
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier: zjrKOqgybMH3CSja6pv/O3U1i6+MGjUgbUgrCb6kXH4=
Subject key identifier: 76:34:E6:01:19:AF:57:DB:A3:87:6A:2B:78:C9:BC:D1:1B:3C:AB:68
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number: F0
Signing time: Fri 17 Apr 2026 06:07:26 +0000
Manifest this update: Fri 17 Apr 2026 06:07:26 +0000
Manifest next update: Fri 24 Apr 2026 06:07:26 +0000
Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: I+bqCg7lag13efLwxzwKAeS6SQsg7rsaZbp2JnuoXhU=)
2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Validity
Not Before: Apr 17 06:07:26 2026 GMT
Not After : Apr 24 06:07:26 2026 GMT
Subject: CN=69e1ce1e-c6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:b6:1f:5b:99:22:7b:00:3f:85:63:85:13:
c2:3d:fd:35:06:ad:63:1b:f8:ea:40:04:88:3a:14:
25:af:4f:c6:1f:8a:12:86:a3:d8:d5:1e:44:01:e7:
83:9f:e5:c9:9c:01:39:87:19:38:67:62:15:08:cc:
4c:45:c1:a6:be:34:7a:2a:76:5a:a2:62:2e:09:c0:
45:ba:d1:e7:43:0b:7f:99:04:71:1b:82:d6:0c:91:
27:3b:a8:cb:b6:a4:5a:74:da:b1:03:3a:12:66:15:
28:05:40:d2:7f:c2:91:5b:b0:71:c4:13:6f:e5:a2:
e8:76:42:f2:6d:29:9b:a4:81:42:44:8f:57:ed:cb:
8d:0f:0e:9a:a3:ac:7e:7d:a4:36:cc:ce:63:0c:7c:
a3:69:88:f0:36:3a:87:64:fa:02:22:62:9c:3e:f4:
53:2f:68:33:d0:2f:ee:a0:1d:b7:b7:91:30:b9:37:
0b:e7:73:8d:42:1c:45:00:63:70:b9:89:c9:47:e0:
03:f4:30:09:27:40:31:76:e4:fe:68:e9:43:18:b6:
b5:d3:63:d2:c3:68:4a:04:68:f4:8c:02:d7:99:3a:
7b:7d:14:d5:fc:0f:17:3c:5d:ce:d6:76:1e:87:ce:
74:d0:0f:ff:5b:5f:25:43:b6:e8:01:16:1a:48:c7:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:E6:01:19:AF:57:DB:A3:87:6A:2B:78:C9:BC:D1:1B:3C:AB:68
X509v3 Authority Key Identifier:
keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:ce:40:57:c6:0b:7c:a1:01:9f:59:d7:ab:ed:8c:24:a5:
b8:e8:63:67:fa:e5:ce:3c:1c:72:38:7b:24:ce:43:7e:31:f7:
ae:67:fa:85:9a:22:c9:e9:e7:81:3e:f2:41:18:b1:6e:c5:b7:
85:89:0b:3a:ef:60:37:66:21:62:ce:86:43:b9:70:3c:7e:21:
e8:0a:d6:d3:a8:2c:c4:c7:98:71:df:a2:57:75:f1:4c:51:d0:
6d:b1:ff:78:ed:69:e6:9e:6d:a9:18:54:a8:49:9b:38:5c:19:
4d:70:98:63:69:d3:58:50:7f:01:50:17:53:34:3a:fc:a3:45:
9b:f2:f8:c7:a6:a6:0c:64:bd:d9:6b:72:7e:37:37:ce:6f:8b:
09:e4:5a:16:18:41:23:63:c4:4e:40:35:d0:08:4e:ee:2a:05:
ec:3e:80:be:4f:e3:43:3c:8f:47:d2:27:44:f2:18:4a:7f:0f:
4f:46:d8:6b:74:39:b4:b9:47:9c:72:e8:49:54:9b:05:59:81:
4d:73:29:68:57:14:15:d8:b6:0a:55:51:5a:28:59:49:07:d8:
4c:56:ad:d8:23:59:72:f2:2c:dd:88:3e:bb:2b:ff:66:65:8f:
56:ad:bb:7d:3b:a2:6f:5c:24:05:14:75:2f:f1:f5:8e:a0:46:
d6:c7:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:15 2026 by rpki-client