
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File: KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier: MP4zlP41efKi4oyTmx6Puh642YqQH9aHozx/k+JfFtE=
Subject key identifier: 68:E3:1E:B3:BA:CB:12:FE:67:78:2E:F4:F1:45:7C:22:EA:6D:C1:BC
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer: /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number: 01DC
Signing time: Thu 23 Jul 2026 04:57:32 +0000
Manifest this update: Thu 23 Jul 2026 04:57:31 +0000
Manifest next update: Thu 30 Jul 2026 04:57:31 +0000
Files and hashes: 1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: 1LyJ/bZ+L3t/LWntue3y7GgMxai/YZ6EPzAGuY7Rsok=)
2: DBFEC056388311F1A78BA8A0BB833773.roa (hash: 8FulhLXNLKQwINRNSnlJESeszYJamVSrQm9O3LcSEQs=)
3: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: h3tpppmL1hT5EM3m6sk6xUTtg20d/wirnkJ2RqVRrs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Validity
Not Before: Jul 23 04:57:31 2026 GMT
Not After : Jul 30 04:57:31 2026 GMT
Subject: CN=6a619f3c-3d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:5f:89:ee:d0:e9:89:2e:6f:57:72:7d:c6:
8e:5c:d2:48:30:50:7f:c4:7d:53:bb:c1:57:c1:40:
69:18:4e:ed:3c:0a:52:2d:fa:4d:b9:e3:b3:9f:4e:
19:52:08:c0:8a:f9:95:0e:30:d4:cf:61:c5:80:83:
6a:1f:da:9e:cc:79:8a:f6:ad:e8:98:7e:ed:16:b7:
8c:4d:c8:db:ce:f4:5d:8e:1b:b4:3a:c5:34:bb:69:
a0:46:0b:62:e2:8f:60:84:72:19:8c:a7:25:51:cc:
d4:5f:9b:35:0d:dd:31:23:9c:be:88:c4:d1:83:7a:
bf:c9:f9:98:1d:80:de:db:3c:4a:c3:60:b5:c4:40:
1e:be:30:cf:5d:7c:f8:82:f5:ac:38:f3:6d:9b:b2:
02:8f:94:de:9d:91:a0:80:93:7d:3a:e6:de:8f:18:
c0:e0:64:3e:ff:06:06:c3:94:5d:8d:61:f8:05:03:
23:20:d5:b2:94:1b:ed:a1:10:e0:43:c1:9b:ed:0b:
b8:b2:3c:51:3c:b8:39:62:81:5f:8e:cb:d0:02:b4:
29:10:a3:37:18:aa:c5:a8:ae:ff:b9:f2:c4:89:8f:
b5:60:05:14:cd:b4:a1:ce:e3:d1:3c:4a:06:d7:94:
7a:5d:55:5b:05:3f:81:32:03:f0:13:e1:7a:dd:76:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:1E:B3:BA:CB:12:FE:67:78:2E:F4:F1:45:7C:22:EA:6D:C1:BC
X509v3 Authority Key Identifier:
keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:bb:36:1a:12:71:47:15:c4:d4:de:5c:b7:09:42:48:ac:cf:
ca:39:7e:59:29:47:d5:1d:e4:19:8e:7a:e3:d0:07:e3:66:ae:
a2:1a:c4:4a:86:c7:af:d7:53:2f:33:5d:e9:9a:be:b1:82:86:
ce:2c:51:7f:3f:07:20:1c:be:81:0d:58:0a:c6:91:67:a0:0f:
e9:00:6f:34:b0:0c:fc:b8:cf:39:79:2d:9d:be:a6:61:4f:d8:
28:49:0e:c1:23:72:3b:4b:e7:7b:ef:1f:19:60:ea:2b:45:97:
18:7d:fd:b2:c4:f4:d1:d9:d1:89:f5:a4:bd:cc:f6:73:90:d6:
4e:35:84:5e:c8:b0:70:b0:df:f5:51:f7:4e:29:a6:36:c8:68:
32:3a:ad:89:4f:47:32:7a:8d:67:e4:27:11:41:0e:d9:7a:33:
6f:30:d5:09:bb:5c:6c:f5:85:31:96:f9:03:d5:5e:5a:ba:4b:
f0:07:28:99:1b:02:ed:42:98:cd:8d:5a:69:9b:1d:f2:a0:e7:
ad:a3:a8:b3:93:ff:a7:f6:1d:76:f6:bf:0f:96:78:aa:f9:8c:
36:86:12:05:f5:2b:78:91:a9:5e:d4:46:53:22:a8:91:be:2e:
b7:81:a0:7c:2e:f7:b4:f5:a9:ca:79:3a:35:d8:52:ac:6f:b0:
22:84:94:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:13 2026 by rpki-client