
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
File: kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json)
Hash identifier: eiHNSKLczwltEKCxWwiXmQ5EquVhjnrQDwSv6i0bnI4=
Subject key identifier: 56:89:30:3C:E6:EB:FE:C9:CB:98:C8:CF:29:BD:2A:3B:9D:89:23:1B
Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Certificate issuer: /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
Manifest number: 0140
Signing time: Sun 01 Mar 2026 06:16:04 +0000
Manifest this update: Sun 01 Mar 2026 06:16:03 +0000
Manifest next update: Sun 08 Mar 2026 06:16:03 +0000
Files and hashes: 1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: xeAfp7wenw5NFqh5xyNPV8yUZolnHfuOMtBpKD5h/C0=)
2: 6B9D491C379A11F0B3AC7740C4F9AE02.roa (hash: RLph3rOI+XvGrIXc+VEb/mig9QwsOBw+jIRI25aGTLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Validity
Not Before: Mar 1 06:16:03 2026 GMT
Not After : Mar 8 06:16:03 2026 GMT
Subject: CN=69a3d9a4-2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:76:fe:5f:66:a3:d1:c5:2f:15:f3:12:7d:
d0:30:d7:66:8a:49:96:9b:dd:52:b5:91:5f:7c:03:
a3:66:c6:15:cd:d1:58:85:f4:04:d3:cf:c6:8b:7e:
5d:d3:40:f7:13:a9:a7:07:cc:e6:ea:23:83:97:40:
1b:9d:53:a5:60:b0:8d:54:47:00:84:e4:e2:85:27:
23:b1:a2:be:00:65:fe:24:da:1a:53:ec:d8:60:52:
c3:66:87:e7:97:09:ef:9d:ea:b8:0b:bf:14:a9:af:
dd:40:bd:cc:1d:9c:30:ff:8a:b3:cd:99:6f:44:d2:
4f:c1:eb:0a:fe:26:57:e0:3b:93:09:b4:5e:bb:6b:
34:af:28:10:b7:0f:9e:c5:d4:7e:5c:b4:6f:4a:a5:
da:1c:9d:68:3b:41:be:59:27:9c:6a:1e:56:da:06:
a9:10:71:44:3b:e9:e8:c1:23:39:a3:b4:9c:10:39:
3e:8c:e2:95:11:13:9a:c2:43:0b:8a:a6:93:9c:22:
45:73:60:80:e4:ba:7f:2e:b5:2a:a0:88:93:06:9a:
d0:1b:2e:ab:5c:36:66:64:8d:e7:55:29:2a:a4:09:
65:03:70:43:51:71:c6:e9:b3:69:e7:da:81:0f:03:
0e:57:ed:9f:cc:93:80:d1:ac:31:18:e2:c2:84:e9:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:30:3C:E6:EB:FE:C9:CB:98:C8:CF:29:BD:2A:3B:9D:89:23:1B
X509v3 Authority Key Identifier:
keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:54:f2:a7:26:f3:04:e1:b1:18:03:f6:c6:1f:83:6a:41:
27:3f:7a:04:67:bb:bc:6f:88:f6:c4:7a:f3:2e:a0:72:7d:ec:
16:dd:d3:e9:39:01:9e:53:c6:1c:e1:88:3b:dd:48:11:13:16:
3e:3f:fa:87:44:0c:d9:02:08:0a:6e:73:5c:64:60:cc:b7:84:
00:dd:e9:35:b4:81:ba:c1:51:5b:df:a4:1b:dc:68:6b:c7:8a:
d4:2c:a7:fd:ad:2b:c3:69:0a:36:52:17:dd:5d:04:3c:fc:d1:
a2:be:7c:8f:c3:cb:1b:59:6c:d5:31:7c:15:65:1d:51:2f:52:
dc:d2:56:46:6a:6a:f3:87:2a:ce:e5:33:f5:66:54:90:24:03:
96:bb:62:e0:04:2f:00:18:ce:93:f9:1b:a6:ab:7b:99:c9:af:
21:6a:4f:cf:81:38:94:82:d0:bd:17:d3:5d:84:ca:03:a2:b7:
bc:8c:47:1a:aa:1b:ef:90:26:3c:27:a0:3b:f5:41:af:b4:86:
41:5c:39:83:a9:14:11:87:3a:74:41:23:e5:9a:f8:6a:4a:de:
20:ea:6b:6c:42:a8:15:32:99:66:e4:7b:9e:e5:29:4a:06:f5:
50:51:63:e7:41:63:3c:3c:5d:0f:15:84:1e:a5:8c:9f:62:df:
f3:a7:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:51 2026 by rpki-client