
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File: KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier: G0LakbQ6ruZIabm9NaJebnLqIBipY0Y7MHGsZL1xkhg=
Subject key identifier: 37:18:3E:96:7E:9D:00:A8:E4:C5:40:F1:41:04:CE:D3:4D:08:9B:65
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number: 015D
Signing time: Wed 13 May 2026 05:02:48 +0000
Manifest this update: Wed 13 May 2026 05:02:47 +0000
Manifest next update: Wed 20 May 2026 05:02:47 +0000
Files and hashes: 1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: y3QBO/364pPBiLk/XYf3Gb5DWM8UWUnQCY01XiiWmeI=)
2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: AmuO5Mz7Oe3J6VbUWmMhACa7zZVIB8sI5+X4h7QzjH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Validity
Not Before: May 13 05:02:47 2026 GMT
Not After : May 20 05:02:47 2026 GMT
Subject: CN=6a0405f8-50c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7d:cb:df:a0:c2:8c:63:35:cc:0f:fa:24:59:
79:db:c5:e8:cb:55:3c:70:82:c9:27:ad:bc:19:1d:
19:6f:4b:77:7c:81:c3:aa:f2:ad:32:94:a3:45:70:
8b:ea:e8:57:47:71:c8:f6:6b:5f:d7:81:ba:3d:8a:
a8:c4:8a:48:41:a8:56:e8:bb:1c:83:79:2a:8d:a3:
c5:87:2c:2d:10:5d:59:09:14:33:b3:d5:ea:e1:62:
b9:83:72:64:4e:03:f8:2f:f1:2c:59:bc:6d:1b:24:
fe:03:55:18:a1:5f:d8:9d:67:e7:65:f1:f6:ec:82:
7d:ef:64:12:5b:c4:24:cc:bb:8a:26:36:08:d1:f9:
10:46:38:03:34:e6:fa:cb:8a:7d:07:96:5b:3d:a3:
12:3b:0c:9b:60:c9:4b:76:45:4a:60:4a:57:03:57:
d0:dc:1c:4f:11:96:7d:db:e6:28:6e:e4:38:3a:73:
57:da:98:9d:79:94:25:ca:ae:8d:41:56:cf:62:c4:
d1:02:37:25:6a:60:75:e7:dd:a1:9f:d8:29:d6:94:
4a:b4:ea:e6:8b:d6:5b:0d:6a:2d:5b:47:72:ba:3d:
f7:0d:88:c6:d9:0d:24:68:59:7e:0d:1b:49:ee:e6:
14:d1:07:57:d4:f4:e4:4a:06:18:59:b3:e7:a8:9f:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:3E:96:7E:9D:00:A8:E4:C5:40:F1:41:04:CE:D3:4D:08:9B:65
X509v3 Authority Key Identifier:
keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:32:81:53:31:d4:27:13:bf:ae:7f:79:f4:1a:41:86:95:1c:
76:86:d9:eb:f5:86:bd:20:95:5c:8e:b6:9f:c6:25:23:fb:9e:
07:0e:83:d1:bb:8e:84:6a:79:f8:3b:3f:4a:55:4a:01:af:90:
4a:8c:c3:09:21:4b:c5:c7:34:1f:a7:5d:97:34:36:cc:00:70:
04:5e:58:7d:ff:14:e5:eb:fb:d9:49:04:e2:4a:9a:1a:7f:39:
ac:a3:5f:b2:48:b8:e7:7b:19:8f:dd:d3:9b:c2:e8:46:9b:aa:
7f:29:7b:7d:bc:02:7d:9b:d4:de:bf:fc:81:91:0f:84:db:86:
91:c4:ca:02:cd:de:41:d9:1d:ef:6d:79:a2:48:a4:69:04:7f:
bc:92:30:15:25:1e:9a:50:78:ff:c3:43:a4:91:04:96:7c:12:
8e:e5:0c:c6:f5:68:17:e7:30:6e:2d:bf:eb:ae:6f:76:88:09:
e9:75:dc:1a:5f:5c:07:4e:e2:36:21:89:83:66:f4:2f:23:6c:
69:30:fc:d7:25:6d:1a:b3:8d:f8:b1:a4:d7:54:a7:11:ef:7c:
19:fd:43:43:5e:e9:f0:cb:71:0c:3f:7e:87:72:fc:71:d2:86:
97:00:97:a9:29:ed:c5:84:89:cc:db:b6:e6:ff:cb:d4:fb:ee:
77:ba:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:49 2026 by rpki-client