
$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json)
Hash identifier: HlJLHYsiNUrPkk2TPS17KdB2m+Xl0Nzmzoisa5OjEqk=
Subject key identifier: 4F:D0:F0:18:67:16:AB:5A:95:F5:17:3B:20:F8:69:88:42:91:97:1F
Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
Manifest number: 9A
Signing time: Thu 21 May 2026 07:30:54 +0000
Manifest this update: Thu 21 May 2026 07:30:54 +0000
Manifest next update: Thu 28 May 2026 07:30:54 +0000
Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: rS6IHeX54iwy7ohTRREk1gjcg+8RDMp6HuCot+sLFN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Validity
Not Before: May 21 07:30:54 2026 GMT
Not After : May 28 07:30:54 2026 GMT
Subject: CN=6a0eb4ae-b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:61:14:30:c6:87:7f:f7:4a:ec:1e:38:40:
e1:0e:53:fa:a7:f3:f0:b3:43:70:f1:2a:97:12:46:
5d:d7:28:3e:10:31:96:42:ee:0a:82:73:ed:5e:85:
89:2f:7e:51:6d:ea:69:f7:fa:85:c3:b6:24:a9:43:
5f:4d:d8:10:24:d9:fc:10:00:16:83:5c:b8:ff:23:
f0:a7:f2:e0:b2:f5:84:dd:f8:11:d8:2f:65:84:e8:
16:cf:53:dc:f3:81:81:e6:03:32:da:b5:0c:d9:68:
8f:b0:ad:d9:02:31:ab:6f:03:c4:cd:21:e0:ae:67:
8a:7c:38:65:36:7b:5d:bf:d0:6f:51:33:9d:21:e5:
12:9f:c3:9e:7f:e9:5a:1e:c6:af:d2:08:1a:1f:b0:
81:f1:8e:27:bb:c2:1a:5d:d7:bc:a8:92:50:80:ac:
54:52:e0:7e:de:ad:14:92:29:20:bc:c3:54:71:40:
3f:6f:66:3c:37:12:0f:a2:25:98:94:cc:e3:5a:db:
4e:85:7b:2e:87:f2:6d:6d:64:72:ab:1a:72:94:10:
a0:83:29:e0:5b:e3:d2:13:74:75:b2:8b:f2:0c:b6:
73:93:f1:cc:10:3c:f8:1b:59:9d:38:31:d8:e3:82:
8d:da:30:e2:96:23:0c:df:8b:ca:fa:70:8f:cf:4a:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:F0:18:67:16:AB:5A:95:F5:17:3B:20:F8:69:88:42:91:97:1F
X509v3 Authority Key Identifier:
keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:98:6c:67:b9:cb:8a:a1:fc:7f:0c:9a:8c:72:a8:c2:c5:58:
ef:34:49:09:57:45:d3:df:cb:2e:16:bc:9e:b4:11:f1:36:d5:
21:99:dd:e4:2c:20:eb:cb:db:2a:0c:95:0f:d2:ea:2f:d9:25:
d7:c1:f5:20:a8:11:88:75:a5:c1:07:d9:10:81:98:e4:cd:62:
bf:75:71:2e:77:0e:72:2e:63:27:5d:c8:06:21:43:a1:e3:b0:
f0:bd:75:53:97:12:66:16:99:ec:77:a0:80:ec:e0:d6:1b:53:
b3:af:d4:b7:bc:9f:0c:0f:dc:36:4e:01:9e:cb:85:70:b7:9a:
d6:0c:62:19:88:d9:6d:b8:a4:5c:1e:25:53:df:78:0a:b8:dc:
33:f9:3f:c4:3a:16:2f:d3:1b:34:2a:68:8a:59:22:6c:b3:d4:
67:ed:d1:17:ae:18:c3:40:9a:22:92:61:16:8e:59:87:51:fb:
2b:49:56:4d:2b:e4:f6:6d:28:f0:bf:89:fc:0f:10:a9:a2:f2:
56:ff:6e:30:d4:35:5e:a2:d0:7b:a3:ad:93:32:55:07:4c:f8:
ba:b9:26:f1:a4:cc:9d:b9:c8:de:11:7b:0b:60:10:63:bf:9a:
ed:17:a8:10:f9:b0:7b:92:05:74:2a:19:e9:60:25:09:36:7a:
25:92:76:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA3RDMxMTAvBgNVBAUTKDkwQ0I3RkExMzc5NjlDNDM1NkE0Q0E1MkY3MDVEQ0Ex
QUIyMjVGRDAwHhcNMjYwNTIxMDczMDU0WhcNMjYwNTI4MDczMDU0WjAYMRYwFAYD
VQQDEw02YTBlYjRhZS1iOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArN1hFDDGh3/3SuweOEDhDlP6p/Pws0Nw8SqXEkZd1yg+EDGWQu4KgnPtXoWJ
L35Rbepp9/qFw7YkqUNfTdgQJNn8EAAWg1y4/yPwp/LgsvWE3fgR2C9lhOgWz1Pc
84GB5gMy2rUM2WiPsK3ZAjGrbwPEzSHgrmeKfDhlNntdv9BvUTOdIeUSn8Oef+la
Hsav0ggaH7CB8Y4nu8IaXde8qJJQgKxUUuB+3q0UkikgvMNUcUA/b2Y8NxIPoiWY
lMzjWttOhXsuh/JtbWRyqxpylBCggyngW+PSE3R1sovyDLZzk/HMEDz4G1mdODHY
44KN2jDiliMM34vK+nCPz0r48wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/Q8Bhn
FqtalfUXOyD4aYhCkZcfMB8GA1UdIwQYMBaAFJDLf6E3lpxDVqTKUvcF3KGrIl/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDdEMy80MTlFN0UxMjZD
NTkxMUYwQTM4ODRFN0FDNEY5QUUwMi9rTXRfb1RlV25FTldwTXBTOXdYY29hc2lY
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNdF9vVGVXbkVOV3BNcFM5d1hjb2FzaVg5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDdEMy80MTlFN0UxMjZDNTkxMUYwQTM4ODRFN0FDNEY5QUUwMi9rTXRfb1RlV25F
TldwTXBTOXdYY29hc2lYOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtZhsZ7nLiqH8fwyajHKowsVY7zRJCVdF09/LLha8nrQR8TbVIZnd5Cwg68vb
KgyVD9LqL9kl18H1IKgRiHWlwQfZEIGY5M1iv3VxLncOci5jJ13IBiFDoeOw8L11
U5cSZhaZ7HeggOzg1htTs6/Ut7yfDA/cNk4BnsuFcLea1gxiGYjZbbikXB4lU994
CrjcM/k/xDoWL9MbNCpoilkibLPUZ+3RF64Yw0CaIpJhFo5Zh1H7K0lWTSvk9m0o
8L+J/A8QqaLyVv9uMNQ1XqLQe6OtkzJVB0z4urkm8aTMnbnI3hF7C2AQY7+a7Reo
EPmwe5IFdCoZ6WAlCTZ6JZJ2QQ==
-----END CERTIFICATE-----
Generated at Thu May 21 11:59:17 2026 by rpki-client