
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier: pvgoSOdWH6VUfIxpeaADV8nRF0FjBCrqfMVn2GP7hD0=
Subject key identifier: 84:2E:6E:35:AF:52:8C:C2:6D:E1:70:3A:51:A1:F5:B2:AA:72:FF:43
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number: 024E
Signing time: Sun 05 Jul 2026 03:01:03 +0000
Manifest this update: Sun 05 Jul 2026 03:01:03 +0000
Manifest next update: Sun 12 Jul 2026 03:01:03 +0000
Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: hAoWY1KGm4hpHghB680GWHsF5k5gNUTBzEr1kf5RnPs=)
2: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=)
3: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=)
4: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Jul 5 03:01:03 2026 GMT
Not After : Jul 12 03:01:03 2026 GMT
Subject: CN=6a49c8ef-33fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:b3:4a:8f:5e:86:37:04:44:8a:63:2d:2b:
a1:bd:6f:d1:bb:df:63:b3:96:b8:67:3f:9f:b6:d9:
01:97:85:65:90:a4:b5:17:0a:4c:31:4b:df:af:22:
17:1e:a8:b5:4a:14:ee:f9:f8:9b:1d:dc:94:e4:04:
fb:6e:a9:8c:65:f7:32:11:e6:a9:8e:2a:27:44:7b:
48:6d:fb:7e:63:7d:c1:22:84:6a:5e:77:13:c2:d6:
ab:41:7e:86:21:be:5a:f0:1b:bf:a6:c7:20:2f:81:
78:8c:9c:ce:47:74:d1:0a:eb:e5:a5:d3:5c:a4:69:
40:a4:0b:1d:c7:48:5c:0a:0a:9b:8d:bb:c3:5a:32:
d5:ef:1c:1b:54:dd:83:a1:c0:75:b3:36:76:3e:37:
a5:1e:34:f3:f8:f1:6b:c8:1d:83:8f:2a:7e:68:2f:
7c:ea:b9:d8:58:2a:27:c1:f0:81:ab:38:e9:be:65:
f9:83:55:b0:92:fb:c2:b3:6b:9a:19:85:66:f3:6d:
8b:8a:ca:ea:96:93:6c:7a:ea:b4:62:14:97:8d:21:
11:f4:4b:dc:47:f7:6f:d6:d9:22:cf:56:67:74:08:
a7:12:6a:80:3c:53:f8:ca:25:18:8c:78:f4:ff:cf:
dc:0b:a6:dd:1b:4b:a6:37:26:da:6d:6d:6d:bc:08:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2E:6E:35:AF:52:8C:C2:6D:E1:70:3A:51:A1:F5:B2:AA:72:FF:43
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9c:eb:85:20:b5:69:07:33:14:38:f5:86:1c:e0:b4:61:eb:
6c:e2:fd:11:87:b5:aa:fb:2a:4e:5e:96:b9:69:56:69:bc:c5:
c9:17:8e:d3:4e:d5:84:9a:1d:ea:4f:ce:57:a3:54:ed:41:65:
a9:f2:08:83:70:ba:ab:32:7d:af:d0:5e:0f:dd:d9:33:21:e6:
53:3b:be:30:aa:de:35:71:70:66:6f:c3:24:e0:55:6e:91:90:
31:d6:a6:f5:3a:c6:9e:dd:a9:c2:12:be:43:6b:18:2d:a6:b3:
73:e6:98:b0:b2:5d:b2:69:02:cf:ba:93:3f:49:62:67:f2:0f:
07:60:b6:7f:6f:f1:0f:c7:e5:de:da:e9:63:99:e7:9c:5d:58:
3c:90:74:ab:17:9a:ce:b7:de:0d:c8:da:36:fa:4c:da:7c:bb:
48:fa:d5:fd:c6:81:13:18:6c:a9:72:19:aa:3b:a0:44:c4:7e:
b0:43:cb:af:f3:50:81:17:6e:88:da:4f:9a:9f:6c:17:21:93:
81:69:98:a4:5a:ae:7a:03:44:4e:ab:7b:b5:f8:16:7a:eb:41:
31:5d:12:9d:1e:7d:c8:a6:87:62:51:ff:c6:d6:65:48:06:83:
23:b2:58:d7:3d:8c:fc:ca:51:ec:93:5c:63:23:4f:bb:fe:3e:
8e:3c:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:16:02 2026 by rpki-client