
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier: Kv+uG5TxMROCdsauhMz0QFW/SgeV5Zlxbqj2PUSghug=
Subject key identifier: 7E:B3:2C:AE:F2:4A:AF:2A:CD:DE:FE:93:A0:D8:56:54:E2:55:FD:7E
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number: 017F
Signing time: Mon 27 Jul 2026 06:30:35 +0000
Manifest this update: Mon 27 Jul 2026 06:30:35 +0000
Manifest next update: Mon 03 Aug 2026 06:30:35 +0000
Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: 5QKdhkWcr33Dz5is2ZFwicnAkGt4Rfv/Q/KVkn52hX4=)
2: AAF88862D51811F0B469126CC4F9AE02.roa (hash: TL/EtRu22ONIBQU9AjMsDMVh2O5yUU42eXjpY7kgULg=)
3: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: TDlLh34Bo1Qa+MNIEkMopEk/3BJaO3P1cNy38YBcx/A=)
4: AB61CD86D51811F09422126CC4F9AE02.roa (hash: TLLdIsk74f1u3haWZpgZc348xyx6vBubsic7GeU/I8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Validity
Not Before: Jul 27 06:30:35 2026 GMT
Not After : Aug 3 06:30:35 2026 GMT
Subject: CN=6a66fb0b-b23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:56:e4:29:52:07:82:b1:ed:49:23:e5:41:
84:f8:f6:cf:9a:de:45:d4:ef:f0:88:ce:b8:0d:3f:
f2:40:66:fa:f0:97:7d:d3:88:e4:f9:f0:50:af:1f:
08:e0:e9:11:2e:20:be:84:5a:4c:ae:81:34:71:0f:
7b:ff:a5:85:75:ec:61:7c:ae:e9:ba:ae:cb:f6:27:
d0:28:16:32:e5:70:3a:32:3b:d4:32:04:73:09:32:
ce:01:3a:b9:e6:86:4f:62:76:b5:5d:4d:a1:ac:40:
a3:83:04:9e:f0:e8:e6:b9:75:7f:68:f9:92:2c:77:
08:c9:18:a2:fa:cf:58:d3:d5:98:70:aa:34:df:86:
c4:de:cf:c9:43:ae:c0:6d:90:71:6c:19:1e:25:fa:
85:c1:62:33:77:79:2d:64:df:da:50:1c:92:e6:76:
ff:d4:a0:0f:78:d1:10:3f:65:d7:c0:51:92:46:a3:
26:55:3a:52:9e:e8:2a:17:98:a1:d5:31:af:0c:48:
78:9a:13:03:42:48:f4:1e:e9:de:ff:12:67:17:9e:
51:fd:ea:dc:d3:97:b2:a4:a3:5b:29:de:be:8c:ab:
93:b5:5c:92:59:2d:36:c2:4f:d2:2d:0b:17:52:b3:
cb:de:ed:bf:87:c7:f4:3e:e2:b7:b9:e0:7f:3d:33:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B3:2C:AE:F2:4A:AF:2A:CD:DE:FE:93:A0:D8:56:54:E2:55:FD:7E
X509v3 Authority Key Identifier:
keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2e:d6:d3:20:7d:b1:1c:2f:32:f8:e8:a1:78:7d:31:aa:f1:
72:d9:c3:32:59:f6:be:d9:11:4f:c6:80:60:53:4e:c1:af:30:
3e:12:1e:10:c6:c1:87:7c:c2:5e:3f:ae:ef:e4:d5:af:c9:26:
e0:ef:72:32:5d:b9:56:8b:1c:2d:b7:93:70:b9:db:a7:6c:60:
ff:65:ff:d1:61:36:29:4f:f6:59:d0:de:ac:5b:c6:70:47:09:
47:53:46:c2:7d:32:ff:3c:60:db:0a:0c:93:af:9d:46:0b:ba:
a4:6b:9d:74:f5:30:17:4d:e7:29:27:93:b1:cb:27:6b:59:b1:
84:fb:f0:13:06:47:f8:33:0c:5d:59:a8:61:98:f2:2c:3e:ff:
e5:d5:23:90:80:cd:b1:37:90:35:89:2f:72:7c:42:4a:c2:2e:
46:41:bd:f4:c1:25:a0:7f:3b:50:08:60:eb:a3:df:78:f8:a0:
8e:cb:8e:42:59:85:c9:c5:27:82:28:20:76:7a:58:93:af:03:
ef:a0:89:65:bf:34:eb:cf:d6:0e:2f:84:89:eb:99:fe:0e:b7:
46:05:70:2b:c8:cb:1b:ff:ca:70:4a:3d:73:32:2b:b3:34:44:
1a:29:ab:96:bd:4a:8a:af:45:55:84:ca:b4:2c:88:db:08:28:
e2:c8:f7:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy
MURCMzRCMDAwHhcNMjYwNzI3MDYzMDM1WhcNMjYwODAzMDYzMDM1WjAYMRYwFAYD
VQQDEw02YTY2ZmIwYi1iMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Z9W5ClSB4Kx7Ukj5UGE+PbPmt5F1O/wiM64DT/yQGb68Jd904jk+fBQrx8I
4OkRLiC+hFpMroE0cQ97/6WFdexhfK7puq7L9ifQKBYy5XA6MjvUMgRzCTLOATq5
5oZPYna1XU2hrECjgwSe8OjmuXV/aPmSLHcIyRii+s9Y09WYcKo034bE3s/JQ67A
bZBxbBkeJfqFwWIzd3ktZN/aUByS5nb/1KAPeNEQP2XXwFGSRqMmVTpSnugqF5ih
1TGvDEh4mhMDQkj0Hune/xJnF55R/erc05eypKNbKd6+jKuTtVySWS02wk/SLQsX
UrPL3u2/h8f0PuK3ueB/PTPPqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6zLK7y
Sq8qzd7+k6DYVlTiVf1+MB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5
N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTY1QS82NkU2RkUzNjQ5N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJE
SHU1Mm5Wc1RuakFoMnpTd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOy7W0yB9sRwvMvjooXh9MarxctnDMln2vtkRT8aAYFNOwa8wPhIeEMbBh3zC
Xj+u7+TVr8km4O9yMl25VoscLbeTcLnbp2xg/2X/0WE2KU/2WdDerFvGcEcJR1NG
wn0y/zxg2woMk6+dRgu6pGuddPUwF03nKSeTscsna1mxhPvwEwZH+DMMXVmoYZjy
LD7/5dUjkIDNsTeQNYkvcnxCSsIuRkG99MEloH87UAhg66PfePigjsuOQlmFycUn
giggdnpYk68D76CJZb8068/WDi+EieuZ/g63RgVwK8jLG//KcEo9czIrszREGimr
lr1Kiq9FVYTKtCyI2wgo4sj3Wg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:45 2026 by rpki-client