
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier: 0ZO07bUO4qLWqfffbS6+5Gi4O9m6j3XnXCCwDwO2gs8=
Subject key identifier: B2:16:13:A6:F1:83:28:66:87:69:BE:44:0E:65:98:A9:0E:6F:D2:6E
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number: 0158
Signing time: Wed 13 May 2026 05:09:49 +0000
Manifest this update: Wed 13 May 2026 05:09:48 +0000
Manifest next update: Wed 20 May 2026 05:09:48 +0000
Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: uq9xiLU1zWYAdaQ//PHIpRKokyiBFy97bqdRydG/yOE=)
2: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: MuAhFwAwASJtjgbbeqMge30aVjeav/nUmbfnNFDWvGc=)
3: AAF88862D51811F0B469126CC4F9AE02.roa (hash: +QQBiTJ12auhqCjWR/SYaD0xY7aR7A8XJnlI57+FIP0=)
4: AB61CD86D51811F09422126CC4F9AE02.roa (hash: wLQqscjsnYEYzLsf7dryhLVTKS2UxVldfhWeV31D8Ow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Validity
Not Before: May 13 05:09:48 2026 GMT
Not After : May 20 05:09:48 2026 GMT
Subject: CN=6a04079d-e2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:95:67:69:b9:f9:4c:2b:ab:53:b9:85:95:
0d:93:99:58:b8:a2:87:a8:93:e0:1c:84:46:f8:24:
dc:61:83:51:cb:bb:8c:69:b8:0e:1b:d6:11:59:48:
b1:61:ef:f6:ad:6b:98:b4:78:74:7d:f3:0c:34:b0:
38:e1:54:01:0c:02:23:c6:49:9b:fd:be:b9:86:e7:
e9:0c:c2:44:fa:57:66:d2:76:8a:ea:64:09:df:59:
1d:ea:57:a3:c6:45:71:1f:13:80:8f:c3:04:25:13:
e8:d0:2c:1d:20:70:90:40:6e:3b:f4:cb:5e:b1:05:
68:eb:26:30:4e:ee:f7:db:bb:b7:05:5a:b8:69:3d:
95:23:da:5f:59:d7:0d:3d:4c:6f:14:d9:7c:b9:9e:
f0:11:44:8e:36:b1:1b:8d:6f:e8:c5:27:d5:02:8a:
79:2e:41:7a:df:07:f2:b6:e0:3c:b3:03:f4:dd:42:
0c:cb:b8:32:b9:cf:cb:31:38:43:d0:31:e2:0f:83:
4e:28:03:47:2b:a7:54:04:d6:4a:ed:d4:f4:6f:fa:
01:95:c5:98:ea:c6:53:2d:a7:09:36:ce:59:67:be:
b2:69:c4:ad:67:18:6c:9d:ee:d2:22:c3:38:bb:54:
08:6a:05:d1:39:74:ef:a3:4d:ea:f6:8c:3b:20:af:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:16:13:A6:F1:83:28:66:87:69:BE:44:0E:65:98:A9:0E:6F:D2:6E
X509v3 Authority Key Identifier:
keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bd:a6:60:a4:2f:1d:a6:f1:74:e3:4d:0d:8b:e9:15:86:f6:
8e:e7:cc:74:bd:16:25:2b:27:79:1e:07:d7:c1:a9:e9:68:ca:
da:9a:a7:24:06:e6:9f:e0:1d:65:7a:90:a8:ae:bb:7f:bc:c3:
f2:1a:bd:84:a8:44:3f:5a:28:cf:49:ff:1a:68:4d:1e:56:37:
c0:fe:21:d1:58:ad:53:27:dc:31:2d:6c:7d:54:93:db:54:fe:
83:fc:56:6f:f9:9e:15:5a:01:d6:72:cb:fb:69:6e:a4:e3:ef:
bf:3a:84:2c:79:9f:3a:be:cc:97:b6:84:91:1b:80:f7:e5:17:
59:82:7f:ac:62:3a:6c:49:fa:a9:94:8f:50:d1:81:51:ee:87:
79:60:10:86:bf:cc:7e:6a:5e:45:7d:4a:de:72:0c:65:fd:de:
02:75:cc:42:33:67:d2:c2:c9:f0:8e:3e:1c:8a:7b:94:a9:c4:
60:80:4b:73:94:42:c8:36:0b:53:84:7a:27:e0:a1:0f:aa:b0:
82:29:01:c4:13:18:0b:1d:cd:12:d8:b8:47:cf:8a:a6:b7:14:
7d:8e:c0:e6:ba:e4:f8:55:e8:c6:2e:52:da:03:b0:9e:b9:f5:
9b:50:d1:03:01:c3:45:4e:ad:f2:68:1a:8d:ac:eb:ee:21:81:
71:bb:81:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy
MURCMzRCMDAwHhcNMjYwNTEzMDUwOTQ4WhcNMjYwNTIwMDUwOTQ4WjAYMRYwFAYD
VQQDEw02YTA0MDc5ZC1lMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2aSVZ2m5+Uwrq1O5hZUNk5lYuKKHqJPgHIRG+CTcYYNRy7uMabgOG9YRWUix
Ye/2rWuYtHh0ffMMNLA44VQBDAIjxkmb/b65hufpDMJE+ldm0naK6mQJ31kd6lej
xkVxHxOAj8MEJRPo0CwdIHCQQG479MtesQVo6yYwTu7327u3BVq4aT2VI9pfWdcN
PUxvFNl8uZ7wEUSONrEbjW/oxSfVAop5LkF63wfytuA8swP03UIMy7gyuc/LMThD
0DHiD4NOKANHK6dUBNZK7dT0b/oBlcWY6sZTLacJNs5ZZ76yacStZxhsne7SIsM4
u1QIagXROXTvo03q9ow7IK9kUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLIWE6bx
gyhmh2m+RA5lmKkOb9JuMB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5
N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTY1QS82NkU2RkUzNjQ5N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJE
SHU1Mm5Wc1RuakFoMnpTd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOr2mYKQvHabxdONNDYvpFYb2jufMdL0WJSsneR4H18Gp6WjK2pqnJAbmn+Ad
ZXqQqK67f7zD8hq9hKhEP1ooz0n/GmhNHlY3wP4h0VitUyfcMS1sfVST21T+g/xW
b/meFVoB1nLL+2lupOPvvzqELHmfOr7Ml7aEkRuA9+UXWYJ/rGI6bEn6qZSPUNGB
Ue6HeWAQhr/MfmpeRX1K3nIMZf3eAnXMQjNn0sLJ8I4+HIp7lKnEYIBLc5RCyDYL
U4R6J+ChD6qwgikBxBMYCx3NEti4R8+KprcUfY7A5rrk+FXoxi5S2gOwnrn1m1DR
AwHDRU6t8mgajazr7iGBcbuByw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:52:54 2026 by rpki-client