
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json)
Hash identifier: ymyUGwxjMJXunhNwh1iNg3cYLC5Pnc+ek1UxLiB4YSU=
Subject key identifier: 19:86:F4:31:17:0C:FC:51:F1:4B:25:57:BE:A0:1A:2F:CE:6E:81:C7
Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Certificate serial: 09AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
Manifest number: 09A4
Signing time: Tue 18 Aug 2026 20:17:13 +0000
Manifest this update: Tue 18 Aug 2026 20:17:13 +0000
Manifest next update: Tue 25 Aug 2026 20:17:13 +0000
Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: Vo7hjkNlrKZvDREkcrHMQnpI/djdr0zHu63dJLjDgWo=)
2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: kE3nF4uoNwr26LdrqYbjd4NqQ6Wc0Q+IQHICEWbmAls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Validity
Not Before: Aug 18 20:17:13 2026 GMT
Not After : Aug 25 20:17:13 2026 GMT
Subject: CN=6a84bdc9-2af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:56:8f:4c:0c:b6:c0:1e:e1:a9:a0:5f:da:
d2:6c:c1:ce:d9:da:c6:64:a5:e1:97:a4:0a:eb:ca:
9e:ba:de:06:e7:0d:48:6c:ca:13:ff:49:d8:33:93:
33:78:bb:1a:61:ce:db:59:48:1b:8d:9a:3b:ed:2b:
9f:bf:de:39:73:d6:99:45:ca:43:a4:4f:b7:f7:53:
58:00:b2:41:82:ab:7d:e6:48:e7:78:cc:2b:e2:43:
69:22:55:ba:83:1c:7e:6e:77:01:02:87:c2:28:d4:
dc:ce:f1:95:df:42:2c:b6:52:19:e4:03:d3:b8:36:
a6:a5:f5:3e:7b:bb:ef:ae:8e:9c:e2:1c:ef:3c:1b:
b1:80:7a:d8:2c:ca:d3:28:9e:8f:74:7a:9f:7a:b2:
85:0b:88:aa:a7:49:f0:a5:91:46:32:3a:d2:59:5a:
f3:0e:84:10:4b:a7:b4:2a:4f:38:38:05:71:2b:3b:
37:c5:49:8a:41:30:ac:ea:4e:df:33:87:7f:16:7a:
da:79:fe:59:c1:f5:3f:53:7b:2b:d3:ed:ab:aa:a5:
c9:dd:ed:be:be:cb:90:28:e9:6c:48:de:fb:a1:e5:
a2:bf:9c:12:a0:fb:b4:d7:1f:94:74:b0:c2:42:d5:
55:38:e1:fb:b4:8f:5e:d5:90:37:15:49:b9:41:c7:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:F4:31:17:0C:FC:51:F1:4B:25:57:BE:A0:1A:2F:CE:6E:81:C7
X509v3 Authority Key Identifier:
keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:8e:2d:15:31:1d:87:81:55:72:89:a3:09:44:b6:0e:f4:02:
a1:9b:f2:33:c0:52:e6:20:39:5f:4b:e3:2c:fb:77:57:fd:f3:
47:8f:b0:e8:dc:d5:14:2a:e6:d3:4f:5e:c1:4d:22:cb:e3:7e:
8f:8e:f6:11:4c:53:05:e4:81:8d:11:88:46:4f:1a:46:7a:bc:
12:1f:6b:b6:bd:e9:69:cd:59:8a:46:19:78:81:c9:99:b1:2e:
2d:fd:d3:30:c9:c4:44:7c:a1:fe:4b:f3:f9:cd:9b:68:47:41:
a1:c8:4f:c3:b8:50:af:60:4a:1e:e2:1d:82:a6:90:52:9c:d4:
94:cd:70:62:85:01:21:17:7e:1e:3a:bc:96:e3:91:70:14:e5:
33:58:2a:e7:74:82:e8:f9:1d:e1:de:65:c8:49:df:48:52:8f:
29:01:2c:f8:d2:1b:d8:26:64:f8:6f:b4:78:37:1b:8d:9c:a3:
e9:74:9a:37:b5:6c:96:0c:2d:8d:cb:61:c3:9b:08:e2:e8:15:
e2:35:76:fe:5b:80:78:a8:d2:30:90:91:8d:9c:ed:7e:81:a8:
2a:05:0c:e4:b6:43:26:75:4c:8d:2c:e9:c1:7e:0f:ae:43:1f:
5b:1b:65:5c:3d:83:ac:d9:4b:7e:6b:79:c9:1f:d1:c8:c1:bb:
1f:b8:7b:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz
NzAzMkYzRDQwHhcNMjYwODE4MjAxNzEzWhcNMjYwODI1MjAxNzEzWjAYMRYwFAYD
VQQDEw02YTg0YmRjOS0yYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5YdWj0wMtsAe4amgX9rSbMHO2drGZKXhl6QK68qeut4G5w1IbMoT/0nYM5Mz
eLsaYc7bWUgbjZo77Sufv945c9aZRcpDpE+391NYALJBgqt95kjneMwr4kNpIlW6
gxx+bncBAofCKNTczvGV30IstlIZ5APTuDampfU+e7vvro6c4hzvPBuxgHrYLMrT
KJ6PdHqferKFC4iqp0nwpZFGMjrSWVrzDoQQS6e0Kk84OAVxKzs3xUmKQTCs6k7f
M4d/Fnraef5ZwfU/U3sr0+2rqqXJ3e2+vsuQKOlsSN77oeWiv5wSoPu01x+UdLDC
QtVVOOH7tI9e1ZA3FUm5QcfUzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmG9DEX
DPxR8UslV76gGi/OboHHMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0
RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl
Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOI4tFTEdh4FVcomjCUS2DvQCoZvyM8BS5iA5X0vjLPt3V/3zR4+w6NzVFCrm
009ewU0iy+N+j472EUxTBeSBjRGIRk8aRnq8Eh9rtr3pac1ZikYZeIHJmbEuLf3T
MMnERHyh/kvz+c2baEdBochPw7hQr2BKHuIdgqaQUpzUlM1wYoUBIRd+Hjq8luOR
cBTlM1gq53SC6Pkd4d5lyEnfSFKPKQEs+NIb2CZk+G+0eDcbjZyj6XSaN7Vslgwt
jcthw5sI4ugV4jV2/luAeKjSMJCRjZztfoGoKgUM5LZDJnVMjSzpwX4PrkMfWxtl
XD2DrNlLfmt5yR/RyMG7H7h7aQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:51 2026 by rpki-client