
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: JChp6BFBRxFPCPK4TRCPNf67AqDIFScPKtzc8Arqpak=
Subject key identifier: 9D:B1:31:E3:20:CA:0F:FF:1F:F4:18:DB:A1:AF:7B:FD:D8:05:05:08
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: 0189
Signing time: Sun 05 Apr 2026 03:56:58 +0000
Manifest this update: Sun 05 Apr 2026 03:56:57 +0000
Manifest next update: Sun 12 Apr 2026 03:56:57 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: ZbEtETlXGEjLeq4F90IW5Zh7Dp9ahKzo9/GzupSk47s=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: vWnJyVtLSPDbnLnMtUfpOpsMizJZ3OX7bmaYpD3gaL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: Apr 5 03:56:57 2026 GMT
Not After : Apr 12 03:56:57 2026 GMT
Subject: CN=69d1dd8a-cf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:86:62:d2:bc:bc:cb:90:03:3d:48:c7:e4:
ac:ea:93:4b:ad:3f:c5:54:93:64:2a:78:35:3e:1e:
b0:a0:16:74:ce:cb:14:33:80:45:4b:bb:96:7c:bf:
54:21:6f:22:ef:c4:dd:f8:38:5b:e2:aa:6e:e1:2c:
dc:b9:88:ac:3b:c8:55:70:f0:98:42:e0:a2:49:c7:
e0:bc:65:89:a2:97:4d:21:70:5c:dc:c7:2f:0b:15:
0e:fc:de:fc:a9:8f:45:d0:67:77:a8:ee:8b:d4:5d:
e4:a0:d4:1a:36:4a:71:4e:2c:b4:3c:79:03:bc:df:
32:74:b0:da:02:33:b8:fb:e5:f5:a0:b1:75:31:72:
4f:45:17:86:a4:74:55:70:81:f6:4a:71:6c:05:2c:
30:de:0c:37:c1:8c:f2:22:c2:52:18:78:26:35:4a:
27:92:ed:60:15:b0:66:6a:13:23:1a:82:63:30:16:
39:75:2e:1d:cd:30:17:3f:f0:2e:a4:d2:65:09:e7:
d3:56:12:36:c8:48:7d:ed:6e:51:2f:6f:68:5f:55:
c1:30:3a:cc:bb:ed:07:39:fe:2f:28:90:e9:ba:e1:
91:5f:40:bb:48:bf:fe:b9:9f:95:d4:89:3d:0b:cd:
4a:9a:2b:21:ef:52:6a:73:b9:68:99:ee:84:38:70:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:31:E3:20:CA:0F:FF:1F:F4:18:DB:A1:AF:7B:FD:D8:05:05:08
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:90:e3:d2:17:7a:b6:74:ef:21:e8:6b:64:70:4d:5a:e9:f9:
23:0f:80:ee:50:dc:05:60:fe:2b:6c:60:cd:2d:54:27:61:72:
1b:a1:74:62:50:83:5f:36:8b:a3:42:3c:08:8f:ea:26:05:b2:
04:72:7f:8c:38:4e:ac:ea:7d:06:1f:40:7b:09:7c:ee:6c:f6:
02:f6:99:9b:06:c6:0c:dc:42:f8:17:13:55:85:60:98:31:a8:
57:2d:34:8e:d7:04:70:f4:72:8c:cf:4e:0b:d1:7b:db:e1:ac:
ca:13:ad:e7:dc:dc:e3:6e:21:a3:56:89:55:c5:e2:fa:af:22:
ec:3a:6c:83:f6:ad:25:41:62:7f:bc:47:dd:e9:67:7b:5e:cd:
49:82:d2:46:5d:89:8a:e5:b5:17:c9:52:e3:18:0f:2e:e4:a8:
bc:eb:49:93:a3:e1:5e:7f:8e:41:a9:16:43:fa:c2:50:d9:c2:
6a:10:75:a3:9a:fd:6c:10:c6:2d:8a:6c:9f:96:4f:89:1f:8e:
40:db:ca:87:cd:53:46:d0:e2:e5:cd:18:a0:7f:35:22:ce:0b:
64:88:3d:07:d7:87:30:88:94:90:40:e5:d7:06:7a:f0:d7:1f:
5f:59:95:87:0b:e2:b4:02:07:c0:62:4c:51:a1:66:ce:7d:0f:
2d:95:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:18 2026 by rpki-client