
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier: x3p7KoSjGf8N9UciDpcCiwY0/DM8L2rCe0eFumxJclo=
Subject key identifier: 8E:80:47:1E:56:9F:FC:4A:F2:66:0E:10:B2:BB:57:91:9A:CA:9E:FD
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number: 01EE
Signing time: Thu 27 Aug 2026 02:57:30 +0000
Manifest this update: Thu 27 Aug 2026 02:57:30 +0000
Manifest next update: Thu 03 Sep 2026 02:57:30 +0000
Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: ATIY2mT2ricjesYNyfDttPPMJrV9o7BOAkHrYu2wk7M=)
2: DBFEC056388311F1A78BA8A0BB833773.roa (hash: 8FulhLXNLKQwINRNSnlJESeszYJamVSrQm9O3LcSEQs=)
3: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: h3tpppmL1hT5EM3m6sk6xUTtg20d/wirnkJ2RqVRrs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 02:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Validity
Not Before: Aug 27 02:57:30 2026 GMT
Not After : Sep 3 02:57:30 2026 GMT
Subject: CN=6a8fa79a-54aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:76:3a:ad:89:37:70:ab:57:30:4b:0e:c8:
7a:66:26:d1:12:c2:d1:6e:01:27:2e:29:5e:a2:8b:
2e:9d:3e:9d:7a:38:bb:cb:a2:d8:72:d3:df:15:b4:
77:92:47:59:05:30:79:78:55:fc:30:8f:b6:d9:f3:
3e:6f:60:97:9a:f9:20:37:5d:cb:98:3e:63:f4:9a:
9e:68:c8:4a:94:b4:1a:d7:ca:b8:0b:a9:13:c6:c9:
05:0b:fa:3e:51:b8:c3:4f:96:1e:d2:28:3a:3e:ad:
f4:18:d0:3e:14:78:a3:18:16:d1:fb:07:1d:95:1f:
f6:ac:b9:f5:03:52:99:d8:7e:13:a0:93:92:a7:48:
35:a6:b3:39:52:69:b3:1a:6f:e2:94:8f:de:80:8f:
49:49:22:52:b1:6c:00:4f:e4:20:de:20:db:4d:52:
21:c6:08:3b:15:12:0d:8d:1b:df:5a:87:12:a1:72:
7a:4b:24:2f:8d:9f:a3:f0:62:34:6c:ac:93:5d:da:
c6:e0:01:1e:85:b2:1e:0c:88:31:90:24:2a:ee:d7:
ec:c7:84:79:5c:04:4b:7a:80:ca:56:13:be:75:3a:
64:3f:18:04:09:46:78:fb:fc:af:77:35:4b:4c:76:
98:00:0e:dd:40:40:3a:55:a1:31:7a:ab:75:96:60:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:80:47:1E:56:9F:FC:4A:F2:66:0E:10:B2:BB:57:91:9A:CA:9E:FD
X509v3 Authority Key Identifier:
keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c4:74:89:fb:0b:ec:1a:7f:40:d4:77:1a:1c:51:2e:b0:a8:
c4:8d:49:2e:fa:dc:c7:70:61:0f:00:95:46:9e:74:6a:d3:ff:
7b:8d:31:8e:64:a6:e0:f6:8a:6f:d3:56:e3:33:03:a2:00:7f:
58:a1:e1:e3:82:e5:e1:ca:a3:99:d3:a1:b0:f0:0b:fe:d6:49:
ab:17:99:32:bf:83:af:fe:81:49:2a:6f:87:4d:34:53:86:d2:
8e:68:8b:cf:6e:4d:de:86:59:63:62:69:6e:30:b4:1d:ef:d5:
34:c2:1b:2f:4d:47:c1:7f:23:e8:ef:70:64:82:a3:b2:dd:8e:
a4:3a:9e:ef:16:95:79:c2:85:1d:61:1f:c8:15:cf:96:27:77:
e5:40:c3:76:ef:2e:3d:1c:e6:a5:e5:34:10:7b:f2:c9:d7:e7:
e0:90:73:cb:36:13:6a:70:1b:d1:24:6d:0c:1f:17:a6:72:e0:
8a:f6:11:c2:ad:cd:0b:ec:c4:93:69:d7:6e:ba:f9:ec:cc:b6:
94:8e:76:73:c6:55:fb:10:69:f2:02:3b:c0:68:0e:aa:4d:c8:
4a:da:34:82:66:13:f4:e4:41:3e:13:e9:7c:ee:d9:c6:be:27:
d7:a8:09:b3:bb:30:56:10:fc:0f:7e:f2:be:4b:3b:66:fd:c9:
ef:60:8e:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG
MjdDRDIyOTgwHhcNMjYwODI3MDI1NzMwWhcNMjYwOTAzMDI1NzMwWjAYMRYwFAYD
VQQDEw02YThmYTc5YS01NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGJ2Oq2JN3CrVzBLDsh6ZibREsLRbgEnLileoosunT6deji7y6LYctPfFbR3
kkdZBTB5eFX8MI+22fM+b2CXmvkgN13LmD5j9JqeaMhKlLQa18q4C6kTxskFC/o+
UbjDT5Ye0ig6Pq30GNA+FHijGBbR+wcdlR/2rLn1A1KZ2H4ToJOSp0g1prM5Ummz
Gm/ilI/egI9JSSJSsWwAT+Qg3iDbTVIhxgg7FRINjRvfWocSoXJ6SyQvjZ+j8GI0
bKyTXdrG4AEehbIeDIgxkCQq7tfsx4R5XARLeoDKVhO+dTpkPxgECUZ4+/yvdzVL
THaYAA7dQEA6VaExeqt1lmDpLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6ARx5W
n/xK8mYOELK7V5Gayp79MB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3
M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu
WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACsR0ifsL7Bp/QNR3GhxRLrCoxI1JLvrcx3BhDwCVRp50atP/e40xjmSm4PaK
b9NW4zMDogB/WKHh44Ll4cqjmdOhsPAL/tZJqxeZMr+Dr/6BSSpvh000U4bSjmiL
z25N3oZZY2JpbjC0He/VNMIbL01HwX8j6O9wZIKjst2OpDqe7xaVecKFHWEfyBXP
lid35UDDdu8uPRzmpeU0EHvyydfn4JBzyzYTanAb0SRtDB8XpnLgivYRwq3NC+zE
k2nXbrr57My2lI52c8ZV+xBp8gI7wGgOqk3ISto0gmYT9ORBPhPpfO7Zxr4n16gJ
s7swVhD8D37yvks7Zv3J72COIQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:34:04 2026 by rpki-client