
$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier: P5pyygceGFCIJg3EIK0NgKZoeUuZok/YaCR1OdgrGCU=
Subject key identifier: 93:DC:B6:01:82:E4:40:08:8E:92:0C:3F:D8:84:05:7D:B6:C8:F7:8C
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number: 0189
Signing time: Mon 27 Jul 2026 06:16:54 +0000
Manifest this update: Mon 27 Jul 2026 06:16:54 +0000
Manifest next update: Mon 03 Aug 2026 06:16:54 +0000
Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: vDgTQFfXJUwlc/jrdrg01s+luY1P5bG5BrvaNb7oTss=)
2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 0mQHZNKSu/fOdeBAKFYNxdU/VQzOEWz87PHkDUFkGGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Validity
Not Before: Jul 27 06:16:54 2026 GMT
Not After : Aug 3 06:16:54 2026 GMT
Subject: CN=6a66f7d6-dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:3d:da:8a:06:bc:9a:58:41:e7:c8:ad:9a:
d1:e3:a5:bd:a8:ee:aa:bb:a4:11:fe:79:fe:a9:ea:
25:d1:fa:6a:98:4d:3f:7b:83:c3:f8:17:e8:55:b8:
1f:2d:21:eb:58:c3:89:e9:e5:0e:89:73:a9:e8:4d:
e6:5f:42:6f:c7:9a:b1:de:1d:2e:d1:60:19:32:a7:
8e:40:15:83:af:9b:57:57:f8:76:0a:f2:5e:b9:75:
36:99:7d:58:fa:b3:71:f0:6d:3d:9f:f8:d9:89:77:
f2:fe:8c:f2:a4:8c:08:a5:29:2f:29:06:d3:9b:68:
30:53:90:f7:a2:8a:b4:2c:bc:bc:49:32:23:a7:dd:
db:35:87:fd:4c:f6:db:e3:5a:5c:87:01:4d:98:31:
54:f8:60:51:97:ad:f6:cf:5c:38:f9:28:08:d9:0c:
23:88:e8:d1:bb:9b:ff:bc:1d:b1:52:8b:d9:31:6a:
51:22:a2:b4:c7:19:fe:40:e5:76:48:68:9d:45:cc:
76:69:9e:9d:5b:f8:55:27:85:80:d0:07:d7:d4:cb:
e8:e9:a6:9c:37:38:c5:51:af:d4:5a:14:79:69:51:
c4:40:35:dc:92:d9:e1:8a:f7:cf:9d:9f:ef:fb:40:
39:e4:e8:a7:5e:ac:95:0e:27:00:f6:5e:ea:21:e2:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DC:B6:01:82:E4:40:08:8E:92:0C:3F:D8:84:05:7D:B6:C8:F7:8C
X509v3 Authority Key Identifier:
keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8c:2b:eb:9b:de:8d:47:6e:71:e9:f8:5b:90:03:81:b5:28:
08:e1:6a:3b:41:8b:98:0d:85:0e:fd:a5:a5:7f:0a:ee:29:18:
30:2a:e1:43:2f:2d:03:b2:99:86:7e:3b:24:34:87:2c:61:67:
cb:b5:6e:c9:79:64:b3:6f:b0:af:cc:47:b3:49:17:43:3b:df:
92:bb:bf:45:04:06:3d:13:79:86:ae:93:b9:ec:57:4a:50:6a:
37:0a:a3:61:0d:7b:5e:f9:5c:b8:c4:2f:c2:2e:51:66:89:d0:
57:51:fc:fd:9f:45:f5:4a:2a:58:94:83:38:ba:c0:6a:23:b7:
a6:81:dd:70:cd:dc:0b:f4:32:eb:6b:13:6f:ca:e0:9e:55:53:
f6:5a:5f:c6:dd:bb:3a:b9:0c:f9:a6:89:e6:2b:58:42:10:4f:
f9:0e:8e:64:da:7b:13:8d:01:9f:da:40:78:46:47:af:f5:27:
e3:03:58:68:90:b7:2d:63:30:de:5f:b1:af:98:ec:b3:25:94:
29:af:94:28:7b:28:88:8b:2c:ec:65:51:b7:98:b5:ed:df:6a:
ee:a4:b6:c7:87:5a:85:32:43:3e:be:1a:3d:d6:af:0c:e3:91:
cf:1f:84:3a:d6:46:3a:3e:0d:c3:34:ca:a1:dd:d6:d4:11:26:
c6:bd:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:08 2026 by rpki-client