
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier: hAFnN53mILOQz1j4CklWU3boKH3SB3C7bz8cUvuCpdk=
Subject key identifier: DA:CD:71:28:8D:3E:68:4D:BF:F1:40:F6:E3:A4:5D:C0:36:B2:A0:09
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number: 01DF
Signing time: Wed 29 Jul 2026 04:45:29 +0000
Manifest this update: Wed 29 Jul 2026 04:45:29 +0000
Manifest next update: Wed 05 Aug 2026 04:45:29 +0000
Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: N5f6E/+inbGWPX7YUDbG/loe/DHOa98Nk9ZGLsPe/nQ=)
2: DBFEC056388311F1A78BA8A0BB833773.roa (hash: 8FulhLXNLKQwINRNSnlJESeszYJamVSrQm9O3LcSEQs=)
3: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: h3tpppmL1hT5EM3m6sk6xUTtg20d/wirnkJ2RqVRrs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Validity
Not Before: Jul 29 04:45:29 2026 GMT
Not After : Aug 5 04:45:29 2026 GMT
Subject: CN=6a698569-b5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:ae:5e:86:bb:99:9a:a6:36:a4:0e:aa:77:
8c:39:76:0a:e8:71:8b:fb:bd:76:36:66:15:69:1c:
97:7f:3b:ac:26:e3:e6:08:c0:cb:8a:3a:56:25:5e:
e8:19:e6:8a:27:61:ae:ff:2d:cc:18:e1:2a:e3:2a:
73:65:1d:69:2e:48:0e:0a:50:98:b7:62:49:7e:54:
96:b1:ee:e6:ba:22:0c:0b:0c:7a:a2:76:55:a0:2e:
fb:bf:11:f7:b9:5e:e0:7b:38:c4:6e:89:39:c2:38:
c0:96:44:5e:42:10:bb:7f:fa:72:1c:95:e4:ab:e2:
98:77:d2:b8:79:a5:d7:bf:0b:72:fc:d6:8f:1c:ef:
cb:a2:3b:5b:ac:5a:9a:50:08:9f:63:76:9b:26:d8:
99:78:df:c3:d3:83:53:d2:a0:75:5c:43:81:1f:2d:
d2:89:be:74:c9:74:0c:26:b2:36:44:03:ce:11:c8:
0e:ac:f5:68:41:26:ac:ae:5f:e5:ec:f6:8a:af:e4:
64:97:f0:3d:ab:19:83:36:d6:4f:8b:38:a5:84:4f:
0f:b0:4a:a5:65:0d:de:2b:2d:9e:5b:47:79:a4:0c:
bb:43:c9:53:09:64:65:a1:25:41:cb:7e:b9:d2:2f:
e1:58:31:a6:27:70:97:01:df:23:12:9a:a0:44:ae:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:71:28:8D:3E:68:4D:BF:F1:40:F6:E3:A4:5D:C0:36:B2:A0:09
X509v3 Authority Key Identifier:
keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:94:38:b7:b7:e1:55:fc:82:87:34:0d:68:22:e2:c8:26:ab:
3e:62:5e:ad:d0:be:90:4c:21:fb:fe:f6:29:52:b4:c6:45:48:
ef:77:21:02:77:20:48:c6:5e:14:1d:6b:29:0e:b4:de:e6:aa:
ee:b2:28:64:f0:67:43:46:33:1d:68:2a:82:33:86:93:0c:1b:
7c:90:1d:e6:84:3f:44:38:29:60:f1:e8:6d:d1:16:1e:4e:e1:
c0:20:34:3c:78:81:77:7c:e8:c2:a4:59:be:fd:bd:0e:07:8b:
e3:02:8e:e3:aa:89:44:f5:fc:cf:3d:52:42:5e:db:29:3b:52:
9a:99:ba:e9:b9:4d:4d:4e:2b:96:36:dc:30:34:95:6d:a8:2e:
d1:af:87:73:81:d6:74:5e:c7:b7:22:85:51:90:48:f9:b9:cc:
9f:87:ca:70:fb:46:e2:93:5c:55:ce:88:da:24:3c:1a:f8:b9:
99:a4:63:1a:12:92:cf:44:e0:21:dd:a9:f1:a5:9b:4e:70:0e:
9f:cc:8c:2b:99:e4:f9:f5:70:2b:db:8e:0b:63:ae:b3:63:b3:
08:ac:84:07:e7:61:42:38:a7:a5:43:0a:76:1c:1d:f7:f6:2a:
c8:09:4f:9f:78:5a:39:10:a1:00:9b:0e:f4:a6:b8:2d:e3:19:
9f:d7:f0:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG
MjdDRDIyOTgwHhcNMjYwNzI5MDQ0NTI5WhcNMjYwODA1MDQ0NTI5WjAYMRYwFAYD
VQQDEw02YTY5ODU2OS1iNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnquXoa7mZqmNqQOqneMOXYK6HGL+712NmYVaRyXfzusJuPmCMDLijpWJV7o
GeaKJ2Gu/y3MGOEq4ypzZR1pLkgOClCYt2JJflSWse7muiIMCwx6onZVoC77vxH3
uV7gezjEbok5wjjAlkReQhC7f/pyHJXkq+KYd9K4eaXXvwty/NaPHO/LojtbrFqa
UAifY3abJtiZeN/D04NT0qB1XEOBHy3Sib50yXQMJrI2RAPOEcgOrPVoQSasrl/l
7PaKr+Rkl/A9qxmDNtZPizilhE8PsEqlZQ3eKy2eW0d5pAy7Q8lTCWRloSVBy365
0i/hWDGmJ3CXAd8jEpqgRK7jIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrNcSiN
PmhNv/FA9uOkXcA2sqAJMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3
M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu
WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfpQ4t7fhVfyChzQNaCLiyCarPmJerdC+kEwh+/72KVK0xkVI73chAncgSMZe
FB1rKQ603uaq7rIoZPBnQ0YzHWgqgjOGkwwbfJAd5oQ/RDgpYPHobdEWHk7hwCA0
PHiBd3zowqRZvv29DgeL4wKO46qJRPX8zz1SQl7bKTtSmpm66blNTU4rljbcMDSV
bagu0a+Hc4HWdF7HtyKFUZBI+bnMn4fKcPtG4pNcVc6I2iQ8Gvi5maRjGhKSz0Tg
Id2p8aWbTnAOn8yMK5nk+fVwK9uOC2Ous2OzCKyEB+dhQjinpUMKdhwd9/YqyAlP
n3haORChAJsO9Ka4LeMZn9fwOQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:54:49 2026 by rpki-client