
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
File: 2kcnine73_Ktn5igEaKnoufNYNg.mft (raw, json)
Hash identifier: 4+OpI76+yMy6z91/iRpIeEVgEjLktk+m7yeGpIb9I5c=
Subject key identifier: E7:7A:F0:14:2D:D3:16:6F:4F:B9:10:61:84:9B:9B:12:A1:A7:F9:F3
Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
Certificate issuer: /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
Manifest number: 0192
Signing time: Wed 23 Sep 2026 04:12:11 +0000
Manifest this update: Wed 23 Sep 2026 04:12:11 +0000
Manifest next update: Wed 30 Sep 2026 04:12:11 +0000
Files and hashes: 1: 2kcnine73_Ktn5igEaKnoufNYNg.crl (hash: AzeymokBsHQt78yXbK+C2dQ7GUv4CK4aKUg8DpM6lYw=)
2: 05A966C652DB11EF990CB840C4F9AE02.roa (hash: 0tnkTjmDTPCnBRHjTVAhUZJS+JDrQXtnaTDvs7rlqbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91393BE, serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Validity
Not Before: Sep 23 04:12:11 2026 GMT
Not After : Sep 30 04:12:11 2026 GMT
Subject: CN=6ab3519b-6d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:77:69:2e:16:26:3c:b8:05:d6:07:19:0a:
04:7a:d7:46:67:41:fc:6b:48:a1:e3:a5:de:eb:51:
89:04:09:1c:0d:b8:a2:a6:93:c2:08:de:a4:f4:56:
fc:2f:f6:24:65:39:32:65:bc:e2:ec:7e:70:c4:52:
e6:ae:d8:65:8b:24:71:64:d2:33:ee:ae:3d:ed:7b:
e7:38:cf:75:82:09:69:47:2c:c4:a2:aa:64:03:ee:
d1:1f:ce:a7:d0:44:01:14:14:37:9c:bb:15:f0:f3:
c8:cd:73:62:68:eb:f5:34:62:68:b9:c8:f4:4d:4f:
18:59:a4:cd:78:63:8d:13:82:97:5d:fb:56:c8:9b:
ed:a9:21:e8:df:3b:fc:0c:1b:55:7b:89:b3:da:bf:
43:ab:93:58:c1:ea:11:b8:55:83:4a:3a:78:ae:24:
60:d2:81:e5:5f:7d:9a:0f:2f:6a:34:97:c0:09:7b:
58:c8:f2:ba:a5:8f:36:bc:dc:0f:b0:37:32:65:42:
f5:04:b5:69:fa:b2:bc:0e:20:ed:5b:b2:fc:b5:53:
03:db:00:7f:39:51:57:4e:81:44:be:f1:c0:23:76:
6a:66:91:5a:09:c9:47:85:17:50:a9:20:1f:25:2b:
3a:d0:04:3d:9c:06:f2:70:f7:b9:b3:c1:4f:b7:d3:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7A:F0:14:2D:D3:16:6F:4F:B9:10:61:84:9B:9B:12:A1:A7:F9:F3
X509v3 Authority Key Identifier:
keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ed:bc:da:e5:6e:c8:60:9f:9f:40:50:23:fe:87:87:00:c6:
e0:5d:a1:ef:18:80:48:8e:bf:fc:70:fb:cb:07:f0:ab:30:95:
43:17:78:f6:12:96:93:f6:d4:8c:cb:6c:4d:f8:f4:14:7c:e6:
9b:93:4c:4c:0e:69:44:6f:87:8e:a0:cf:f3:b9:74:ed:5c:c8:
e8:39:78:b5:4b:7c:fa:16:43:1a:18:18:f2:f0:9f:8d:be:0d:
ae:5e:39:1b:71:48:32:ce:ad:89:de:a8:14:15:fd:9b:42:58:
af:23:b4:a6:12:14:4e:43:44:d4:d4:42:c2:7b:b1:33:2b:88:
1d:7b:ad:2c:78:26:93:07:b1:6e:f4:e7:20:42:a9:bb:24:76:
af:de:f6:4b:d5:ff:f1:01:e7:53:bb:3d:99:d9:06:0b:ea:31:
29:90:7f:c7:cb:7c:b6:f0:cf:34:0f:fe:b7:63:ab:37:9e:b7:
55:b1:5f:60:2d:52:04:d3:01:75:e9:63:40:4b:13:96:2e:c6:
79:ca:da:9e:de:3e:7f:ab:a8:0d:86:17:ba:1b:7d:2d:21:85:
75:2f:8d:4a:b5:d1:72:9a:c6:04:b9:28:d0:34:c9:79:53:37:
5c:f5:a9:f9:76:4e:87:17:5b:e4:92:59:73:97:47:79:55:c2:
54:7b:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:50 2026 by rpki-client