
$ rpki-client -vvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
File: 2kcnine73_Ktn5igEaKnoufNYNg.mft (raw, json)
Hash identifier: PttZ7T4xN5ALmHwldfTjyfU2eVXqtRcnF5mzfSDYZe8=
Subject key identifier: 78:F0:90:E4:2D:6F:2C:FB:1D:2B:8A:83:24:EF:48:1D:9F:6F:5A:32
Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
Certificate issuer: /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
Manifest number: 0172
Signing time: Mon 27 Jul 2026 06:32:19 +0000
Manifest this update: Mon 27 Jul 2026 06:32:18 +0000
Manifest next update: Mon 03 Aug 2026 06:32:18 +0000
Files and hashes: 1: 2kcnine73_Ktn5igEaKnoufNYNg.crl (hash: YSi9tng18AQMAns0fpC44adj7tgZ+zrp27w3Djx9Y8Q=)
2: 05A966C652DB11EF990CB840C4F9AE02.roa (hash: /ju6tAC2YvQK9Mt9Ug1vYucEJYF6/PAoDqUqSoXsrZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91393BE, serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Validity
Not Before: Jul 27 06:32:18 2026 GMT
Not After : Aug 3 06:32:18 2026 GMT
Subject: CN=6a66fb72-edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:49:0a:da:44:18:d5:57:58:56:da:87:32:
b8:1b:65:19:5d:30:77:11:87:19:96:be:88:50:66:
2f:ca:c2:fe:0d:43:3c:8f:92:ed:0d:20:2b:16:61:
aa:12:93:6d:50:ab:c3:8d:b7:5d:01:33:e9:7a:66:
fe:c2:7f:a9:dc:e2:39:64:a5:90:c7:03:c5:58:71:
3b:3a:3b:29:ee:c7:dd:dd:c4:95:97:b4:a8:3a:8d:
ea:18:d4:e8:cb:1b:4b:16:b2:b1:53:af:f0:7e:f8:
7e:16:68:e6:51:d1:ef:39:62:e3:ea:0a:9d:55:c1:
8f:87:0b:87:ce:ea:3c:c0:e0:0c:5c:26:2f:47:fe:
a3:d4:08:00:f7:76:7c:b0:02:7b:98:1e:97:dd:bd:
3b:d6:6f:a3:be:91:93:5f:cb:87:65:56:30:7b:97:
4a:40:4d:f4:d3:d1:dc:43:f8:c1:31:f2:5c:e5:08:
92:e4:6d:c0:c4:cd:7d:e4:6e:fa:4d:1d:0d:98:3d:
22:a7:10:14:7f:5c:c3:95:e8:39:f9:e1:1e:74:ff:
a0:e2:e1:a6:3b:90:49:06:01:e6:02:fb:6b:1f:74:
6d:6c:a8:26:f3:20:31:3e:fa:82:de:26:de:fd:72:
72:a7:c4:38:cc:b1:91:d9:df:3a:1f:df:c3:68:6f:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:90:E4:2D:6F:2C:FB:1D:2B:8A:83:24:EF:48:1D:9F:6F:5A:32
X509v3 Authority Key Identifier:
keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:a3:4a:92:14:36:d2:4f:32:2b:b0:ee:ba:f5:d8:7e:3f:60:
ef:73:60:41:50:c9:63:3f:c7:15:03:89:0d:e5:da:b2:be:47:
ec:19:7f:fa:19:5e:55:bf:08:e6:23:db:86:f8:b5:64:8a:03:
26:a4:1b:d3:53:2d:43:02:b8:da:7f:f8:ee:dd:d7:d3:ee:e8:
96:0e:08:a0:bf:bc:2e:80:75:bf:89:46:2b:25:62:e7:e4:26:
17:01:90:d2:20:58:75:a1:73:3a:48:51:0d:cb:e7:67:f2:52:
64:de:38:90:d7:5a:e6:a6:f1:47:b5:05:ea:7f:e0:05:b8:da:
d7:13:53:b0:48:1a:9d:38:4b:e1:a6:e1:f5:ad:58:d7:85:c9:
80:c5:d3:61:d5:b2:6c:79:fd:d9:1a:df:fc:a5:dd:1c:c2:41:
cb:f6:49:bc:a7:ea:2e:6b:35:cc:c4:e5:c8:b8:8f:69:7a:7f:
36:6b:52:ca:78:e6:3e:46:41:58:45:41:78:f6:66:da:70:c8:
1a:af:65:70:cc:2d:24:3f:2a:68:af:03:0d:8c:f4:7a:81:59:
c4:51:98:e0:58:f0:3d:14:12:8a:71:f1:a0:5a:a5:b7:78:36:
c9:d0:48:a9:c4:26:b7:2d:4c:31:68:db:e4:ac:4b:d4:dd:6f:
53:5a:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:40 2026 by rpki-client