
$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier: zTBJdtw6D+SJsaT+R1gnwn0tw7RXqKuwtVZMTJi7RyI=
Subject key identifier: 3F:A2:89:C0:80:17:0C:FD:D0:37:1E:F3:E7:72:10:8A:5A:9A:CE:C0
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number: 013B
Signing time: Sun 01 Mar 2026 06:22:24 +0000
Manifest this update: Sun 01 Mar 2026 06:22:24 +0000
Manifest next update: Sun 08 Mar 2026 06:22:24 +0000
Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: jFTrl9GYdr88sbjcrNv5M4KhhljTZk3XpyHG0W5F2l0=)
2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 01Cn3pOh4671ZkIDU6odEQ9G33TuU+ryqBzUYewO8xQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Validity
Not Before: Mar 1 06:22:24 2026 GMT
Not After : Mar 8 06:22:24 2026 GMT
Subject: CN=69a3db20-9d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:f1:23:25:2a:55:c4:d2:0a:24:b2:b1:26:
82:92:c6:e4:61:42:96:d1:0f:65:a3:f8:14:e3:be:
c5:28:4b:e9:d6:2e:7c:90:1e:b8:ca:99:87:6f:c0:
a0:e9:16:3f:ef:a2:6c:6c:42:cc:bd:97:d8:87:09:
0f:18:bd:ec:5a:94:90:66:59:a7:21:b8:ea:b9:f8:
13:f7:9c:c6:da:2b:7d:46:2a:6b:2c:a2:f7:ed:64:
70:19:d0:9d:3c:37:fb:c3:1e:35:cd:eb:85:25:90:
ba:96:aa:28:41:5e:12:2b:c9:c5:d8:83:63:68:21:
cf:ba:f3:16:d2:2c:25:36:4c:b7:ef:ef:51:fe:e3:
41:42:37:73:85:f4:04:79:9a:03:70:56:f0:57:3c:
7f:91:51:ea:0f:8d:4f:4b:23:1b:89:9f:6d:8c:64:
52:68:d2:fb:be:1c:f5:5a:25:d6:11:da:a4:12:4b:
be:67:4b:12:22:4b:3c:c1:03:16:44:ab:ed:6f:68:
55:fc:00:56:a8:51:71:19:3d:9d:d1:f2:9c:1e:5e:
87:c5:d8:bb:3c:b1:15:50:43:4a:be:be:e6:9f:fc:
91:da:08:78:20:e7:fb:6a:02:6b:90:8b:e3:93:f8:
37:95:f6:6d:c9:50:51:db:49:04:54:87:0a:c3:ac:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:89:C0:80:17:0C:FD:D0:37:1E:F3:E7:72:10:8A:5A:9A:CE:C0
X509v3 Authority Key Identifier:
keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:94:ca:3f:28:e0:80:92:1b:d5:bb:5c:e3:c3:93:41:1b:58:
8a:e1:7f:cb:32:73:ef:bc:ea:23:db:8c:c6:ed:33:57:25:6a:
fd:a8:fe:d6:4e:e3:a4:14:95:90:87:c2:48:0f:0f:78:93:44:
da:f5:3f:9c:a0:98:7c:96:a4:9c:9c:72:24:2a:9b:c6:fb:01:
c9:5a:57:6c:b3:11:eb:20:29:4b:c8:1d:b6:7d:f3:a4:db:a4:
17:0c:db:60:ce:71:96:0a:7d:de:c6:b2:a3:d2:b3:5c:b1:43:
bc:19:54:1d:5c:53:ed:49:35:e3:1b:7a:ae:de:ad:c7:5e:72:
ea:c0:9a:f9:af:95:64:13:46:8a:25:3c:f3:ff:af:08:31:38:
74:ba:19:e8:cb:56:28:5f:69:c3:d0:bc:2f:84:29:e3:42:07:
1f:d6:d6:63:68:af:07:3e:62:f5:6e:70:7b:c4:8d:40:c5:f4:
42:05:b2:94:e5:6c:29:72:a3:36:c7:1a:cf:b6:5d:32:8b:9e:
08:88:8b:89:ac:eb:4e:b3:0c:d8:5f:77:bc:f6:b9:be:ce:83:
0f:24:6f:fe:70:de:c9:ce:db:5f:ae:3c:8c:7f:68:59:ab:ee:
5c:73:a0:33:89:97:98:d2:31:79:31:41:56:95:29:38:c2:df:
f5:4f:e7:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB
QzFGQUEzRUUwHhcNMjYwMzAxMDYyMjI0WhcNMjYwMzA4MDYyMjI0WjAYMRYwFAYD
VQQDEw02OWEzZGIyMC05ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcvxIyUqVcTSCiSysSaCksbkYUKW0Q9lo/gU477FKEvp1i58kB64ypmHb8Cg
6RY/76JsbELMvZfYhwkPGL3sWpSQZlmnIbjqufgT95zG2it9RiprLKL37WRwGdCd
PDf7wx41zeuFJZC6lqooQV4SK8nF2INjaCHPuvMW0iwlNky37+9R/uNBQjdzhfQE
eZoDcFbwVzx/kVHqD41PSyMbiZ9tjGRSaNL7vhz1WiXWEdqkEku+Z0sSIks8wQMW
RKvtb2hV/ABWqFFxGT2d0fKcHl6Hxdi7PLEVUENKvr7mn/yR2gh4IOf7agJrkIvj
k/g3lfZtyVBR20kEVIcKw6ypMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+iicCA
Fwz90Dce8+dyEIpams7AMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0
MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY
eVRZbnVXMmNucS1zSDZvLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW5TKPyjggJIb1btc48OTQRtYiuF/yzJz77zqI9uMxu0zVyVq/aj+1k7jpBSV
kIfCSA8PeJNE2vU/nKCYfJaknJxyJCqbxvsByVpXbLMR6yApS8gdtn3zpNukFwzb
YM5xlgp93sayo9KzXLFDvBlUHVxT7Uk14xt6rt6tx15y6sCa+a+VZBNGiiU88/+v
CDE4dLoZ6MtWKF9pw9C8L4Qp40IHH9bWY2ivBz5i9W5we8SNQMX0QgWylOVsKXKj
Nscaz7ZdMoueCIiLiazrTrMM2F93vPa5vs6DDyRv/nDeyc7bX648jH9oWavuXHOg
M4mXmNIxeTFBVpUpOMLf9U/nGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:43 2026 by rpki-client