
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier: /1i6iUfR43FcGBycRp3+BkbnYrajqto2H1A7Z9t3ocU=
Subject key identifier: F7:E5:AB:80:6D:4B:08:7B:18:3A:FF:56:FB:46:F6:EF:36:D4:CA:EA
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number: 6B
Signing time: Mon 01 Jun 2026 08:39:41 +0000
Manifest this update: Mon 01 Jun 2026 08:39:40 +0000
Manifest next update: Mon 08 Jun 2026 08:39:40 +0000
Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 5vhSi8k3fFy4fdXpsXYtXqEu9jcAbgQ/0lAdkIJtRgk=)
2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Validity
Not Before: Jun 1 08:39:40 2026 GMT
Not After : Jun 8 08:39:40 2026 GMT
Subject: CN=6a1d454c-58d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:4b:3a:a3:72:3e:16:b3:6f:94:6a:bb:74:
c6:c3:4f:8f:fc:af:f5:88:8f:17:19:90:17:f7:7a:
b4:90:c9:f9:21:be:3f:e5:23:7f:f3:73:7f:a5:26:
7b:6d:cc:ae:d5:be:87:7c:7e:55:85:0e:86:5f:e3:
cd:fe:17:16:d9:8a:b8:97:b4:38:3c:dd:2e:76:81:
76:9c:a7:7c:56:83:18:d4:4b:3b:81:13:0e:b5:05:
aa:06:ff:ed:91:29:42:c9:88:0c:07:32:39:f8:cb:
d5:f3:73:e2:76:a0:ba:c0:f7:43:21:af:63:67:59:
83:85:38:af:0c:7e:99:a9:89:53:fa:2f:2f:81:ca:
fc:38:01:50:78:14:8c:af:d1:09:0c:7b:e9:d1:80:
68:ca:b4:80:22:d1:7f:a6:ed:65:25:69:1f:35:c6:
31:75:1c:e6:0b:ff:1f:3a:0a:82:b9:30:4c:b7:94:
fe:75:1c:80:b7:ec:77:ba:36:9a:70:55:68:a9:9b:
f6:dc:c1:1f:e9:8b:c3:80:7c:74:e4:4b:83:7a:fe:
63:da:0a:65:7b:d1:94:0e:ea:cd:37:ef:aa:d4:d8:
5c:27:cd:54:ea:e1:ba:41:0b:23:58:0b:28:de:29:
f6:a7:15:2a:29:89:59:f9:32:fb:1a:57:ed:26:24:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:AB:80:6D:4B:08:7B:18:3A:FF:56:FB:46:F6:EF:36:D4:CA:EA
X509v3 Authority Key Identifier:
keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:66:ec:6f:b0:5a:6c:9a:10:d7:92:67:76:38:d2:d8:81:
dd:80:d8:44:95:a5:b3:b3:a4:00:a2:35:32:20:90:9e:60:99:
0c:fa:84:77:2b:90:f8:06:03:76:74:61:aa:83:2c:b0:7b:ab:
3d:af:26:f4:4d:95:15:5e:93:26:f8:37:03:78:d1:22:15:8f:
b8:da:64:b1:71:0b:e9:08:53:02:15:07:97:1f:d2:f1:4e:43:
0e:95:ac:6d:f5:8d:34:2b:cd:e7:e4:67:9f:e7:c4:a2:76:e6:
48:85:33:d0:47:22:c9:e7:b9:47:a1:84:23:eb:1c:c3:31:9c:
2b:0a:c7:72:7e:88:f5:45:e5:f0:f4:79:34:fe:00:20:67:30:
7e:74:33:e7:9b:36:c7:47:be:b7:77:00:bd:e5:bc:8f:80:cc:
63:0b:3f:d6:70:fe:16:1d:58:53:a9:63:67:5b:5a:29:60:88:
e1:84:99:2d:8e:0e:a0:f4:12:80:1e:0c:0a:d9:ac:7e:8c:25:
1f:1e:99:70:06:0e:d7:e8:74:25:0a:91:92:5a:73:19:a6:c5:
7e:01:9a:21:f9:f3:c8:b2:b3:ec:af:80:ad:d5:63:bc:ef:12:
12:55:74:5f:0b:de:6a:ca:4d:81:56:04:c6:02:a5:a5:ad:26:
e7:6e:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client