS2tlcEFsOW5wOHg5Vzc2eHIxSThCYS1t
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLa2VwQWw5bnA4eDlXNzZ4cjFJOEJhLW1OTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTA1Qi8xNjZGQzg4NkQzRTcxMUVCOTk1MDFEMjRDNEY5QUUwMi9yS2tlcEFsOW5w
OHg5Vzc2eHIxSThCYS1tTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM5t0ByO0XtNwA+cH64xODdYk+ddeyAHWl37pmWVQzVWgqowU6ixRN7xE0BPj
BVKkRogE3nod27M45nxDYeIEJmRPtKHmvGuPE/D7fgKAeMnKInJjgScEuR0NABdR
MzNKFYZd/6DoDBWnI2ezqy8rnMFjECsexhWgzA0zxvX2caxb5rGYNcoWqNZFzyji
Nmo5Mph1B0wRslSc+CCrAA7f+u0jGGFk+rGDp1ed9S54ltg9dKboWdWKXte1129Z
rAYlAlS0QTlFpPnVysz5v9nYMefe8yUCAni4GzFUObKpnONUZIoNLgkat25twTLC
Ez5mZZB9dVroLnaHhPQ1uI2gbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:34 2026 by rpki-client