
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier: 2qZSx7TzCTrUsP0onoRWDy9m8Q3LXRcZ3QQKYsXs4WA=
Subject key identifier: 1E:F0:EB:B7:B5:25:FA:85:8A:0C:74:E1:97:4D:33:11:8E:21:EC:6E
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number: 0541
Signing time: Thu 24 Sep 2026 23:27:34 +0000
Manifest this update: Thu 24 Sep 2026 23:27:34 +0000
Manifest next update: Thu 01 Oct 2026 23:27:34 +0000
Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: vEenscO91zjurlzZOYjTbtqbSwPcivouWeMVbbAZIxY=)
2: 693FD0A8127911F18FB8754C353D8C67.roa (hash: 2vsh9mlCd8KP8ShN9kNL1OPBZD5VxMSn/p2bSQnyh44=)
3: CF78AD96127811F183C0012F353D8C67.roa (hash: yTs4slfJUp8xAoMRVrm1EmE1KgWXBTMHYKJoI1jT1pE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Validity
Not Before: Sep 24 23:27:34 2026 GMT
Not After : Oct 1 23:27:34 2026 GMT
Subject: CN=6ab5b1e6-6f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:30:e7:cf:0f:47:0a:2a:e7:7e:fb:64:7d:
24:2d:3c:f0:3a:6f:02:dc:9b:e3:ae:de:a3:39:b6:
c3:1a:c9:b1:b8:04:01:0d:94:f9:4e:81:47:5a:d4:
0c:bf:f5:c8:10:2a:53:56:ff:4c:55:f1:e9:14:1f:
1a:42:04:ae:c1:0f:86:c4:dc:53:bc:87:3d:df:fe:
79:8c:83:49:05:ba:1b:3f:0b:29:8e:c0:f0:9f:2e:
6b:24:67:dc:cf:e8:d5:cc:e5:5f:3f:bf:ac:f5:f4:
a6:47:ba:f1:9c:b3:e5:6d:1b:93:e1:cc:5e:22:04:
3f:e4:ce:b9:87:03:e3:d9:24:32:fe:f3:d0:12:bf:
68:d8:38:ef:22:ce:ca:90:51:44:70:62:7b:28:51:
2d:24:13:e0:7f:fb:9e:44:71:9b:45:9b:d3:fe:fd:
71:12:a1:c3:60:2d:34:30:59:fc:3c:dd:8a:22:f7:
42:87:16:49:a2:da:ca:09:e1:b4:92:e7:c6:99:c5:
06:95:d7:eb:82:9c:bb:28:01:ff:4b:5f:b1:ca:d2:
a8:74:70:2a:11:20:e3:85:15:ae:10:67:13:3f:f4:
f3:df:c2:ec:ac:64:22:5e:f9:db:c3:9c:23:65:c2:
2a:7a:c5:45:2d:b3:c3:e9:6c:d8:ea:c6:31:90:74:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:EB:B7:B5:25:FA:85:8A:0C:74:E1:97:4D:33:11:8E:21:EC:6E
X509v3 Authority Key Identifier:
keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ad:7f:05:f1:69:1b:19:5d:3f:81:12:9f:5a:85:c4:0e:33:
03:76:30:4c:e7:fc:4c:9a:3c:75:af:52:bf:6f:22:b8:56:a5:
e8:66:e4:80:e1:b6:a0:06:a1:49:a5:f9:b8:f2:32:91:42:11:
cb:17:a5:03:31:0a:c7:a7:ce:52:41:6a:82:86:6c:00:d4:76:
56:cb:a6:b5:d5:37:d4:ac:ea:f8:ea:5d:d0:0d:aa:24:d7:5e:
96:32:af:ff:f9:75:6d:4e:c9:0b:74:c0:38:a1:a8:87:a1:aa:
11:c4:94:e9:6c:dc:09:9d:53:58:aa:42:50:a1:b5:8f:7e:a9:
71:0d:b2:f4:a5:a1:5a:a0:42:14:78:ba:8d:73:7b:4b:14:a5:
ea:0f:d5:cb:a7:ec:00:bd:45:3f:b9:6d:5f:84:dc:48:3a:c0:
a5:dc:a6:7c:3b:5c:d1:68:41:f8:15:ae:35:1b:67:1c:31:ad:
9e:f7:d8:c8:f3:68:02:09:9a:4c:b5:61:88:2b:4c:e1:bd:a1:
f3:f1:52:97:46:7d:d4:98:cd:49:b1:20:5e:56:04:64:1d:c0:
c9:0b:16:ae:c4:63:b9:b9:53:89:d9:22:d8:13:89:29:f8:9f:
16:a0:4f:b5:8e:6c:b8:a0:85:b8:2c:ae:aa:c1:1f:bd:7c:10:
d1:9d:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:01:31 2026 by rpki-client