
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier: SH50jpCSjuzFQlDA07iTeYNMxKA504xAVJKVw7N9I5w=
Subject key identifier: 87:1E:67:9C:00:A6:6C:CA:F2:2E:2F:B7:C9:CA:4B:79:54:CF:2C:83
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial: 04EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number: 04D0
Signing time: Sun 01 Mar 2026 00:37:15 +0000
Manifest this update: Sun 01 Mar 2026 00:37:15 +0000
Manifest next update: Sun 08 Mar 2026 00:37:15 +0000
Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: rdS50+9R+yXs/QcCiY5IEzc33XrhBInZXje9CaC3bUA=)
2: CF78AD96127811F183C0012F353D8C67.roa (hash: AbTzGVD0bEfpZ7Btt8GjyA0JNqdo0soee3EuFWocOCk=)
3: 693FD0A8127911F18FB8754C353D8C67.roa (hash: 8NJhQwRq/mmJxUaTekqMp9CIaF94ylr4KB9g2mkuOPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Validity
Not Before: Mar 1 00:37:15 2026 GMT
Not After : Mar 8 00:37:15 2026 GMT
Subject: CN=69a38a3b-8b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:7c:b7:67:54:c3:68:05:8e:f6:8a:b4:f6:
68:27:14:97:d5:40:0a:ed:fc:eb:8f:ae:7b:29:0d:
9e:88:09:65:c4:4f:fa:9d:57:e2:a2:ac:2f:fc:11:
5a:4b:62:67:37:ea:f9:9f:b2:8b:d2:b5:df:57:be:
d7:2d:a7:c9:ab:01:0f:dc:ef:2e:1d:0e:bd:76:55:
9e:ec:63:2b:e8:14:85:40:ff:e5:0d:9b:47:43:25:
73:8a:3c:5c:1d:2e:ab:db:7b:d6:bb:cb:2a:1a:27:
3d:b0:39:97:89:c7:60:d9:19:75:6d:ae:5e:51:2b:
9e:f0:03:cb:c6:0d:97:43:13:01:65:cd:5e:a6:5e:
ea:00:00:17:9c:64:a9:5d:bb:e2:60:c9:f0:23:b8:
58:b9:06:36:80:1f:fc:4f:87:1c:dc:47:5f:2a:7e:
97:55:70:33:2b:f5:a6:17:5f:6e:22:8d:95:0c:00:
e7:c9:8b:3b:26:ad:fd:cb:5a:c5:fa:1b:3b:cd:d2:
08:8d:f2:d9:e1:fb:4a:16:74:4d:6f:cc:28:6c:45:
28:e5:6b:3f:57:69:a3:b3:d9:76:6f:82:ac:e3:5c:
2e:c3:3c:86:f0:0c:e3:f3:40:e9:61:96:b4:2d:4e:
9b:2b:e0:72:a1:a0:18:21:d0:75:96:5d:a0:35:8e:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:67:9C:00:A6:6C:CA:F2:2E:2F:B7:C9:CA:4B:79:54:CF:2C:83
X509v3 Authority Key Identifier:
keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:68:02:a4:a5:cd:91:3b:9b:5b:92:05:68:38:2b:41:5d:db:
d0:4f:62:9a:4c:10:e2:d6:21:2c:52:68:2f:6c:98:64:40:63:
2a:a7:64:ec:9f:f1:ec:0b:5d:35:f7:9f:f6:73:e2:dd:5a:93:
f6:82:06:f2:40:c6:12:f2:a3:86:1a:c0:b6:e6:f9:ba:c8:65:
0b:7b:51:cb:f8:97:40:b4:ab:36:56:12:08:1e:50:51:81:ac:
bd:e9:05:26:41:ef:66:28:dd:59:9a:ab:ca:b2:cd:0d:77:62:
9a:b1:d3:c7:31:02:38:99:f6:14:a2:e3:f2:c6:61:15:d4:15:
87:6e:c3:d4:2e:14:fa:f2:fc:36:3b:cb:1f:fe:98:dd:dd:54:
f3:46:6d:e5:30:01:53:35:7e:39:2d:eb:ee:75:0a:56:8b:46:
9b:8f:24:aa:fd:c6:27:3e:a8:92:86:12:9e:3c:71:26:0e:9b:
84:b3:49:46:ca:aa:b6:3c:98:41:73:52:20:48:e6:ca:53:cf:
de:c7:f7:31:44:e7:77:3f:64:bb:2e:16:10:df:90:2f:36:49:
75:f8:42:57:9c:7f:90:ff:47:fb:1a:12:ce:c8:71:6c:8e:93:
d1:bf:25:f1:3f:79:a3:ae:ca:ec:3c:c9:b3:7b:a0:a0:35:4e:
b7:6b:60:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYwNUIxMTAvBgNVBAUTKDkxMzM4NjkwREVCQTU3OENFNzM4MjE4QTlFMjIwODU0
RDFCNTI3NUYwHhcNMjYwMzAxMDAzNzE1WhcNMjYwMzA4MDAzNzE1WjAYMRYwFAYD
VQQDDA02OWEzOGEzYi04Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGl8t2dUw2gFjvaKtPZoJxSX1UAK7fzrj657KQ2eiAllxE/6nVfioqwv/BFa
S2JnN+r5n7KL0rXfV77XLafJqwEP3O8uHQ69dlWe7GMr6BSFQP/lDZtHQyVzijxc
HS6r23vWu8sqGic9sDmXicdg2Rl1ba5eUSue8APLxg2XQxMBZc1epl7qAAAXnGSp
XbviYMnwI7hYuQY2gB/8T4cc3EdfKn6XVXAzK/WmF19uIo2VDADnyYs7Jq39y1rF
+hs7zdIIjfLZ4ftKFnRNb8wobEUo5Ws/V2mjs9l2b4Ks41wuwzyG8Azj80DpYZa0
LU6bK+ByoaAYIdB1ll2gNY6CjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIceZ5wA
pmzK8i4vt8nKS3lUzyyDMB8GA1UdIwQYMBaAFJEzhpDeuleM5zghip4iCFTRtSdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA1Qi85ODE3RDI3MjY0
Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0em5PQ0dLbmlJSVZORzFK
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tUT0drTjY2VjR6bk9DR0tuaUlJVk5HMUoxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjA1Qi85ODE3RDI3MjY0Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0
em5PQ0dLbmlJSVZORzFKMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJWgCpKXNkTubW5IFaDgrQV3b0E9imkwQ4tYhLFJoL2yYZEBjKqdk7J/x7Atd
Nfef9nPi3VqT9oIG8kDGEvKjhhrAtub5ushlC3tRy/iXQLSrNlYSCB5QUYGsvekF
JkHvZijdWZqryrLNDXdimrHTxzECOJn2FKLj8sZhFdQVh27D1C4U+vL8NjvLH/6Y
3d1U80Zt5TABUzV+OS3r7nUKVotGm48kqv3GJz6okoYSnjxxJg6bhLNJRsqqtjyY
QXNSIEjmylPP3sf3MUTndz9kuy4WEN+QLzZJdfhCV5x/kP9H+xoSzshxbI6T0b8l
8T95o67K7DzJs3ugoDVOt2tgxg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:12 2026 by rpki-client