
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier: IGl1jOnMZNdMYDmZdNS1FrYm7SBMWhXS+5bg4srRuuU=
Subject key identifier: D8:2E:81:3D:3A:D3:56:8F:5F:E2:91:72:1E:33:AF:82:19:8D:D7:11
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number: 01A5
Signing time: Sun 05 Apr 2026 03:41:01 +0000
Manifest this update: Sun 05 Apr 2026 03:41:01 +0000
Manifest next update: Sun 12 Apr 2026 03:41:01 +0000
Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: Iy0jkL2NNUabJ5krv0OqO1tHjKRKrpBCiNt04vbVLyo=)
2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: h3tpppmL1hT5EM3m6sk6xUTtg20d/wirnkJ2RqVRrs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Validity
Not Before: Apr 5 03:41:01 2026 GMT
Not After : Apr 12 03:41:01 2026 GMT
Subject: CN=69d1d9cd-5a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:15:fa:26:68:9c:1b:17:e8:c2:60:59:b6:
40:14:a9:db:64:27:09:f6:96:c4:49:28:3a:5e:fb:
19:f3:c6:02:da:4e:95:06:e2:49:f4:dd:2e:b3:d9:
7f:19:00:84:06:0b:97:d1:c0:d2:b5:b2:27:f8:17:
f4:7d:49:7c:10:0c:8f:49:42:79:93:bd:e0:81:03:
07:4b:cf:8b:e8:85:86:08:c3:25:95:17:ca:62:37:
a1:68:5a:18:8c:18:d7:e9:fa:c2:10:78:0e:2f:d6:
f1:7a:f9:1c:e0:b8:65:5b:59:04:f8:61:ad:c7:d4:
03:df:51:f1:b0:8b:e9:25:a3:f6:18:29:dc:f1:93:
9d:6b:a5:95:a6:3f:9a:db:4d:bd:b4:b6:a9:6f:2b:
9a:cd:70:00:6b:24:e5:1f:53:de:8e:f5:49:0b:93:
29:8c:9b:5c:28:80:cb:b0:f0:69:88:5b:96:d9:01:
4f:e4:f1:2a:0b:ce:1c:64:d3:09:ca:58:56:69:2f:
ff:bd:4b:0f:f4:b8:a6:d0:4b:e4:25:74:bc:4b:23:
ac:a6:20:b5:22:bc:35:da:f2:4e:76:31:33:00:80:
e4:ed:0e:27:37:29:2a:0a:c2:52:c4:d9:ec:98:81:
03:49:19:ae:5f:db:26:48:86:c4:2b:67:94:eb:6f:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:81:3D:3A:D3:56:8F:5F:E2:91:72:1E:33:AF:82:19:8D:D7:11
X509v3 Authority Key Identifier:
keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5f:44:bc:bf:c5:e1:5a:80:d0:5c:db:57:19:aa:5a:b8:b5:
b8:96:c4:6f:a9:fd:f6:2f:33:7d:e9:8c:d4:00:9b:9a:41:34:
c0:9e:e3:6f:3b:24:03:26:c6:b6:91:5d:59:d9:47:16:6c:15:
7c:10:0a:d4:f3:f5:d1:71:db:d0:0a:c6:74:fa:ee:17:fe:9d:
29:f7:91:4c:63:b5:1c:d6:6b:09:5b:21:d0:3e:91:9b:ac:c3:
0a:e7:d7:8a:81:c3:63:14:fa:28:4a:86:0b:a7:6d:28:28:1b:
35:ce:37:00:c4:8f:44:79:90:83:db:6b:e3:88:ab:4e:5a:2d:
c2:a7:6a:ed:72:f3:62:a8:dd:61:6a:bd:37:18:19:06:07:ae:
b4:39:fb:69:aa:43:17:44:1c:57:ab:92:cf:67:13:93:24:68:
38:30:fd:e0:2f:2b:cd:72:e9:98:b3:19:41:54:6a:3a:10:b7:
02:c7:91:82:02:bb:69:fa:6c:1b:18:c3:eb:b1:08:6a:a2:d7:
a1:84:05:9f:f4:63:91:5b:84:e2:97:c5:07:91:37:a8:49:48:
d8:d0:06:5d:cf:55:f4:6f:47:90:29:4d:60:9c:21:ba:0b:28:
fb:0e:b5:80:11:21:cd:26:9f:67:d9:19:a3:34:6c:97:d6:d5:
70:07:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:04 2026 by rpki-client