
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier: xSqkODccIbgRh59kypwyrGFbR71D3KRR7IdPdBd/2eE=
Subject key identifier: 98:69:80:79:1C:24:F4:CC:E8:99:BF:3D:68:57:10:F3:AF:10:BA:25
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number: 81
Signing time: Fri 17 Jul 2026 08:51:04 +0000
Manifest this update: Fri 17 Jul 2026 08:51:04 +0000
Manifest next update: Fri 24 Jul 2026 08:51:04 +0000
Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 5z21BJh9gdol/YJCm5Cmrec5Y3PYkyVsIk/1y9FNIm4=)
2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Validity
Not Before: Jul 17 08:51:04 2026 GMT
Not After : Jul 24 08:51:04 2026 GMT
Subject: CN=6a59ecf8-164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:72:e9:66:53:dd:bb:b3:28:02:f9:1a:6d:
96:24:23:3f:06:41:cc:f4:ec:60:ed:fa:d3:4b:30:
06:ab:55:5c:e2:94:25:4a:8a:f5:fd:c9:77:d0:ea:
09:46:01:56:69:fb:61:b6:da:0a:55:60:a2:36:99:
72:fa:d6:79:9a:07:77:b4:40:21:21:89:e9:8b:26:
3d:32:63:49:91:54:0a:cc:80:54:20:c7:b5:58:04:
4f:bf:3d:6f:e6:26:c2:b5:7c:5e:45:9f:b0:bd:ed:
1f:55:0b:e6:d3:e0:35:ae:95:21:10:82:8b:e9:16:
0d:8c:9a:0d:2d:1f:16:a2:f8:e2:dd:39:8f:b2:17:
c3:29:52:d1:42:bb:7d:c7:62:c5:76:e8:2d:e5:2f:
8b:9b:f0:ab:fb:0e:88:a9:d6:33:a2:35:c4:74:06:
7d:94:0b:a3:56:b3:94:3c:b3:72:4b:4e:a3:8a:af:
de:19:8d:a6:d4:bf:41:23:c7:0d:28:69:41:3f:35:
b0:11:ed:2c:da:5e:2c:6b:31:c0:5d:55:46:98:06:
c1:76:60:92:0d:e4:0c:23:be:6e:9a:d2:33:58:f3:
9c:c4:af:0c:c2:e0:60:e4:47:7d:8d:f6:eb:b3:47:
c3:a4:c1:c4:42:87:f8:40:ab:01:12:bc:12:24:fd:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:80:79:1C:24:F4:CC:E8:99:BF:3D:68:57:10:F3:AF:10:BA:25
X509v3 Authority Key Identifier:
keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f6:8d:b5:82:41:40:ae:62:6a:9b:91:8d:8e:b1:d6:7b:b6:
13:29:c0:3d:e1:9f:e3:99:08:7e:a8:fd:f0:19:df:cf:ae:36:
72:5f:c0:bf:f1:9f:5c:3f:49:62:82:87:d4:d6:8f:63:3e:6a:
fd:66:6a:05:84:89:2f:45:19:b2:5c:64:57:e7:21:4f:0f:58:
18:7f:13:22:5e:df:24:03:62:35:98:55:0a:0e:f2:c9:01:a1:
42:2a:74:0d:0a:66:7c:3b:a9:5a:6d:5e:f3:92:50:1f:eb:32:
eb:32:fb:e9:1d:42:bc:f8:32:37:9a:86:d0:48:2c:2a:7a:1b:
04:cf:7d:f6:55:ac:93:4d:0b:29:39:4a:ab:ed:44:62:51:7c:
9a:12:ed:5c:a8:cb:65:d0:cc:68:fd:87:ba:70:1d:b5:eb:89:
e2:c2:11:e5:56:f5:1a:3b:b1:4f:2c:bd:1f:b9:d4:63:31:4e:
7e:8d:47:62:8d:8f:33:52:cf:d7:db:40:d3:2a:bd:2b:f8:0e:
57:fc:8a:da:7b:3a:29:5f:68:89:93:42:b5:66:38:d5:20:41:
65:08:01:2c:6e:a0:81:b3:d4:84:58:d5:cd:61:87:3f:59:91:
5d:03:94:5c:5d:56:37:d9:ea:bd:d7:f4:80:c3:3c:fe:38:ca:
a0:ec:1f:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNCODcxMTAvBgNVBAUTKDkyNDcwOTlBNjdCNjM4REM5MjUzQjAyRTI1M0RCM0JF
NzQ1QUE4NUMwHhcNMjYwNzE3MDg1MTA0WhcNMjYwNzI0MDg1MTA0WjAYMRYwFAYD
VQQDEw02YTU5ZWNmOC0xNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3ly6WZT3buzKAL5Gm2WJCM/BkHM9Oxg7frTSzAGq1Vc4pQlSor1/cl30OoJ
RgFWafthttoKVWCiNply+tZ5mgd3tEAhIYnpiyY9MmNJkVQKzIBUIMe1WARPvz1v
5ibCtXxeRZ+wve0fVQvm0+A1rpUhEIKL6RYNjJoNLR8Wovji3TmPshfDKVLRQrt9
x2LFdugt5S+Lm/Cr+w6IqdYzojXEdAZ9lAujVrOUPLNyS06jiq/eGY2m1L9BI8cN
KGlBPzWwEe0s2l4sazHAXVVGmAbBdmCSDeQMI75umtIzWPOcxK8MwuBg5Ed9jfbr
s0fDpMHEQof4QKsBErwSJP0gxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhpgHkc
JPTM6Jm/PWhXEPOvELolMB8GA1UdIwQYMBaAFJJHCZpntjjcklOwLiU9s750Wqhc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0I4Ny8yM0QxNTI4QUJD
RTMxMUYwOUM1RjcwNDhDNEY5QUUwMi9ra2NKbW1lMk9OeVNVN0F1SlQyenZuUmFx
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0I4Ny8yM0QxNTI4QUJDRTMxMUYwOUM1RjcwNDhDNEY5QUUwMi9ra2NKbW1lMk9O
eVNVN0F1SlQyenZuUmFxRncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW/aNtYJBQK5iapuRjY6x1nu2EynAPeGf45kIfqj98Bnfz642cl/Av/GfXD9J
YoKH1NaPYz5q/WZqBYSJL0UZslxkV+chTw9YGH8TIl7fJANiNZhVCg7yyQGhQip0
DQpmfDupWm1e85JQH+sy6zL76R1CvPgyN5qG0EgsKnobBM999lWsk00LKTlKq+1E
YlF8mhLtXKjLZdDMaP2HunAdteuJ4sIR5Vb1GjuxTyy9H7nUYzFOfo1HYo2PM1LP
19tA0yq9K/gOV/yK2ns6KV9oiZNCtWY41SBBZQgBLG6ggbPUhFjVzWGHP1mRXQOU
XF1WN9nqvdf0gMM8/jjKoOwfNQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:02 2026 by rpki-client