
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json)
Hash identifier: xedOyDkrDZ53EUkPRGJVoAcUcZpWVT0DJMJ9ahRWbgs=
Subject key identifier: 49:95:3B:79:FD:4C:BF:EF:4D:FD:36:69:3C:FA:F3:37:69:18:20:C3
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
Manifest number: 01AE
Signing time: Sat 13 Jun 2026 04:19:05 +0000
Manifest this update: Sat 13 Jun 2026 04:19:05 +0000
Manifest next update: Sat 20 Jun 2026 04:19:05 +0000
Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: HjaPJvJjCpcspprlWQCjCb4y9DK1xfuPJThEqFsn3LQ=)
2: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: tZoqe0Wr8WxlyxJlU9JnoVv0Dbj1abCtUlpInyE8avA=)
3: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: NXPm9MxFlazPxhF1ZkfK5w9U7zw1CF9xskWoFgFi9BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: Jun 13 04:19:05 2026 GMT
Not After : Jun 20 04:19:05 2026 GMT
Subject: CN=6a2cda39-6f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:a3:ca:12:4f:f5:ef:a2:cf:e9:94:30:fa:
03:9e:72:59:f1:4f:cf:fb:84:3a:a8:41:26:cf:2c:
aa:08:77:cc:45:d8:54:ea:52:f6:44:c8:fe:19:1e:
40:c5:54:ed:62:5b:52:55:e9:ce:a2:38:b8:44:ff:
fa:55:be:6a:5f:fe:18:42:c1:03:03:04:be:b1:5d:
46:e3:de:43:10:80:2e:98:90:c7:0d:ac:1d:e5:51:
54:5f:d1:ba:25:19:90:5c:ea:b0:41:02:e2:b4:ce:
f0:fb:8e:32:78:0e:6e:04:38:48:67:2c:21:79:ed:
0c:5d:6d:6b:96:17:20:cc:13:0b:e1:f2:12:16:cc:
59:18:7a:6d:e9:e3:5e:cd:82:5e:3b:a0:fc:7e:4b:
ff:2f:67:be:06:f5:57:c8:18:59:56:6b:fd:27:8e:
34:1f:40:f2:57:42:df:fc:47:9c:2b:75:ba:cb:b0:
bf:11:56:f6:9d:79:15:55:1c:0f:be:fb:28:b6:98:
a3:03:8a:81:b3:e5:ab:cd:20:bf:f7:e1:d3:fb:25:
ac:a7:cc:46:ea:19:da:56:68:2c:f5:1c:32:0c:8e:
d4:e4:45:5a:7a:8d:fb:8e:bf:3b:a5:6e:d1:29:fa:
c4:9f:43:52:28:00:a0:10:5d:51:cb:80:cf:77:be:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:3B:79:FD:4C:BF:EF:4D:FD:36:69:3C:FA:F3:37:69:18:20:C3
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:d9:0a:fc:a4:08:b4:4c:f8:f7:e8:01:63:11:7b:c2:bb:95:
0c:8a:ba:77:7e:96:16:68:79:e0:50:ab:09:40:68:6b:4b:47:
1c:72:cb:ad:3d:c7:cd:5f:87:92:62:7c:63:29:9f:b2:0e:7b:
be:ad:de:a6:1e:36:44:aa:5c:d7:44:5c:3c:74:4b:aa:a6:d2:
6d:6f:72:f7:51:33:30:ae:ee:21:ea:f8:dd:14:92:f4:1f:06:
c1:ea:3f:d8:5c:40:3c:08:db:7f:cc:61:13:87:08:a5:d3:28:
94:e7:fd:cd:89:f5:9f:b1:82:63:6e:12:46:14:6f:ad:af:ab:
fe:2b:2f:d6:13:70:bf:b8:f7:86:ff:83:5c:07:d1:61:7b:1b:
36:e2:f3:c5:4d:99:b8:97:f9:a6:e5:a9:23:cc:73:a9:2d:5f:
15:99:5f:da:f4:54:a8:47:80:91:5d:17:72:aa:43:da:80:79:
1d:53:52:f4:b8:cc:7f:8f:24:a5:17:ca:43:f3:d7:a3:37:75:
07:0a:48:1b:c8:07:f6:0d:a4:e9:b3:3b:8f:1f:a7:7f:24:71:
d3:70:32:52:45:df:fc:6f:a2:81:62:e2:8e:7c:61:5d:96:56:
b2:54:02:99:97:d5:2d:e5:9a:2f:38:11:c4:84:74:a3:33:62:
2f:fc:3c:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy
MTFEQkUwODMwHhcNMjYwNjEzMDQxOTA1WhcNMjYwNjIwMDQxOTA1WjAYMRYwFAYD
VQQDEw02YTJjZGEzOS02ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgz6jyhJP9e+iz+mUMPoDnnJZ8U/P+4Q6qEEmzyyqCHfMRdhU6lL2RMj+GR5A
xVTtYltSVenOoji4RP/6Vb5qX/4YQsEDAwS+sV1G495DEIAumJDHDawd5VFUX9G6
JRmQXOqwQQLitM7w+44yeA5uBDhIZywhee0MXW1rlhcgzBML4fISFsxZGHpt6eNe
zYJeO6D8fkv/L2e+BvVXyBhZVmv9J440H0DyV0Lf/EecK3W6y7C/EVb2nXkVVRwP
vvsotpijA4qBs+WrzSC/9+HT+yWsp8xG6hnaVmgs9RwyDI7U5EVaeo37jr87pW7R
KfrEn0NSKACgEF1Ry4DPd76AjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmVO3n9
TL/vTf02aTz68zdpGCDDMB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5
QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL
TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOdkK/KQItEz49+gBYxF7wruVDIq6d36WFmh54FCrCUBoa0tHHHLLrT3HzV+H
kmJ8Yymfsg57vq3eph42RKpc10RcPHRLqqbSbW9y91EzMK7uIer43RSS9B8Gweo/
2FxAPAjbf8xhE4cIpdMolOf9zYn1n7GCY24SRhRvra+r/isv1hNwv7j3hv+DXAfR
YXsbNuLzxU2ZuJf5puWpI8xzqS1fFZlf2vRUqEeAkV0XcqpD2oB5HVNS9LjMf48k
pRfKQ/PXozd1BwpIG8gH9g2k6bM7jx+nfyRx03AyUkXf/G+igWLijnxhXZZWslQC
mZfVLeWaLzgRxIR0ozNiL/w8qg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:45 2026 by rpki-client