
$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json)
Hash identifier: hGKVwHD37DThzCcRPbZ2x2892H7YkAfuY+WHoRKlCbo=
Subject key identifier: D0:C6:D5:FF:E3:3B:C2:9C:26:9F:E1:57:F3:53:6B:F7:75:E9:EE:DF
Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
Manifest number: 013C
Signing time: Sat 13 Jun 2026 05:23:43 +0000
Manifest this update: Sat 13 Jun 2026 05:23:42 +0000
Manifest next update: Sat 20 Jun 2026 05:23:42 +0000
Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: o3aQj6dzo92o6Z6Y8dIVJDq2bJhNVudA8W6AEPyWUr8=)
2: C731AFD03B9A11F0B7924C1FC4F9AE02.roa (hash: Sej2V4OlsP7Ps6e9ZpabG+sOD+K5ClIDNHh6GA9v3Kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Validity
Not Before: Jun 13 05:23:42 2026 GMT
Not After : Jun 20 05:23:42 2026 GMT
Subject: CN=6a2ce95e-0e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:09:4c:2c:97:c1:64:06:2e:8f:12:9a:9c:
93:85:7c:5e:67:81:9b:31:75:cc:9b:26:ba:b3:55:
75:95:28:3c:ba:f3:fa:1a:0a:22:6f:0a:95:57:73:
9b:4f:af:83:18:aa:53:23:a6:0c:e2:6e:72:a0:cc:
a2:e2:ac:9b:a6:5c:f7:97:e4:d7:a0:0c:c2:1d:84:
ad:7c:33:ce:da:23:1b:dc:f3:1d:86:22:56:b4:1d:
b4:c3:92:b4:be:ff:d8:5f:4f:b4:fa:74:b6:69:ce:
65:38:a2:27:1c:19:36:4b:ae:ec:92:22:2f:91:6a:
eb:ba:30:33:28:9e:a9:c0:18:13:b3:9a:68:53:2f:
e0:c3:73:92:33:5f:41:74:5d:6b:aa:05:35:95:c0:
53:a1:3b:eb:b1:fe:e1:da:25:0e:2f:01:09:99:d4:
c4:4f:65:e6:8e:24:1b:a7:98:86:a9:8b:a7:a6:30:
47:2a:09:47:7b:7a:4b:74:f7:6a:69:28:0b:f8:79:
2d:7b:45:52:27:47:ba:49:88:78:8a:04:a8:57:79:
08:97:e1:cd:1d:7e:53:46:d8:d2:50:11:2c:83:f7:
34:a7:bd:af:fb:aa:31:60:d0:50:e6:e9:7c:4c:df:
f1:30:8c:ec:6c:f4:53:e4:67:eb:14:02:32:d7:da:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:D5:FF:E3:3B:C2:9C:26:9F:E1:57:F3:53:6B:F7:75:E9:EE:DF
X509v3 Authority Key Identifier:
keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:bc:b3:f7:33:e2:7c:38:46:a3:2a:6c:29:d7:51:5c:54:
ea:d4:80:73:ee:0d:be:73:5c:29:ea:a8:5f:09:94:58:a5:a6:
46:45:28:bd:af:bf:45:38:e4:b2:0b:a3:e7:bb:53:16:cd:03:
53:c2:d2:0b:01:dd:92:ed:11:0e:98:78:68:f3:b6:bc:06:84:
be:43:a9:4a:53:82:2d:c6:f6:a5:49:ee:ad:27:91:19:19:5d:
d6:c7:b3:a1:f5:41:19:f6:d5:5e:c1:44:00:96:9c:81:43:67:
e6:6f:f0:71:19:c5:03:a3:65:0a:8b:8c:09:2b:65:43:5f:f1:
06:2f:6c:ba:f7:55:89:77:1f:9a:82:73:37:f5:fb:e9:7a:d8:
da:71:cb:64:25:ff:4f:86:ed:ff:b2:1f:c3:79:31:7d:c7:24:
52:0e:f3:03:ea:b3:2f:b3:ef:94:22:db:7c:17:b7:d5:d2:a0:
35:cf:59:92:d5:df:df:a9:fd:09:7e:7a:4f:f1:c2:b0:da:17:
12:6f:5b:fa:c7:2f:29:cb:3e:52:18:c8:8c:1f:60:d8:16:66:
b8:3c:3b:4a:31:4d:b6:f7:36:eb:46:f2:2a:fa:db:69:1d:86:
b9:80:41:a5:6a:7b:b4:84:b1:79:d8:04:05:f4:e0:9c:db:28:
57:a2:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:57 2026 by rpki-client