
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json)
Hash identifier: e2WDTFqgPpdMJTQBGYzT8P1Vs4HyvTswxu+sg5kjIks=
Subject key identifier: 0C:9F:A5:B3:A6:5D:AA:E6:09:0A:C6:53:AC:4C:D9:96:F1:BC:B4:07
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
Manifest number: 019C
Signing time: Mon 11 May 2026 04:33:20 +0000
Manifest this update: Mon 11 May 2026 04:33:20 +0000
Manifest next update: Mon 18 May 2026 04:33:20 +0000
Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: MVR+b5LP8Vr+eQQHEse8joLFGM9/6nABtDxdawAh44I=)
2: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: sZTUTJvgxgWJhUoK93A1p1nM08bMCHTb48BCqzgU1N4=)
3: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: x/bgawUh/ekhizQsMMTbBFbp2PQnJdzq20ib+LnBc+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: May 11 04:33:20 2026 GMT
Not After : May 18 04:33:20 2026 GMT
Subject: CN=6a015c10-7bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:1c:82:c9:6b:5a:f3:72:bf:0c:a1:78:70:
14:0f:8a:27:1f:b0:c8:61:a5:1e:ca:b2:83:6c:4e:
96:94:55:14:2a:4a:86:de:20:5b:a0:14:5c:32:67:
08:aa:a1:fe:cd:93:6a:c6:47:e5:00:da:58:0b:db:
8e:54:5e:29:b1:3a:b5:5c:98:ab:a7:40:ae:50:17:
80:be:1b:26:c2:ce:da:20:4e:7e:b8:44:84:af:02:
d3:ec:51:4f:79:a4:aa:67:de:2a:73:56:94:52:fe:
d7:b3:cf:c9:54:9d:48:bf:ad:ac:b4:7c:ee:96:46:
46:92:97:e6:b1:eb:a0:42:f6:4d:8a:b7:6a:08:20:
b7:fe:f6:41:3c:8c:68:33:2a:ed:eb:a6:25:d4:8e:
37:9a:26:71:7c:57:12:57:7b:91:b1:f8:bd:6a:71:
32:95:6e:24:e0:ca:ae:47:7a:fe:2d:fa:3c:94:a6:
b1:e7:b1:d9:18:3b:73:5b:29:42:4e:7c:ec:27:34:
2c:fb:d2:e8:d9:b7:e7:1e:b5:7d:c6:2f:33:e2:7e:
80:76:b0:ab:3a:06:3a:5c:22:9f:40:18:f5:b4:53:
d3:44:a6:50:83:c7:34:f7:5e:10:62:f0:00:a1:6d:
70:2d:ae:26:22:23:35:e1:be:d8:58:6e:e7:d6:e3:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:A5:B3:A6:5D:AA:E6:09:0A:C6:53:AC:4C:D9:96:F1:BC:B4:07
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:c1:a4:b3:20:6b:93:73:a4:6d:53:e9:70:d0:b7:b4:c7:
bb:80:6e:3a:da:22:d4:a5:fd:6e:7c:52:41:58:e1:9e:25:74:
d0:9b:cb:4c:1d:16:2c:de:3d:49:3b:63:85:43:6b:19:9e:de:
49:c3:30:5b:a1:14:61:69:3c:34:91:24:6c:37:ed:f5:fb:96:
b6:d6:14:56:2f:e5:71:ee:ee:c8:d2:66:2e:06:47:24:a8:91:
21:b1:7a:f1:61:96:73:3a:8d:76:9c:69:ff:5a:52:49:fd:b5:
b9:b1:c9:95:98:75:85:5b:55:1b:6c:40:42:72:96:76:a7:fe:
6c:b0:72:47:c9:7b:37:16:2a:ad:52:ff:7c:5a:e5:00:72:70:
15:d9:b1:e8:56:12:03:39:52:ec:2a:23:63:07:6e:92:dd:41:
39:d9:95:73:af:58:27:13:06:54:c5:6c:66:9f:d2:08:ae:89:
77:a9:44:ee:a5:49:d0:10:7c:a4:b8:cc:bf:3d:4b:57:69:61:
4a:e4:8f:0e:aa:5f:ef:95:bc:c8:f2:18:f5:34:63:a0:9a:34:
7c:e8:a1:ac:f6:58:5d:84:77:69:6e:25:af:9e:8c:28:cd:be:
45:52:8a:6a:72:12:df:0d:27:0c:25:26:89:ef:c2:2d:47:ef:
11:f3:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:40 2026 by rpki-client