
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier: UjbMuJwiyXBicxsulhSRcVO1n0w9eoiwD6H8tWC5yiY=
Subject key identifier: 77:71:22:41:E8:1E:F8:B4:0D:AA:72:0B:01:37:40:37:25:85:F0:8F
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number: 0139
Signing time: Wed 09 Sep 2026 05:57:40 +0000
Manifest this update: Wed 09 Sep 2026 05:57:39 +0000
Manifest next update: Wed 16 Sep 2026 05:57:39 +0000
Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: 1wh0NdT2PTjDy4DBZtM+dYDSfjFkVh2lVIHB3kSV6Os=)
2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 05:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Validity
Not Before: Sep 9 05:57:39 2026 GMT
Not After : Sep 16 05:57:39 2026 GMT
Subject: CN=6aa0f554-8ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:af:72:8c:54:eb:e6:cf:a3:71:98:f1:02:
e3:18:2e:27:5f:43:36:44:78:36:b2:72:ea:8f:ea:
89:ef:f3:1e:be:4a:21:14:d9:19:7e:47:94:ac:7e:
8f:72:a8:60:8e:dd:79:78:c0:2c:b5:2e:67:49:88:
18:16:11:22:dd:83:e7:3d:c9:d8:01:d8:98:8f:aa:
2d:1b:e9:4e:83:f1:ae:ee:e8:28:be:c1:e0:f3:63:
6e:7b:20:f5:0c:5a:2d:44:e1:db:00:8f:b4:b4:22:
2d:92:dd:2e:df:26:1e:c8:bc:09:c9:10:7f:f0:94:
54:cc:6f:de:a7:87:a5:24:80:e3:68:79:4f:69:fa:
d7:81:5f:1a:90:78:81:77:d7:39:5c:ad:d6:32:8d:
68:e6:a8:59:46:9e:b7:2d:68:8e:60:85:9a:81:7c:
57:56:fe:81:a8:83:c2:e7:52:83:9c:07:cf:1e:95:
8c:3c:6f:20:6e:e1:cc:1b:34:3e:e3:1b:80:ee:d5:
4b:4d:3f:8b:34:9e:a0:88:44:b5:15:26:59:fd:2a:
46:c0:19:51:47:db:e1:b3:c5:fd:44:46:d3:89:22:
d1:70:d4:76:f0:94:28:87:fb:bf:59:ea:76:80:fa:
7a:33:a6:f2:8e:84:48:fa:a0:ae:7e:17:7a:b8:d9:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:71:22:41:E8:1E:F8:B4:0D:AA:72:0B:01:37:40:37:25:85:F0:8F
X509v3 Authority Key Identifier:
keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:fb:33:66:50:0e:24:69:ba:71:80:7a:f5:a6:d4:b7:1d:e8:
25:dc:b8:91:ae:fe:c7:42:b5:7e:34:e2:db:e8:b7:35:7c:8b:
d1:10:25:c8:9a:a7:a4:9d:3d:8b:84:83:91:6a:5c:43:bf:2a:
b8:c5:f9:b8:47:82:97:e7:5d:6e:dc:3a:ec:01:00:63:da:ba:
7e:de:d3:80:55:2d:ba:b6:ce:e7:9b:40:1f:8e:6e:82:97:c1:
b1:77:d7:65:50:7c:7e:ee:b1:c3:d5:4d:24:87:4f:42:ee:10:
c3:af:de:aa:ba:07:dc:80:21:9c:2c:57:da:e9:c3:fc:78:72:
71:e2:bb:8d:93:6a:d4:cd:59:e3:b6:72:69:47:96:5e:c8:49:
7d:8a:3d:91:d1:26:e9:e9:c6:2e:81:c8:3a:ec:22:af:35:35:
e0:8c:36:cf:36:53:08:00:11:4a:e8:7d:d9:a4:9e:a1:4d:ea:
49:e9:89:78:2b:0b:97:ae:7e:c4:92:09:bc:b9:45:37:73:34:
c0:54:db:c6:ac:71:5d:2a:43:4e:bf:6b:5e:aa:83:fd:03:d6:
b1:e0:68:9d:43:8a:4c:09:a9:66:87:3a:bd:36:68:5e:a8:b8:
2a:62:bb:e2:f4:f3:5b:96:26:a9:74:ac:d5:d0:04:c7:19:29:
36:d8:9b:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1
RjA3MDJBQzgwHhcNMjYwOTA5MDU1NzM5WhcNMjYwOTE2MDU1NzM5WjAYMRYwFAYD
VQQDEw02YWEwZjU1NC04ZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfavcoxU6+bPo3GY8QLjGC4nX0M2RHg2snLqj+qJ7/MevkohFNkZfkeUrH6P
cqhgjt15eMAstS5nSYgYFhEi3YPnPcnYAdiYj6otG+lOg/Gu7ugovsHg82NueyD1
DFotROHbAI+0tCItkt0u3yYeyLwJyRB/8JRUzG/ep4elJIDjaHlPafrXgV8akHiB
d9c5XK3WMo1o5qhZRp63LWiOYIWagXxXVv6BqIPC51KDnAfPHpWMPG8gbuHMGzQ+
4xuA7tVLTT+LNJ6giES1FSZZ/SpGwBlRR9vhs8X9REbTiSLRcNR28JQoh/u/Wep2
gPp6M6byjoRI+qCufhd6uNmLJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdxIkHo
Hvi0DapyCwE3QDclhfCPMB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0
OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkEzNS85OTI3Nzg0NkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JD
MXBieVIzQVZSMXhmQndLc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhfszZlAOJGm6cYB69abUtx3oJdy4ka7+x0K1fjTi2+i3NXyL0RAlyJqnpJ09
i4SDkWpcQ78quMX5uEeCl+ddbtw67AEAY9q6ft7TgFUturbO55tAH45ugpfBsXfX
ZVB8fu6xw9VNJIdPQu4Qw6/eqroH3IAhnCxX2unD/HhyceK7jZNq1M1Z47ZyaUeW
XshJfYo9kdEm6enGLoHIOuwirzU14Iw2zzZTCAARSuh92aSeoU3qSemJeCsLl65+
xJIJvLlFN3M0wFTbxqxxXSpDTr9rXqqD/QPWseBonUOKTAmpZoc6vTZoXqi4KmK7
4vTzW5YmqXSs1dAExxkpNtibmQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:34:24 2026 by rpki-client