
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
File: KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft (raw, json)
Hash identifier: TbjfxvI+EN2qz80ApZU/COCRAxDN/QS1U4/C6AvARSU=
Subject key identifier: 2C:95:63:EC:71:05:A6:8F:8F:CB:5B:4C:4A:09:33:52:DA:F0:2E:D6
Authority key identifier: 2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
Certificate issuer: /CN=A91A4287/serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
Manifest number: E9
Signing time: Sat 13 Jun 2026 06:33:47 +0000
Manifest this update: Sat 13 Jun 2026 06:33:46 +0000
Manifest next update: Sat 20 Jun 2026 06:33:46 +0000
Files and hashes: 1: KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl (hash: M5K0CO3FotpgrRCuIbSXwynH0ASmAbYmhtX81qG6WxY=)
2: 8CC07FC0047211F0A6541526C4F9AE02.roa (hash: xg+5Kz8DfP64v+0K6uLKgS3hlywm1P1UwcX/Q9P2caM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl
rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4287, serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
Validity
Not Before: Jun 13 06:33:46 2026 GMT
Not After : Jun 20 06:33:46 2026 GMT
Subject: CN=6a2cf9cb-4d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:fc:eb:5a:ca:1f:94:92:3a:35:b6:50:7f:
17:1e:bd:5d:6f:d2:e2:1d:b5:d9:91:63:ff:35:ac:
ce:58:d4:1d:a0:47:7c:22:45:3c:b8:ed:57:3b:46:
41:14:9a:ac:97:c1:ca:52:54:2f:82:0b:3b:84:68:
10:58:0d:73:12:86:7b:d5:a8:f3:94:82:ae:bf:44:
3e:fb:45:60:52:78:c2:ff:e0:b1:6c:ea:f6:a8:8b:
91:6b:da:0f:0d:94:66:d6:e1:73:78:53:58:5f:be:
46:db:69:26:23:68:e3:cb:03:6c:07:22:54:b5:a2:
f0:41:79:4f:74:16:18:f5:b3:db:73:37:3c:f3:e3:
b4:7f:fd:fb:3f:55:dd:42:dc:e7:5e:93:47:22:63:
7e:b6:62:52:72:08:42:97:7c:13:81:56:f8:89:5a:
5b:81:ab:c5:ed:30:5f:61:90:fb:2e:7b:78:73:d2:
92:ce:50:85:a8:35:21:3f:91:90:49:df:3a:c0:15:
37:26:14:f0:d4:0a:d8:d7:8c:a2:c7:7f:ba:59:f3:
a5:ff:47:15:1a:25:52:a3:2d:cb:a5:b3:58:c1:df:
77:87:64:d0:83:62:7d:e9:a6:a7:02:f6:41:7b:25:
82:a4:00:62:98:5f:f3:c1:70:6d:ff:2c:09:fc:30:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:63:EC:71:05:A6:8F:8F:CB:5B:4C:4A:09:33:52:DA:F0:2E:D6
X509v3 Authority Key Identifier:
keyid:2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:7b:b9:52:3b:b0:61:84:38:6c:50:93:48:a6:5d:02:aa:
78:3e:99:ce:4e:79:f8:b7:9e:69:0e:76:81:01:d0:4c:2e:13:
4c:de:ed:fe:99:bd:41:4b:b9:d2:22:c5:d3:9e:8c:ad:e2:45:
57:8c:62:45:71:2f:e4:f8:12:85:e4:7d:4f:1f:28:a4:a3:5b:
3f:fe:c6:c1:88:0b:a9:cf:53:eb:13:9f:7f:36:5c:58:b9:18:
c8:b2:0e:07:39:e1:7a:83:15:a3:8e:36:00:2e:d7:f2:43:f4:
58:66:a1:03:57:29:cb:fc:e7:32:98:26:3c:31:c2:9e:11:19:
6c:63:48:47:91:cb:48:18:18:46:79:6a:85:97:3c:db:d7:91:
6a:73:24:4e:4c:79:7b:6d:e7:d1:a5:0c:86:1a:3d:0e:a9:84:
dc:9c:c6:e2:39:97:c4:d2:d2:9d:fd:7b:67:ca:98:c2:79:c0:
0d:e2:ff:6b:56:8d:1a:72:64:48:52:df:84:65:15:e5:46:85:
c1:cb:18:96:56:7f:0d:69:94:71:83:3f:94:74:7d:f7:aa:df:
da:7a:10:f3:0c:fa:4a:f6:8e:2f:6b:de:18:54:8b:06:23:24:
37:f1:53:32:4a:fd:d6:b7:dd:cf:1c:be:66:43:67:ab:c7:d5:
0b:d5:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:02:03 2026 by rpki-client