
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier: qG4CZ7WlwF14CdINH19XE8rQJc2Tj94Ee9AbuHhmd08=
Subject key identifier: 88:14:59:BC:35:2B:CF:C7:51:E6:FC:3E:80:DA:F8:55:4F:FA:6C:98
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number: 015C
Signing time: Thu 21 May 2026 05:08:09 +0000
Manifest this update: Thu 21 May 2026 05:08:09 +0000
Manifest next update: Thu 28 May 2026 05:08:09 +0000
Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: LWS9sf+7dIrmoPQLLonh7gknu94bbP5FDvFomWDvO/Y=)
2: AB61CD86D51811F09422126CC4F9AE02.roa (hash: wLQqscjsnYEYzLsf7dryhLVTKS2UxVldfhWeV31D8Ow=)
3: AAF88862D51811F0B469126CC4F9AE02.roa (hash: +QQBiTJ12auhqCjWR/SYaD0xY7aR7A8XJnlI57+FIP0=)
4: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: MuAhFwAwASJtjgbbeqMge30aVjeav/nUmbfnNFDWvGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Validity
Not Before: May 21 05:08:09 2026 GMT
Not After : May 28 05:08:09 2026 GMT
Subject: CN=6a0e9339-5476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:d9:85:cc:b2:fe:9a:52:69:18:d1:b3:6a:
50:3b:dd:35:b4:08:fe:b3:32:ae:71:a5:d9:37:6e:
75:ac:fd:aa:af:54:88:79:ce:8e:a4:db:44:22:ec:
7a:61:0f:78:4b:60:53:c0:6c:11:0b:f9:f1:4d:83:
b3:70:b2:c3:2a:8d:92:ed:24:49:9f:48:cd:83:81:
a2:b2:69:21:1b:3b:37:0f:3a:b9:69:1b:59:39:8f:
d6:6d:50:97:36:79:12:3f:42:1a:6d:cc:5e:b0:6a:
6e:38:59:de:ac:68:a6:32:04:09:12:0f:a5:36:02:
7b:81:8c:3d:6f:e6:26:ac:17:50:5b:d8:ed:66:97:
e4:49:f7:91:dd:cc:42:df:08:47:a1:e5:e7:c6:e6:
62:30:85:15:2c:d5:dc:ec:3a:29:8f:b9:23:12:4b:
d2:94:68:55:8b:de:36:e6:e3:3a:38:8f:2d:c9:a3:
8b:1f:80:5b:99:c8:72:6b:30:f1:1d:05:ed:64:f3:
f7:e8:b9:c8:34:cb:94:5a:37:d5:be:1e:51:ae:c7:
db:2e:f6:2b:b8:00:c9:68:71:1d:fd:08:38:06:0f:
4f:7d:86:d1:f2:05:f6:4d:a7:92:34:e7:be:58:32:
be:6e:c1:13:c0:9b:c6:54:43:5b:20:c6:0b:47:3e:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:59:BC:35:2B:CF:C7:51:E6:FC:3E:80:DA:F8:55:4F:FA:6C:98
X509v3 Authority Key Identifier:
keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3a:2d:06:f2:76:5a:d8:a1:9c:a2:0e:a2:9e:0f:0e:25:3c:
82:a1:06:73:af:76:91:ef:30:b6:87:ac:ad:84:f2:4e:51:c0:
50:10:d9:3b:03:21:4e:e5:32:bf:85:25:59:48:58:63:c8:77:
d5:69:46:4e:eb:f7:45:38:48:b3:2c:86:5d:c9:f5:1b:e6:93:
2f:05:5d:ba:b9:2d:c2:53:5b:fa:72:92:d9:5f:02:99:25:09:
b2:a8:43:dc:9e:86:d0:f5:97:59:58:22:2c:d7:52:76:0f:cb:
83:55:a2:1e:5e:c5:0c:72:a5:37:da:af:0c:33:ab:6b:42:71:
ce:c6:26:78:df:0d:91:9e:fb:ef:af:7a:3e:c5:03:e9:4d:7c:
1c:5c:f0:66:e8:6e:0d:a5:83:92:1c:32:82:b7:3c:17:25:b7:
02:e7:65:0d:75:b0:22:d3:27:d3:d7:e1:8c:7a:f5:74:31:31:
76:25:3a:a9:f8:ff:de:64:f9:56:0a:dc:c5:f8:cc:cb:4e:9c:
7f:08:80:99:ec:6b:fd:71:f8:0e:0c:9b:2d:4a:a8:86:f9:37:
fb:98:48:b9:7d:bf:ca:84:2b:5f:80:00:05:ce:e5:6b:fa:fe:
63:c1:d3:d8:ca:ac:86:d8:34:a9:96:b6:82:b6:c7:df:4d:1f:
98:22:3b:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy
MURCMzRCMDAwHhcNMjYwNTIxMDUwODA5WhcNMjYwNTI4MDUwODA5WjAYMRYwFAYD
VQQDEw02YTBlOTMzOS01NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoHLZhcyy/ppSaRjRs2pQO901tAj+szKucaXZN251rP2qr1SIec6OpNtEIux6
YQ94S2BTwGwRC/nxTYOzcLLDKo2S7SRJn0jNg4GismkhGzs3Dzq5aRtZOY/WbVCX
NnkSP0IabcxesGpuOFnerGimMgQJEg+lNgJ7gYw9b+YmrBdQW9jtZpfkSfeR3cxC
3whHoeXnxuZiMIUVLNXc7Dopj7kjEkvSlGhVi9425uM6OI8tyaOLH4BbmchyazDx
HQXtZPP36LnINMuUWjfVvh5RrsfbLvYruADJaHEd/Qg4Bg9PfYbR8gX2TaeSNOe+
WDK+bsETwJvGVENbIMYLRz5S2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgUWbw1
K8/HUeb8PoDa+FVP+myYMB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5
N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTY1QS82NkU2RkUzNjQ5N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJE
SHU1Mm5Wc1RuakFoMnpTd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATzotBvJ2WtihnKIOop4PDiU8gqEGc692ke8wtoesrYTyTlHAUBDZOwMhTuUy
v4UlWUhYY8h31WlGTuv3RThIsyyGXcn1G+aTLwVdurktwlNb+nKS2V8CmSUJsqhD
3J6G0PWXWVgiLNdSdg/Lg1WiHl7FDHKlN9qvDDOra0JxzsYmeN8NkZ777696PsUD
6U18HFzwZuhuDaWDkhwygrc8FyW3AudlDXWwItMn09fhjHr1dDExdiU6qfj/3mT5
VgrcxfjMy06cfwiAmexr/XH4DgybLUqohvk3+5hIuX2/yoQrX4AABc7la/r+Y8HT
2Mqshtg0qZa2grbH300fmCI7EA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:00 2026 by rpki-client