
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier: 7wQaq4PrfNDEtxpxkCBRdLzZns3k1C47mNhOJsS+NJY=
Subject key identifier: 7C:20:FB:B3:28:70:FF:2A:86:B1:55:82:D2:BB:5F:C2:5A:2D:1B:DA
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number: 01A4
Signing time: Tue 03 Mar 2026 03:54:38 +0000
Manifest this update: Tue 03 Mar 2026 03:54:37 +0000
Manifest next update: Tue 10 Mar 2026 03:54:37 +0000
Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: M++lwJr61PGFY9Cez05ClEAVZXAgaJgQnDSl/nT90P0=)
2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: rSVG57dS9icctqN3//vfn2ezLCSeHMuQO9kLf2c0Ess=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Mar 3 03:54:37 2026 GMT
Not After : Mar 10 03:54:37 2026 GMT
Subject: CN=69a65b7e-73ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:8c:97:7d:5e:4f:a2:fa:53:46:f2:af:3f:
91:b4:b0:44:7c:34:e6:41:e9:bb:9a:c7:2f:49:bd:
bc:75:87:84:39:0c:bf:85:67:33:6f:06:64:20:e8:
e0:4f:66:71:14:19:2d:fe:f6:64:01:7f:86:d7:eb:
e5:48:ba:e9:40:37:d2:1f:ac:39:ad:0d:48:96:cf:
15:0d:cc:81:2d:b6:16:2f:bf:74:c5:a2:d4:2d:b6:
59:c8:44:66:ec:98:7e:82:36:67:b9:b5:9a:b3:da:
95:9a:02:08:5e:c0:1b:47:f3:0d:3e:b9:0f:6a:3b:
17:62:ce:e6:6c:cd:2f:d3:71:d2:4b:ce:da:04:e6:
21:6f:2b:03:6a:9d:8f:d8:bc:db:12:74:12:05:49:
5e:0e:44:ab:ff:b8:55:03:d5:ea:56:38:c8:b4:ea:
0a:2e:e3:d7:5a:5e:43:38:43:d8:78:dc:48:f3:d2:
0c:23:28:94:d4:a4:0b:29:d1:66:6f:47:22:01:d0:
78:5f:76:ee:c5:46:63:0f:cb:15:8b:1c:28:19:e1:
69:cd:c9:88:9e:d9:10:c6:d1:8f:e9:b8:94:06:9e:
c8:ab:09:9b:74:29:3e:0d:56:ba:19:ae:52:27:c6:
7a:6c:81:2b:21:02:0e:cc:25:74:99:05:af:93:c8:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:20:FB:B3:28:70:FF:2A:86:B1:55:82:D2:BB:5F:C2:5A:2D:1B:DA
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7d:96:ea:68:36:bf:48:f8:41:71:36:d4:1a:15:95:08:06:
72:2f:51:43:7a:fb:ba:fb:98:1c:64:87:28:1f:07:e7:68:3b:
b7:e8:7a:86:be:89:74:b2:00:5a:b4:d0:16:0c:a3:51:b2:49:
3b:b0:bb:35:cc:1d:11:ed:c8:7d:f7:ff:60:28:19:54:fc:b3:
5e:ec:5d:bb:26:1d:5c:4e:c4:6b:df:56:86:13:81:54:9d:e9:
47:6a:db:7c:ac:21:89:99:a9:18:03:fd:b1:79:2a:30:ca:19:
65:a5:fc:6f:26:1e:65:bb:68:f8:cc:8c:24:21:9c:76:fc:b8:
93:3f:2b:2b:ac:c4:e2:fc:3f:97:5e:29:b3:3e:8b:82:26:7a:
5f:b5:d7:71:e2:9f:ba:55:42:7a:3e:c6:61:f1:ab:16:91:f8:
f1:19:ca:45:32:58:69:a8:34:a5:20:e9:d4:bc:11:ae:56:c7:
38:43:c1:10:5d:9b:2d:81:34:95:ea:6d:be:23:52:3e:79:4c:
23:8f:b8:09:a7:b6:e0:5c:38:c8:98:76:de:6c:af:76:e5:02:
03:4a:64:c3:37:aa:24:88:c7:50:9d:8a:89:0a:cc:2f:79:1d:
15:ba:da:e3:f4:ba:37:7e:d1:fe:25:1a:d3:2c:1e:3e:69:c4:
fc:0f:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:07 2026 by rpki-client