
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier: WoUD8qkTmieI422dLW2di8D3cgg3wy93sitaEk9fYpw=
Subject key identifier: B4:05:DA:42:88:53:37:1C:ED:B5:EE:6A:D7:65:42:EE:2E:FE:57:69
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number: 01C0
Signing time: Wed 27 May 2026 04:05:13 +0000
Manifest this update: Wed 27 May 2026 04:05:13 +0000
Manifest next update: Wed 03 Jun 2026 04:05:13 +0000
Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: /9D53MtWFiTBk6Aqbzoo6lI76jh3f6eH4ivvE1wgxAg=)
2: DBFEC056388311F1A78BA8A0BB833773.roa (hash: 8FulhLXNLKQwINRNSnlJESeszYJamVSrQm9O3LcSEQs=)
3: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: h3tpppmL1hT5EM3m6sk6xUTtg20d/wirnkJ2RqVRrs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 04:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Validity
Not Before: May 27 04:05:13 2026 GMT
Not After : Jun 3 04:05:13 2026 GMT
Subject: CN=6a166d79-8ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:a6:2c:a8:49:ec:db:58:65:31:49:90:d2:
3d:72:ce:5f:21:f4:5e:bc:e4:61:b1:19:9b:1e:af:
d9:f2:5e:bf:8a:36:ad:2a:95:21:9f:01:c2:88:2a:
ce:39:d9:27:a2:ff:e8:7e:a2:13:2b:b2:ac:c1:f2:
07:d2:47:30:04:76:ca:4b:c5:15:79:ca:94:e4:14:
a9:16:50:1e:5d:8d:ef:81:ca:59:e8:c8:12:8b:76:
ba:d7:ba:72:e3:66:b4:60:9b:04:0f:55:98:7d:58:
85:3b:7c:cf:b2:5a:7e:e4:f0:a0:ad:e0:97:d4:13:
1c:0b:69:35:27:aa:ff:f3:07:97:c4:d1:b7:c2:98:
ba:cd:ed:a7:36:b9:f2:f9:b7:0d:ee:dd:04:de:04:
50:13:1b:b6:cc:d5:32:47:b1:74:ed:19:75:85:15:
38:22:1c:b7:45:e2:df:bf:de:62:02:9d:60:7e:2c:
62:30:58:f7:5e:26:47:3d:83:2e:a9:70:ff:92:bb:
da:59:d8:44:f7:d2:af:e8:22:28:f8:a0:3a:44:f4:
06:41:3e:3a:1e:a5:65:cd:bf:9c:e8:e2:00:cf:a7:
88:21:9c:9f:29:1d:69:46:80:ca:56:ed:72:a0:c4:
9a:7d:a2:d7:e9:fe:cd:86:0e:c4:a5:28:18:34:97:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:DA:42:88:53:37:1C:ED:B5:EE:6A:D7:65:42:EE:2E:FE:57:69
X509v3 Authority Key Identifier:
keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:b2:89:97:e9:26:e5:86:e1:0e:8c:34:59:c7:ad:9c:b3:
f6:1f:7b:ef:7e:cc:ef:4a:83:7a:8c:d3:c6:35:e5:65:f2:2b:
20:ff:d4:21:a9:1f:eb:ff:45:25:81:b3:bd:4c:dc:5f:c1:5f:
e3:40:47:8f:8a:04:b3:d5:73:d9:f4:18:31:42:73:65:fc:75:
18:75:ab:d1:3e:9d:9a:9c:be:ec:6e:6c:be:71:c9:67:e2:39:
66:35:b0:40:59:04:97:7a:ce:e4:6e:ba:cf:c7:31:c3:e7:dc:
2d:5b:73:36:59:9f:29:46:e4:e6:19:e4:f7:28:4b:40:8b:e2:
80:7b:9b:d1:5a:0a:7e:d7:49:f1:fd:6a:1a:27:10:3d:ae:f8:
95:70:25:82:df:c3:af:f5:96:f6:8e:30:6d:87:7d:17:7f:36:
89:9a:2a:22:21:68:91:89:f2:29:a6:b8:0c:80:19:22:ce:9c:
a5:a3:1d:a3:92:ce:e8:28:8b:14:a0:d1:85:fc:4d:8b:1f:47:
1c:e0:1e:64:7c:37:ac:2d:1b:13:76:2d:de:53:e2:b7:94:ab:
b3:62:df:88:98:41:ca:ba:4a:24:72:f3:32:c9:52:de:62:1c:
21:29:c4:01:65:a9:a7:93:e0:bd:6f:ac:55:9e:53:2e:d9:d0:
ae:c8:7e:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG
MjdDRDIyOTgwHhcNMjYwNTI3MDQwNTEzWhcNMjYwNjAzMDQwNTEzWjAYMRYwFAYD
VQQDEw02YTE2NmQ3OS04ZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6tGmLKhJ7NtYZTFJkNI9cs5fIfRevORhsRmbHq/Z8l6/ijatKpUhnwHCiCrO
Odknov/ofqITK7KswfIH0kcwBHbKS8UVecqU5BSpFlAeXY3vgcpZ6MgSi3a617py
42a0YJsED1WYfViFO3zPslp+5PCgreCX1BMcC2k1J6r/8weXxNG3wpi6ze2nNrny
+bcN7t0E3gRQExu2zNUyR7F07Rl1hRU4Ihy3ReLfv95iAp1gfixiMFj3XiZHPYMu
qXD/krvaWdhE99Kv6CIo+KA6RPQGQT46HqVlzb+c6OIAz6eIIZyfKR1pRoDKVu1y
oMSafaLX6f7Nhg7EpSgYNJfhfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQF2kKI
Uzcc7bXuatdlQu4u/ldpMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3
M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu
WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgq+yiZfpJuWG4Q6MNFnHrZyz9h97737M70qDeozTxjXlZfIrIP/UIakf6/9F
JYGzvUzcX8Ff40BHj4oEs9Vz2fQYMUJzZfx1GHWr0T6dmpy+7G5svnHJZ+I5ZjWw
QFkEl3rO5G66z8cxw+fcLVtzNlmfKUbk5hnk9yhLQIvigHub0VoKftdJ8f1qGicQ
Pa74lXAlgt/Dr/WW9o4wbYd9F382iZoqIiFokYnyKaa4DIAZIs6cpaMdo5LO6CiL
FKDRhfxNix9HHOAeZHw3rC0bE3Yt3lPit5Srs2LfiJhByrpKJHLzMslS3mIcISnE
AWWpp5PgvW+sVZ5TLtnQrsh+zA==
-----END CERTIFICATE-----
Generated at Thu May 28 19:20:59 2026 by rpki-client