
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier: DnvFpDUnAlAQtSy9L1hQplNqd/GWeiAM94Pj+elGsek=
Subject key identifier: 61:80:99:B6:1A:FB:BC:48:D5:B3:A9:57:CF:DF:90:E8:58:48:BE:5B
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number: 0280
Signing time: Wed 07 Oct 2026 02:51:43 +0000
Manifest this update: Wed 07 Oct 2026 02:51:42 +0000
Manifest next update: Wed 14 Oct 2026 02:51:42 +0000
Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: XglGLPIt8qix4eBUfsZdNhWkiYKXhHKE8lD2+CYGOn8=)
2: 9F79846406E911EE88450147C4F9AE02.roa (hash: YHuylOe6V4D7vzWx7g/TehTUSl3K2ldhZbpjU9gbWi4=)
3: E5925096093911EEABCFA170C4F9AE02.roa (hash: o9/BNDUac0F5e0G7MII3gtqonFFzFTXL6xifKeJw3WY=)
4: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Hbbxa5/BfEm6V3m4fcdODFoI+FEd4pPFXGEGUuHlRU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Oct 7 02:51:42 2026 GMT
Not After : Oct 14 02:51:42 2026 GMT
Subject: CN=6ac5b3bf-9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:9c:54:c2:2c:3a:41:03:0f:dc:7e:26:33:
ba:ab:23:5e:d3:c7:32:1c:78:a2:aa:ca:1e:c2:f3:
17:53:f1:85:cf:66:fc:6c:39:8f:bb:c6:0e:ec:21:
3b:4f:7c:55:e1:65:a1:de:cb:1c:7e:df:5c:d0:81:
dd:68:b3:9a:c6:81:5e:cd:a4:a6:7e:62:c5:8e:9b:
dc:09:aa:e4:f7:c7:b6:34:7c:a6:0c:a5:6c:12:fc:
3c:7e:67:80:1e:b3:07:13:6a:1c:ae:ae:e2:71:ea:
b0:55:31:7a:5b:ee:f5:83:8b:7d:11:89:ee:00:a3:
98:2d:fe:08:08:f5:84:fe:99:40:2f:ed:5d:94:0a:
74:96:56:01:c7:0a:07:84:8c:33:a0:12:e0:f2:fc:
9e:e7:8d:3e:0f:f1:fd:9d:d0:c4:bc:f6:a3:f0:42:
a3:f5:ad:8b:12:5b:99:45:20:72:59:25:ad:f4:48:
3a:ca:c2:66:83:9d:7e:6e:e9:20:54:f4:aa:7a:c2:
64:48:19:86:54:d3:a5:89:8b:5c:27:be:22:0b:4f:
f5:b4:ac:02:4e:58:6a:a4:7c:26:1d:2a:b2:b1:c4:
24:6e:9e:94:b5:4e:ac:2e:e9:26:59:6e:55:77:d4:
9f:47:6d:d4:dd:33:5b:90:5b:d3:39:98:34:f1:8f:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:80:99:B6:1A:FB:BC:48:D5:B3:A9:57:CF:DF:90:E8:58:48:BE:5B
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fb:e5:39:00:c4:f5:92:b1:21:98:9f:53:91:f1:a8:f7:63:
53:9d:a3:1d:f8:25:2f:8e:aa:a4:8d:ca:95:dc:58:24:0a:31:
5b:99:66:f5:9c:5a:7b:7c:22:af:26:1f:b2:44:16:58:c9:cc:
a1:c8:95:dc:f6:7c:69:b9:83:f6:63:46:6f:91:60:37:bc:3c:
c9:b3:95:2f:ae:38:53:84:df:04:55:a3:ea:30:bf:08:18:d1:
5e:69:c1:1d:1c:bd:e8:67:2d:c1:e6:bc:fb:17:1b:da:b0:7f:
2c:c2:8c:6a:92:f7:0f:77:2b:f8:40:50:05:b5:58:aa:72:14:
72:a5:b4:b5:47:8f:70:c1:42:e7:fb:09:6d:5d:e7:bf:fc:28:
06:84:1d:9b:35:51:4d:8b:fe:0e:39:4c:57:b7:a2:bc:c9:5b:
0d:14:0f:a8:2c:e4:1e:3d:4b:38:7d:8f:a0:01:2b:21:fd:44:
c0:1e:c5:a5:f5:0a:27:5b:03:d3:58:0d:f0:9c:24:94:cd:f6:
99:82:ba:45:42:a5:05:10:6b:30:44:94:a7:95:0d:a1:68:b8:
3f:d1:2b:c3:98:83:48:18:91:91:85:56:c5:e0:23:da:c2:5f:
02:37:1f:83:fd:98:1f:c5:b3:4d:74:6a:65:40:26:10:53:cd:
b4:f3:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:59:54 2026 by rpki-client