
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier: HQnC/JP9+2eHJKe78vjwHBkWTcjUMQ+kActpN8qGGP8=
Subject key identifier: BC:A4:4B:F6:F8:DE:2C:5D:5A:4B:CD:97:79:80:40:B1:D3:22:9C:AB
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number: 0259
Signing time: Mon 27 Jul 2026 03:50:30 +0000
Manifest this update: Mon 27 Jul 2026 03:50:30 +0000
Manifest next update: Mon 03 Aug 2026 03:50:30 +0000
Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: ISX6RIo0vHrqTnaF5Z1OkPpul99/EMETCHDc+nnuO5I=)
2: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=)
3: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=)
4: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Jul 27 03:50:30 2026 GMT
Not After : Aug 3 03:50:30 2026 GMT
Subject: CN=6a66d586-ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:16:7f:cf:58:db:d8:e1:64:fc:1d:37:31:
f6:7f:a2:e7:ed:a4:35:7e:ec:3c:46:37:e7:85:4b:
38:58:da:ba:97:f6:e8:cb:5d:80:23:69:5a:0c:ef:
65:d0:97:59:3a:3d:03:18:d1:89:96:b3:88:5a:48:
d1:d2:cd:8f:76:da:12:b8:79:68:02:6f:b7:85:15:
2d:da:c7:7a:6c:42:5a:cb:3b:39:ba:f9:bd:39:6f:
c1:43:f6:8e:5c:85:57:c9:ef:c1:d6:be:3c:65:91:
e4:96:86:06:04:87:d0:9a:f6:b6:0b:8b:37:a0:8d:
0f:7d:45:fd:3d:ac:f0:cb:a1:e3:38:60:b7:5b:39:
cc:bd:cd:e9:1b:18:ce:a6:31:dc:6a:57:36:8d:43:
bf:88:db:26:ca:14:2b:87:8f:d1:8b:0c:1d:4f:85:
fa:55:a0:01:7b:45:1d:13:46:07:c3:b1:0c:14:45:
17:ee:fd:20:66:b2:d4:6c:6b:61:37:d6:6e:19:f9:
7a:8f:ca:ce:a6:1b:ef:86:56:0b:5e:a6:40:be:b7:
7c:38:91:17:eb:fa:89:0c:9e:8b:d3:27:4b:75:17:
fb:71:c9:4f:2a:11:9e:46:36:ba:73:63:af:4e:e8:
19:5b:fa:cb:6f:57:53:65:88:2c:e6:56:18:64:82:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A4:4B:F6:F8:DE:2C:5D:5A:4B:CD:97:79:80:40:B1:D3:22:9C:AB
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:9e:76:7e:9d:b9:a9:ac:a3:fd:fb:1f:f7:05:ad:ea:0b:
76:c7:7a:fc:1b:e4:b0:f1:06:44:88:38:6f:ed:65:e7:75:27:
27:e0:d5:13:e1:05:4f:fb:6a:37:0e:5f:9d:67:9c:ca:80:5e:
17:a5:ef:3a:d2:72:26:2e:54:be:42:24:41:58:1d:fa:ba:67:
2c:7b:c2:da:fb:1d:0e:3f:09:82:65:3a:e1:0f:a5:79:e1:bb:
7f:1e:9a:72:8e:fe:de:9a:5f:dc:54:14:e9:d8:2d:84:f0:17:
16:e8:bb:8e:f8:5d:a5:54:c7:89:b5:f9:03:76:4f:d3:3c:a7:
df:ae:4b:43:7e:38:c0:10:9c:42:48:73:8f:97:20:62:7c:ed:
1e:23:f2:2a:cd:67:02:9a:21:28:1b:a4:47:fb:e2:63:3d:5e:
ac:32:24:26:cc:e5:62:0d:6f:99:04:44:d2:b3:22:c2:c0:4c:
ba:59:1d:19:ee:30:7c:fe:8d:e7:03:80:c0:a2:aa:91:0e:f1:
9f:9f:ab:94:9b:fb:a9:f8:37:a2:92:f2:af:d6:c4:8d:c9:f9:
2a:50:1c:7c:f3:bd:ea:bb:1d:a4:e1:05:0e:1d:92:68:02:a1:
90:e3:1f:f2:78:3d:d3:bb:80:8f:df:04:28:39:2d:4f:4b:39:
4f:fe:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:36 2026 by rpki-client