
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier: auXLhmRNUxeCoVt+VtClHOBXRGhHpUz86R2eIWaIwMI=
Subject key identifier: B0:BB:6D:07:85:AE:D0:16:ED:AF:97:18:67:4F:A5:39:24:39:7A:8B
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number: 04EF
Signing time: Thu 16 Apr 2026 23:46:45 +0000
Manifest this update: Thu 16 Apr 2026 23:46:44 +0000
Manifest next update: Thu 23 Apr 2026 23:46:44 +0000
Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: GXM2xMheUR+UNJZOv9uBzYWp46Ib5I0bOOc9s00KtVY=)
2: 693FD0A8127911F18FB8754C353D8C67.roa (hash: 2vsh9mlCd8KP8ShN9kNL1OPBZD5VxMSn/p2bSQnyh44=)
3: CF78AD96127811F183C0012F353D8C67.roa (hash: yTs4slfJUp8xAoMRVrm1EmE1KgWXBTMHYKJoI1jT1pE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Validity
Not Before: Apr 16 23:46:44 2026 GMT
Not After : Apr 23 23:46:44 2026 GMT
Subject: CN=69e174e5-e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:39:73:e6:56:5a:1a:c3:73:4f:a9:21:ee:
0e:f2:14:dd:82:86:00:0a:e2:74:89:25:c9:27:c1:
97:bc:06:24:46:c1:b5:13:5c:1f:f1:0b:76:99:d1:
95:b2:b2:6e:17:53:13:be:1c:ab:b1:11:85:85:cc:
b8:84:97:ac:01:57:37:78:f2:eb:04:6c:31:36:4e:
08:5e:ef:53:4e:59:0e:0c:0e:15:3b:75:f2:98:8f:
3c:47:db:e6:03:f0:cb:4c:75:21:e0:6b:05:9c:84:
ab:3e:43:77:20:69:64:dc:37:53:ba:79:c5:5e:c3:
b0:07:4e:c6:c8:9d:69:60:45:26:9f:c1:03:3f:67:
3c:3b:0b:0b:ed:72:f6:80:44:43:a6:cc:a5:65:78:
37:89:a5:fa:aa:52:dd:6c:83:e5:ba:f0:8a:8e:86:
1b:d3:b2:00:75:cc:6d:a6:37:d6:67:98:fc:1c:76:
13:2f:e4:c5:dc:36:a4:5c:fe:d8:ab:64:fc:be:8f:
57:d3:5b:af:2f:28:ee:72:29:3a:7a:1e:8b:be:a3:
c2:e2:42:26:0c:8c:0c:0f:65:35:82:95:15:90:94:
e3:45:9c:5b:06:b0:e9:ba:e1:cc:e6:4f:5d:02:0e:
06:1e:11:ac:3f:07:cc:0a:68:3e:9a:d5:8d:5a:f3:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BB:6D:07:85:AE:D0:16:ED:AF:97:18:67:4F:A5:39:24:39:7A:8B
X509v3 Authority Key Identifier:
keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f7:29:5d:9e:37:89:83:fe:1a:1e:a2:03:2a:cb:23:1d:66:
ad:ba:36:5a:d8:ba:01:12:df:1d:c3:e1:40:68:78:c6:11:31:
2a:eb:3b:d0:c3:e0:c3:57:b7:01:e5:90:71:ed:a9:44:5a:0a:
3b:1b:75:e8:f1:d2:bc:dd:18:33:91:94:2f:2e:99:e7:de:1f:
0a:16:7c:47:6e:e0:66:7f:c7:c7:44:8a:f4:35:7b:6c:4a:8a:
e1:01:ca:32:b3:19:e4:a9:f9:55:cc:84:e6:93:13:4c:f4:3c:
a8:be:77:ba:7d:11:b4:58:ae:99:4b:07:0b:cc:f4:49:65:67:
b7:7a:5a:1a:35:59:e9:9f:bd:09:fd:eb:0b:bb:b8:be:b1:12:
b3:79:d4:4a:e4:b7:02:83:70:8a:16:20:8c:6b:fc:35:c5:92:
52:cc:d8:75:1c:94:0a:cb:4d:aa:b4:d9:24:eb:22:d6:24:ba:
d4:f9:43:b2:60:eb:8c:e4:a2:69:1f:51:dd:35:bb:9d:ca:ef:
0f:3a:32:2a:0d:13:5a:b0:1f:4e:70:ac:7c:c5:1b:9b:c8:c0:
9c:1a:74:0d:b7:a9:f6:d2:5d:01:b6:0a:6f:81:b9:41:1d:3a:
58:bf:f6:b5:3d:44:e9:7e:cd:6a:55:ed:af:55:69:b1:41:c3:
71:41:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:58 2026 by rpki-client