
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier: NTPLol1+z1QGkzojLR4VPJqt24aZ7C3p9RWBAM1VLBs=
Subject key identifier: 00:49:6E:01:AA:71:74:11:40:56:51:2B:DA:9F:2A:94:4D:0A:EA:A5
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number: 0276
Signing time: Mon 21 Sep 2026 02:07:06 +0000
Manifest this update: Mon 21 Sep 2026 02:07:06 +0000
Manifest next update: Mon 28 Sep 2026 02:07:06 +0000
Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: maYe8F8tFOMjLeKFOjxjZYz9xWl7neKbCZBTuuWjJ3I=)
2: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=)
3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=)
4: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Sep 21 02:07:06 2026 GMT
Not After : Sep 28 02:07:06 2026 GMT
Subject: CN=6ab0914a-895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:8e:d6:35:c6:c5:af:dc:a1:ae:d7:07:69:
87:80:ad:74:26:92:84:f5:5f:c8:df:09:f6:da:b4:
0e:a4:c8:ca:a9:10:15:c7:a8:52:4b:98:58:08:0f:
b4:aa:0f:0c:93:a9:12:04:9e:9a:8b:e2:e9:bb:13:
b2:59:b4:82:65:0d:d0:ea:2a:ca:8a:2f:81:07:43:
36:94:e2:f7:a1:46:92:30:eb:17:05:2d:f8:a9:1a:
af:13:0e:a5:75:07:0d:2a:2d:48:43:5b:d7:6d:56:
92:23:58:2e:c0:fc:d5:66:90:e3:c1:d4:45:95:00:
d7:a9:4f:eb:06:33:c5:42:be:bf:9f:4c:70:91:48:
c2:25:04:d7:b1:1e:66:fc:13:27:d1:1d:a5:f7:e9:
45:6a:00:ef:03:f3:ec:4f:a6:f0:97:80:13:a0:e2:
d0:42:72:ae:7e:ce:91:78:b6:93:74:bb:a7:72:17:
cd:f5:35:38:99:bc:c3:1c:c4:f0:d2:d7:aa:66:4d:
6a:b1:69:ff:63:77:68:cd:15:81:b5:bd:5d:ab:24:
df:18:cd:37:ea:5e:15:2d:b5:89:e5:7f:88:95:b4:
d3:aa:00:b7:aa:cb:55:cd:6e:a1:1a:ae:47:e5:94:
02:a4:9b:48:c9:0f:12:79:a8:93:80:30:ae:d7:8c:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:49:6E:01:AA:71:74:11:40:56:51:2B:DA:9F:2A:94:4D:0A:EA:A5
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:b0:79:5d:3c:4a:58:58:5e:05:fc:76:ac:c2:23:8e:34:
0b:01:a7:16:af:bf:8f:55:9a:b8:ef:94:87:2a:39:9c:b8:7c:
15:b3:25:23:90:bb:c4:47:e4:36:f7:ad:19:f2:49:8f:53:3b:
e9:4a:9d:43:05:1c:a9:2c:be:85:1b:69:f0:ad:29:34:c3:25:
d4:ce:e7:3c:11:08:a9:3a:b9:f7:46:6d:d7:7d:64:2d:26:7f:
b5:cd:c2:9b:df:5c:98:9d:a9:48:ae:41:04:b0:7f:41:4a:4c:
32:09:17:17:6e:91:a1:8e:d2:9d:7e:c2:0d:59:22:10:9b:1c:
d2:79:47:65:fc:fc:5e:76:df:2f:70:9e:ef:dd:ab:88:61:fc:
21:6c:e9:79:24:ff:aa:cf:ce:f8:a3:0f:dd:67:bb:b7:52:92:
b3:5a:fc:bd:13:75:ab:2f:f4:fb:33:e1:60:9f:e8:a6:b2:b5:
47:54:1a:05:0d:5f:46:db:71:38:3e:3a:ba:cd:c8:4e:c3:1d:
7b:db:97:1f:6b:bc:9d:c9:44:ed:d4:7c:ac:b5:32:2f:0c:13:
a0:ff:a5:2e:c2:f3:79:ef:be:a9:24:34:01:be:c4:77:f9:92:
4f:74:2b:70:3a:df:08:12:50:97:0e:03:c7:c4:a9:38:cd:42:
94:2b:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:03:06 2026 by rpki-client