
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier: F6Z5384QgdBJUJC/EquIry76tWtIjxfntzWMmFyUVzc=
Subject key identifier: 64:9E:2C:9E:2C:A5:4A:AC:8A:C2:DB:82:B4:0B:A2:AF:EF:67:10:84
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number: 01D4
Signing time: Mon 01 Jun 2026 04:30:21 +0000
Manifest this update: Mon 01 Jun 2026 04:30:21 +0000
Manifest next update: Mon 08 Jun 2026 04:30:21 +0000
Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: JziGx6RopzL6Ze/SH8i6+5yQ2Si8WcgdplVNZneODkA=)
2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Jun 1 04:30:21 2026 GMT
Not After : Jun 8 04:30:21 2026 GMT
Subject: CN=6a1d0add-17df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:a2:a4:50:e9:b6:e2:58:59:58:09:5d:e2:
28:68:69:5b:42:14:b7:ed:d2:9f:9e:b9:c8:7c:2e:
1d:e2:83:8c:25:de:d9:f9:92:35:08:92:1f:bf:71:
21:cf:fe:81:93:10:d3:44:ef:04:32:ef:fb:fb:39:
9e:9c:38:ca:41:39:91:0f:0d:45:91:d4:70:c3:1c:
3d:d7:3e:07:f4:a6:85:49:c6:fa:6f:41:e1:78:c4:
69:07:4f:00:a8:4a:ee:f2:dc:4a:41:4f:f4:a8:8f:
18:4d:f5:84:df:dd:fa:67:17:f5:e1:56:5a:78:da:
ed:c9:b7:4b:f0:7a:db:de:58:36:26:7d:26:90:5a:
07:62:48:ab:d3:94:2d:31:a5:6a:00:c4:a9:de:46:
fe:4a:6e:a7:46:b2:52:e3:1c:16:ba:79:9a:9e:6c:
d0:78:3b:b0:7b:0e:f4:fc:e0:0a:b3:11:88:42:3b:
c2:26:e8:d0:97:b8:86:60:fd:77:ae:17:40:41:2e:
52:f1:2d:38:fd:32:d1:e2:9e:13:5b:47:0d:d4:0d:
2f:c3:19:15:11:14:5a:f7:ab:4d:10:a9:22:4b:c9:
76:01:44:d3:3e:b8:95:b3:ff:ee:d5:93:fd:7f:25:
23:57:18:a5:0f:90:4d:6d:60:86:04:c2:9d:f9:23:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:2C:9E:2C:A5:4A:AC:8A:C2:DB:82:B4:0B:A2:AF:EF:67:10:84
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:69:15:66:36:25:1e:29:0d:05:f1:27:44:fb:d4:c1:ab:d0:
6b:74:8d:4a:fa:7f:4d:b2:1e:32:03:9b:5f:20:c9:3c:3b:aa:
10:4f:09:90:d9:87:10:96:a6:f8:01:8b:fe:4d:4e:8d:33:47:
94:75:60:ba:e3:51:de:84:1f:7d:43:da:83:d0:e2:cd:7c:bf:
3c:2c:10:34:da:67:0f:49:8f:6c:15:3f:25:37:d4:6b:b5:82:
21:35:28:21:b3:5b:ea:e4:cb:87:d7:81:68:d0:32:bd:92:66:
88:1d:18:a2:19:28:6f:0f:20:b6:d5:a0:2c:09:97:8a:52:a4:
26:9d:bc:7d:51:72:5c:e2:3e:f8:fe:59:1c:d5:55:12:45:53:
c7:42:53:bd:ac:b8:73:35:25:21:a9:65:67:23:0e:17:c0:75:
ae:b2:db:1f:9b:2c:10:fe:08:b0:ab:57:36:f5:78:c8:73:fc:
5f:89:8c:96:a8:c8:4d:22:92:b9:55:24:11:ce:7c:4b:de:72:
6d:6e:51:47:66:47:6c:1f:79:69:a9:22:6c:46:d1:89:53:af:
f3:fc:f0:4d:9d:3b:15:d3:75:0b:4c:97:fc:5c:4c:4c:15:85:
52:e9:80:6c:de:6b:03:ae:04:67:42:4d:7b:2b:dc:e9:ef:e1:
19:2a:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:31 2026 by rpki-client