
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier: CRKx5iOUKSCVueQ20C2d1aagpJ6jl/WA3UlYdY9FAzM=
Subject key identifier: F0:D6:84:55:DF:AA:BE:65:15:42:4A:C7:1C:43:B7:66:5E:D1:57:D7
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number: 0243
Signing time: Sat 13 Jun 2026 02:35:34 +0000
Manifest this update: Sat 13 Jun 2026 02:35:33 +0000
Manifest next update: Sat 20 Jun 2026 02:35:33 +0000
Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: IxtnSh/Qzv9y9ZjO3CYqIeITXDi9cxB9KSBK+Hg0CoI=)
2: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=)
3: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=)
4: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Jun 13 02:35:33 2026 GMT
Not After : Jun 20 02:35:33 2026 GMT
Subject: CN=6a2cc1f5-c702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:52:93:2e:58:73:11:73:ef:ba:06:f6:7f:
3d:e7:4d:40:23:9a:aa:da:80:e0:a6:18:0e:67:6a:
d9:6a:33:73:a5:17:87:9b:98:f2:8e:27:da:5f:c2:
6d:16:06:51:ec:6f:c4:9d:e7:71:6d:50:73:cb:9b:
8e:3c:1d:c1:eb:a0:95:71:ea:11:77:65:f7:ef:f3:
41:cf:3b:75:85:74:45:f9:3a:49:18:3c:2a:64:32:
fb:bc:4a:2c:84:f5:47:32:a3:92:54:1a:8e:e6:30:
39:11:81:ca:9a:ac:b7:df:07:f4:fb:07:e7:8f:17:
21:57:f9:ef:6d:3e:3a:c4:0e:e6:0b:1d:62:b4:61:
3f:a0:b3:ac:a6:58:9c:7e:d8:78:e5:e3:52:98:b0:
f6:d9:29:bb:61:c5:f3:65:d9:e2:48:4c:16:d0:e3:
32:61:f1:11:fe:12:df:bb:cc:64:36:e6:32:bb:30:
01:6f:59:de:1d:24:54:ee:60:c4:e3:64:59:1a:83:
d3:b5:fd:18:de:8d:e7:3a:e7:b4:80:f4:15:af:f5:
48:8d:da:4a:f5:56:4c:37:ec:4d:e6:d7:ae:b3:91:
47:95:17:62:e4:76:25:51:97:7f:73:db:5c:c8:69:
2a:a9:83:e1:1c:e6:1f:3a:80:0f:6a:ac:b5:93:a1:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:84:55:DF:AA:BE:65:15:42:4A:C7:1C:43:B7:66:5E:D1:57:D7
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:61:c1:57:f6:54:00:2b:25:af:5f:33:60:f9:c8:0a:15:
40:0f:81:82:bd:bc:2e:4c:fe:4f:5f:8a:db:8c:d7:0d:55:58:
d2:cd:23:be:ef:43:3e:97:c4:c0:16:8a:bc:21:25:a5:15:7f:
b2:b4:1b:a0:44:cd:f3:d7:6d:30:79:be:d6:16:c3:88:57:4a:
ad:42:6e:fc:5a:31:71:ad:5f:28:71:59:4a:d5:0a:0f:93:b5:
c5:70:2f:fe:ef:aa:b1:fb:76:f7:91:d9:55:ff:2b:30:cb:af:
e9:c5:62:46:2b:04:e2:7f:eb:29:d8:df:f3:d3:b1:9d:08:ea:
29:52:90:7e:9f:59:59:c4:4b:a1:dd:37:10:0f:f0:97:a1:c7:
78:2a:a0:ec:fd:a7:59:f4:b6:37:b6:08:f6:c5:09:05:96:e9:
f4:ed:2e:19:14:a9:49:ed:b1:af:17:ec:35:97:c0:9d:04:39:
ca:d1:81:e9:81:7c:14:ba:e0:ee:dd:d8:8d:3f:81:5c:94:fc:
6f:0a:f2:2f:cf:2b:56:04:9f:cd:9f:27:81:41:24:23:f7:5f:
08:86:05:29:60:15:dd:a6:48:69:09:94:75:12:08:6d:c1:79:
d2:19:10:89:56:f0:c4:65:dc:03:43:b0:62:33:0a:ab:3b:22:
7f:3a:aa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:31:21 2026 by rpki-client