
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier: iVBDVUF+fpTCbYWh2Co4u6xHJSdbycZU3iCPt1Hd2Kc=
Subject key identifier: 0C:E4:08:79:ED:E4:06:58:DC:D9:A3:70:F5:46:12:45:48:1A:2F:17
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial: 052E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number: 050C
Signing time: Fri 12 Jun 2026 23:48:58 +0000
Manifest this update: Fri 12 Jun 2026 23:48:57 +0000
Manifest next update: Fri 19 Jun 2026 23:48:57 +0000
Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: 1htqd9yP1QzuvjTIbHgGZ6Bv5bK34T6Hzed/B7uKKhQ=)
2: 693FD0A8127911F18FB8754C353D8C67.roa (hash: 2vsh9mlCd8KP8ShN9kNL1OPBZD5VxMSn/p2bSQnyh44=)
3: CF78AD96127811F183C0012F353D8C67.roa (hash: yTs4slfJUp8xAoMRVrm1EmE1KgWXBTMHYKJoI1jT1pE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Validity
Not Before: Jun 12 23:48:57 2026 GMT
Not After : Jun 19 23:48:57 2026 GMT
Subject: CN=6a2c9aea-4fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:20:4a:0b:ea:de:52:46:9c:69:7b:13:39:
d5:5a:1b:5e:08:e8:d5:75:42:31:ce:cb:13:95:a3:
d8:0d:04:c6:62:b0:93:1c:f4:5c:be:85:1d:18:91:
12:be:e7:2d:3c:5e:b0:1e:7f:8d:6c:94:3d:3a:16:
92:19:4c:a5:0b:23:6c:92:c8:25:3e:98:8d:fc:5e:
dc:ab:95:4a:1e:a3:00:2c:38:d6:3b:61:6c:3d:77:
96:d3:22:a8:07:ce:ef:75:70:ff:9a:0e:61:77:d4:
9d:89:76:0d:ee:53:91:b7:6d:75:c2:d1:f8:05:e3:
c5:ff:48:ec:fe:87:88:0d:90:79:dd:98:b3:09:de:
69:43:08:61:a2:02:d6:a7:50:00:63:e8:43:b4:d1:
4c:45:b1:35:0e:24:4b:d5:a6:26:77:7d:3a:f0:06:
e5:2d:18:05:bc:6b:b5:7b:3e:eb:bb:85:34:19:c1:
44:37:20:1a:32:62:1a:41:96:47:2b:22:3a:fc:7e:
45:aa:34:e2:2c:03:f6:31:4b:f4:f9:92:e6:50:74:
7e:71:9b:47:fc:db:b1:50:0e:44:03:f5:25:98:9f:
62:21:df:77:93:59:e5:9b:a6:9d:75:be:71:3a:39:
66:59:15:4c:7a:9a:b8:87:8d:c0:e9:37:fc:d6:77:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:08:79:ED:E4:06:58:DC:D9:A3:70:F5:46:12:45:48:1A:2F:17
X509v3 Authority Key Identifier:
keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9b:49:5d:dd:93:68:e1:63:9d:72:0d:18:67:cb:fa:f1:80:
9d:39:01:aa:6c:f8:d9:47:70:06:e3:e8:ae:51:a5:02:64:ed:
ee:44:dd:43:85:9f:fa:39:6f:a3:31:4c:1d:90:67:af:83:c7:
6b:bb:f0:87:63:27:f5:d7:1a:ae:7b:46:a9:98:9e:2f:16:c7:
92:66:ec:0b:db:f7:8c:2c:e1:82:83:ae:30:82:4b:73:ae:57:
d3:04:ff:5a:e7:9e:c5:11:17:4b:fe:18:2a:90:94:3e:bf:7d:
85:85:f8:38:52:f7:9f:ad:84:92:48:48:bb:a9:1b:fa:aa:81:
45:89:29:21:99:cb:d2:b5:6b:98:59:a5:2b:03:9b:ef:58:85:
1e:28:46:53:7b:cd:9a:d3:42:3d:48:76:2b:06:3f:1d:7a:81:
20:2c:c5:20:e7:6e:08:f7:65:19:0e:42:fb:5d:7d:a4:12:c0:
b1:df:0e:e1:e5:d5:a2:c0:dc:e5:06:69:a0:35:ab:27:ca:f1:
14:13:3b:b0:e7:a1:eb:b7:b5:1e:fa:26:11:03:6a:29:99:fd:
06:3a:c8:3c:41:3f:0d:6a:5d:1c:b5:a3:80:2d:27:84:4a:0e:
d6:50:16:70:44:32:ad:fe:e7:c7:2c:84:5f:e9:1c:21:97:42:
f5:7b:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:20:58 2026 by rpki-client