
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File: KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier: OGUfgUJzByuduwBUV+QtWmFVQxW+Vh3WqrNpI7qKWOE=
Subject key identifier: 89:FF:A2:7F:51:97:EC:2A:82:7D:E7:83:6A:29:B5:F1:3D:76:88:DD
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number: 0197
Signing time: Sat 05 Sep 2026 04:07:45 +0000
Manifest this update: Sat 05 Sep 2026 04:07:45 +0000
Manifest next update: Sat 12 Sep 2026 04:07:45 +0000
Files and hashes: 1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: HtgCWsiThKJ5UNi39C8k/eqFWPpQCF1f3iaN4BS2gyw=)
2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: AmuO5Mz7Oe3J6VbUWmMhACa7zZVIB8sI5+X4h7QzjH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Validity
Not Before: Sep 5 04:07:45 2026 GMT
Not After : Sep 12 04:07:45 2026 GMT
Subject: CN=6a9b9591-ede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:6f:89:a4:07:07:4d:b1:f7:92:3e:21:71:
e6:8b:62:41:9a:85:13:49:4b:37:0a:de:12:08:a2:
31:95:e6:70:7f:72:94:91:9e:60:1a:27:c5:ae:4c:
7d:8d:f2:bd:58:f2:95:0b:9d:e2:05:9f:4a:09:91:
b9:69:bb:ea:6c:c6:e2:04:f3:c8:f7:cf:be:bd:fe:
ba:75:a4:27:1e:f2:79:62:c3:e6:7c:ae:31:7d:ff:
10:0f:c8:53:fa:bb:71:74:97:f2:42:24:f2:2a:39:
36:17:9a:1c:96:a0:f2:56:19:c7:aa:26:bf:f9:a3:
6a:e2:30:56:0e:b4:2b:f0:b8:e8:dd:8b:d9:57:b1:
46:24:a9:e3:d8:76:9a:8f:0b:ba:58:29:40:b1:e8:
97:dc:4c:21:46:e4:7e:37:1c:6e:77:2d:d9:c2:95:
fa:58:16:26:2d:6b:01:9e:da:46:b6:c0:ee:e7:ab:
2e:2a:06:0d:46:fa:43:ee:28:78:d8:a9:35:22:db:
3d:6b:b9:e4:0c:09:7b:94:68:85:57:ce:de:14:92:
eb:e9:d0:f3:4c:6c:a7:3e:59:44:34:08:30:ab:81:
15:ef:76:ea:b2:c6:86:e7:1f:83:10:f3:6f:e1:ff:
e2:82:2e:80:13:5a:3e:4d:be:48:1e:3b:7c:44:b4:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FF:A2:7F:51:97:EC:2A:82:7D:E7:83:6A:29:B5:F1:3D:76:88:DD
X509v3 Authority Key Identifier:
keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:df:3d:aa:c2:89:dd:55:68:3b:4d:af:f9:48:93:0f:e5:f3:
f1:d5:81:38:48:d6:e2:df:9e:1d:8f:de:ac:70:30:6c:c1:d8:
fc:79:dc:7a:77:db:a1:26:2e:b0:d6:5c:d0:a8:c1:da:74:17:
48:84:62:9b:f7:26:d3:6b:8c:02:08:3c:9c:80:51:dd:4d:aa:
3a:6f:1f:fb:36:12:91:40:d8:7a:0d:20:86:58:7a:3f:6a:65:
01:2f:87:eb:8c:36:a0:be:b1:00:a5:2d:2f:a8:50:5e:3b:3f:
73:54:31:81:f2:6e:41:b2:82:53:6e:39:19:8c:d4:ad:9c:cf:
33:1f:a7:f8:43:01:30:ef:f6:74:ec:59:02:53:5c:9a:39:db:
a8:06:20:71:c9:95:0e:4e:37:95:13:84:e7:43:96:1d:8f:71:
25:9a:5d:0f:13:05:fe:b3:e2:85:72:e1:df:78:f3:4f:ad:00:
49:52:43:5f:2b:a0:e7:69:b5:8b:c0:0f:5f:9e:cc:df:9d:5a:
eb:e4:f7:9d:e9:c6:bb:fd:cb:ec:b1:86:53:cf:af:8f:ca:9c:
9a:4b:77:a1:98:13:1d:0d:61:f1:9b:2e:68:a6:60:17:f7:32:
50:ad:70:d2:f1:99:c0:17:ef:4f:ec:12:53:5a:c7:1c:a0:e5:
81:0f:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:40:41 2026 by rpki-client