
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json)
Hash identifier: WyUhvOxo+HjZEBos+uVC/cNhBBDBaT85yGcIWGK3Ufo=
Subject key identifier: 87:9D:62:D8:A5:19:29:D7:7A:5F:73:18:BC:D2:03:34:D5:91:CF:FF
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
Manifest number: 01A2
Signing time: Sat 23 May 2026 04:28:18 +0000
Manifest this update: Sat 23 May 2026 04:28:18 +0000
Manifest next update: Sat 30 May 2026 04:28:18 +0000
Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: 4m9VEhrB4DybsYapmZHXXjjliUTBj/O7WustucFdTNw=)
2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: x/bgawUh/ekhizQsMMTbBFbp2PQnJdzq20ib+LnBc+A=)
3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: sZTUTJvgxgWJhUoK93A1p1nM08bMCHTb48BCqzgU1N4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: May 23 04:28:18 2026 GMT
Not After : May 30 04:28:18 2026 GMT
Subject: CN=6a112ce2-84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:ac:fc:d3:0a:63:08:a7:27:de:bc:23:1b:
4b:f8:63:93:b4:c1:d9:67:23:7f:ab:1c:e5:d2:8a:
f6:1c:3b:20:49:06:df:24:69:ce:3d:62:44:e2:07:
c2:eb:45:ec:d3:99:ce:ec:c8:e6:0a:aa:c7:75:41:
0d:c0:09:c0:ce:0b:f1:d1:fa:e8:0b:68:f2:bb:45:
30:2f:10:e7:ae:a6:96:3c:2d:30:8b:c4:c7:5e:ff:
9e:b2:d1:46:2c:e5:a3:3f:90:81:3f:49:c5:57:94:
80:91:6e:7d:f4:6d:ac:e6:a0:d7:12:dc:1a:93:2b:
4d:46:19:36:fd:5f:90:c8:7b:f5:fb:f2:86:76:d3:
73:23:77:1c:0d:fa:4f:cb:e8:4c:b8:46:87:25:84:
cf:38:64:2b:19:2d:93:1f:37:35:de:f6:ba:42:ef:
7a:49:4f:32:08:f3:4a:3d:fb:bd:85:f0:e3:3d:1d:
43:09:bf:a5:6c:6f:09:6b:28:a7:10:0a:e5:47:48:
2a:96:71:e1:6a:a6:6b:34:16:f3:55:d5:99:82:19:
16:17:38:6d:98:7f:aa:f6:82:a9:3f:8b:21:12:e0:
ca:21:57:21:f9:d4:4b:6e:ab:a0:e9:49:fb:a0:19:
39:c6:52:1c:23:00:ff:17:f0:be:bc:53:55:8f:ee:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:62:D8:A5:19:29:D7:7A:5F:73:18:BC:D2:03:34:D5:91:CF:FF
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:10:d6:de:87:22:59:27:f7:12:12:5f:e6:36:3e:57:ae:d9:
8c:a3:17:93:4d:e2:09:e4:32:8a:da:de:61:4b:4b:05:15:ad:
eb:24:8a:2d:64:95:c3:9d:c5:96:a4:dc:d4:32:f2:96:98:3c:
c5:31:fe:ad:2e:9a:33:aa:c7:e3:2f:15:70:19:95:03:93:ee:
44:dc:2c:f6:7b:17:5f:d9:80:10:d0:47:5e:16:c3:4f:99:44:
dc:05:22:93:d2:7a:0c:b2:ab:5d:6e:0d:0f:a1:af:17:3b:60:
28:f2:18:97:9f:8a:b8:6c:56:d7:71:26:ed:7a:9d:25:31:e6:
27:10:5c:6a:d3:7b:62:e4:0b:d4:fa:6c:11:98:a9:c6:65:45:
8c:0c:c2:4d:37:9a:e5:0f:eb:52:7b:d7:63:42:bd:9e:02:c4:
ea:ac:71:1d:1e:5b:6c:32:5e:8c:f6:e3:13:72:9b:7e:c4:66:
0b:82:10:48:7d:2c:9d:1c:de:f9:c6:1d:f5:c2:16:de:48:ec:
52:26:ef:48:68:d4:ff:b0:72:3d:db:86:bc:4b:ab:e5:c4:0e:
b1:a9:30:a0:f9:40:05:b5:90:ca:e3:0e:25:c2:72:3d:b3:44:
11:72:bd:86:f5:6b:54:4c:ba:fc:78:31:bc:9a:20:c6:76:e2:
12:07:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:21:10 2026 by rpki-client