
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier: znjMPscQbuoRUQdhpvRjHr/8wQ9CezMnajSdrCB9o6A=
Subject key identifier: 08:7E:08:20:B1:24:79:59:1A:D2:8D:60:00:F1:AB:77:10:96:E5:E3
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number: 0219
Signing time: Sat 17 Oct 2026 03:37:44 +0000
Manifest this update: Sat 17 Oct 2026 03:37:43 +0000
Manifest next update: Sat 24 Oct 2026 03:37:43 +0000
Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: sNH9qBISXXeTgiwJUKfV53t7Sb+0Fnu2vF9mUpRK6mU=)
2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 03:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Oct 17 03:37:43 2026 GMT
Not After : Oct 24 03:37:43 2026 GMT
Subject: CN=6ad2ed88-c96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:e5:94:1f:a8:da:ee:31:6a:b6:1b:18:68:
02:27:60:45:ad:9d:ce:a6:5c:bb:0d:05:92:9d:79:
ac:3b:f7:a3:fb:36:c2:03:d3:72:28:c7:93:44:a2:
81:be:e6:53:74:67:35:37:9f:5e:6a:b3:74:4c:b6:
ce:6d:07:ac:99:6b:f9:fe:6c:3b:05:88:73:2f:f1:
39:60:dd:72:c4:51:ec:97:91:05:3b:ff:5c:30:af:
1b:b3:9a:e2:ec:6b:52:85:2c:7d:93:4a:56:e6:b6:
70:00:54:5e:40:40:0a:a8:c4:56:b3:6c:36:b5:cf:
79:3d:b4:af:ae:c9:50:03:ab:c7:1f:94:54:a0:cb:
73:65:61:cc:fe:ea:12:4f:48:f8:4b:3e:9c:dd:0f:
2f:3e:4f:45:23:cb:70:54:dc:44:30:4c:dd:36:2a:
3b:ac:67:11:1f:79:7e:15:5b:c1:63:1b:a7:91:a1:
e8:f5:29:8e:b2:cc:9e:02:7f:cf:58:a7:cc:17:fe:
b5:66:94:e0:c7:92:60:34:88:5e:3d:ec:d5:e8:89:
16:51:2f:1b:0c:41:ef:36:7d:71:a2:2c:e3:3e:73:
47:e9:cb:1a:2d:f2:58:cd:05:19:7c:92:c3:e5:f8:
c9:b9:79:54:69:a4:64:5b:ed:37:33:cf:e1:2d:b5:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7E:08:20:B1:24:79:59:1A:D2:8D:60:00:F1:AB:77:10:96:E5:E3
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c7:eb:a5:68:0c:56:fa:e7:85:da:cb:2d:69:0b:2e:64:86:
e1:96:c8:2f:5f:f7:b7:40:66:a2:16:a0:48:98:cf:0f:6e:b0:
8e:d9:52:35:29:ac:0e:ba:f8:62:dc:7d:87:98:c0:4c:47:63:
a3:cd:c0:aa:c2:ea:e8:b4:03:0d:42:5a:33:d3:a3:87:87:b4:
9a:38:23:1c:e0:75:ef:ef:b8:ae:68:0e:80:00:91:40:cf:9f:
52:c0:c4:31:9a:7b:60:f8:91:43:e7:8f:dd:5c:83:3a:11:2a:
fa:4e:fd:f0:cd:0f:9a:98:c4:9a:4a:d9:72:12:d8:35:84:47:
e8:c1:28:dd:df:38:33:2b:54:e9:84:56:1e:24:c7:b0:c5:e7:
a5:5d:b9:3e:8e:00:6e:31:16:01:25:c6:09:75:21:18:16:2e:
09:35:ca:df:9d:3c:f7:06:85:98:3a:6f:72:d6:71:1f:13:15:
26:e5:47:82:a5:fb:60:6d:0f:2c:67:7c:e0:65:ce:0f:10:4c:
a1:3a:ea:8f:11:3d:3f:4a:a4:6f:61:ea:f9:45:6a:15:bb:ae:
2a:a7:be:3a:04:22:66:5e:3d:01:5d:86:30:8b:66:5e:96:af:
40:30:8b:37:59:24:cd:69:e2:06:54:be:55:a8:74:8c:bc:d7:
29:99:fc:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx
Qjk2QkZGMzMwHhcNMjYxMDE3MDMzNzQzWhcNMjYxMDI0MDMzNzQzWjAYMRYwFAYD
VQQDEw02YWQyZWQ4OC1jOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvKHllB+o2u4xarYbGGgCJ2BFrZ3Oply7DQWSnXmsO/ej+zbCA9NyKMeTRKKB
vuZTdGc1N59earN0TLbObQesmWv5/mw7BYhzL/E5YN1yxFHsl5EFO/9cMK8bs5ri
7GtShSx9k0pW5rZwAFReQEAKqMRWs2w2tc95PbSvrslQA6vHH5RUoMtzZWHM/uoS
T0j4Sz6c3Q8vPk9FI8twVNxEMEzdNio7rGcRH3l+FVvBYxunkaHo9SmOssyeAn/P
WKfMF/61ZpTgx5JgNIhePezV6IkWUS8bDEHvNn1xoizjPnNH6csaLfJYzQUZfJLD
5fjJuXlUaaRkW+03M8/hLbV0swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAh+CCCx
JHlZGtKNYADxq3cQluXjMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5
MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2
c2lOcUlQdjNPdG9ibHJfek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALMfrpWgMVvrnhdrLLWkLLmSG4ZbIL1/3t0BmohagSJjPD26wjtlSNSmsDrr4
Ytx9h5jATEdjo83AqsLq6LQDDUJaM9Ojh4e0mjgjHOB17++4rmgOgACRQM+fUsDE
MZp7YPiRQ+eP3VyDOhEq+k798M0PmpjEmkrZchLYNYRH6MEo3d84MytU6YRWHiTH
sMXnpV25Po4AbjEWASXGCXUhGBYuCTXK35089waFmDpvctZxHxMVJuVHgqX7YG0P
LGd84GXODxBMoTrqjxE9P0qkb2Hq+UVqFbuuKqe+OgQiZl49AV2GMItmXpavQDCL
N1kkzWniBlS+Vah0jLzXKZn8+w==
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:04:09 2026 by rpki-client