
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier: HRjpuP76nQZ3CxwhN3y//3MVEdufDbniwG8tZxEwPH0=
Subject key identifier: BD:87:87:9A:42:71:60:99:D6:1B:C0:3F:EE:46:F3:8A:44:37:33:86
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number: 0265
Signing time: Wed 19 Aug 2026 02:47:48 +0000
Manifest this update: Wed 19 Aug 2026 02:47:47 +0000
Manifest next update: Wed 26 Aug 2026 02:47:47 +0000
Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: nBQHCkGhls3WKEoac/+hat0mz98n+FuiXGUioPWhV7g=)
2: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=)
3: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=)
4: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Aug 19 02:47:47 2026 GMT
Not After : Aug 26 02:47:47 2026 GMT
Subject: CN=6a851954-8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:c3:00:95:2f:5e:9b:b6:1d:d0:ac:aa:74:
be:73:a7:3d:fc:27:20:f8:d2:73:c4:1f:aa:a2:52:
42:79:8b:77:99:00:d5:68:f2:0a:93:f5:86:80:53:
4c:fc:d2:12:46:b6:a2:3f:0a:81:c2:d7:b2:77:25:
ab:c7:9d:54:be:42:02:5f:ae:31:db:a9:7a:6a:a5:
ff:2a:d7:b0:a1:9a:bd:fb:f1:90:b6:b3:ef:38:eb:
4a:66:12:cc:8c:b4:8b:8c:f2:6e:cd:d7:a7:d5:84:
0f:3e:4a:2e:e1:85:e1:f0:8c:62:bf:5b:86:be:03:
1a:02:ed:4e:53:17:e3:32:fb:e1:02:21:d4:8e:11:
a4:31:3b:2d:92:e9:03:97:39:45:f2:6d:9b:08:9a:
c6:73:c1:1b:c1:15:93:5a:73:4d:19:bc:f6:03:4b:
6e:dd:86:18:68:38:95:3e:1d:95:d2:d6:00:2c:65:
d5:51:b2:df:4d:58:58:f2:07:b9:bd:a6:34:c7:c1:
d1:86:9c:b2:2f:9b:1d:da:72:b5:d3:79:39:80:62:
d7:f6:ee:c6:1a:a9:a3:3b:01:8f:c1:4d:5a:31:1c:
ad:cf:d2:ab:04:eb:21:23:22:d7:6e:de:91:07:da:
a6:87:dd:ec:8c:2d:80:ae:c2:a7:0c:b3:f4:71:38:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:87:9A:42:71:60:99:D6:1B:C0:3F:EE:46:F3:8A:44:37:33:86
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:06:18:f7:39:b0:18:b4:e9:ff:e2:95:22:3c:f0:c6:5b:
5e:be:3f:bf:95:09:17:71:8c:5a:c1:85:d9:cf:4c:df:9b:02:
12:51:10:1e:6c:2a:ff:17:5e:81:d8:f9:e9:4b:85:2b:ff:8b:
8a:e4:c3:ca:95:af:d9:4b:1e:7b:20:ed:41:9c:d6:f5:6a:09:
42:47:ba:fd:02:3a:e1:78:79:a0:1a:ba:71:01:e7:b8:a1:87:
48:ad:ea:1c:ff:fd:45:a9:0c:cb:c9:23:19:e4:c9:9f:56:23:
3f:c7:fb:63:d8:18:23:3d:e1:7e:8e:74:59:95:92:af:1c:06:
a5:10:9e:62:df:0c:40:4d:83:9a:98:12:61:be:19:53:50:d3:
35:6f:63:33:35:79:a3:9d:a0:72:db:86:ee:3f:6b:52:47:cf:
61:c2:69:15:83:66:fb:47:ed:4b:57:e6:a5:b7:2e:19:d1:00:
94:c0:33:b3:f7:87:30:43:20:69:f6:f0:ca:ed:eb:b9:be:cc:
e7:16:74:dd:18:c0:b0:e0:32:d9:fc:57:6a:11:06:df:cc:82:
02:d3:5c:d8:72:5d:9d:a4:b2:ec:6a:fd:bf:32:ff:8f:f6:06:
f3:e3:f9:1c:c6:eb:06:61:45:05:9c:14:85:8d:b3:f8:e5:15:
fc:42:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:10:28 2026 by rpki-client