
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json)
Hash identifier: 5KpGyYH9mohGZY58kBKBO9bHlBmNw+7ZnsQGSB++Nl8=
Subject key identifier: 45:F0:D1:91:80:17:E2:39:36:2B:28:65:76:C2:6D:38:B8:23:09:96
Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Certificate serial: 3510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
Manifest number: 3510
Signing time: Sat 28 Feb 2026 15:08:09 +0000
Manifest this update: Sat 28 Feb 2026 15:08:08 +0000
Manifest next update: Sat 07 Mar 2026 15:08:08 +0000
Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: 6HnCnOP//Zm+bYh3WtC0EdSOC4/f9PDlKD1QJTzT9ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13584 (0x3510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Validity
Not Before: Feb 28 15:08:08 2026 GMT
Not After : Mar 7 15:08:08 2026 GMT
Subject: CN=69a304d9-6f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:ed:12:3a:71:34:77:60:a0:91:3d:22:bf:
64:20:f0:8a:35:6c:70:33:6f:1e:04:c2:53:6d:5f:
1b:b1:27:2e:4b:93:5a:cf:26:fe:85:cb:61:d9:21:
a6:79:a9:f2:24:41:99:04:c4:9e:6f:54:f0:d0:89:
e1:44:ae:5c:a4:00:a4:35:f6:63:a8:17:b1:c7:54:
98:15:f6:08:4c:e2:d2:98:9a:34:99:0a:9d:56:72:
71:ed:41:1f:58:d2:55:9c:df:a6:7e:74:bf:94:1a:
e5:af:5f:8b:8a:f7:cc:3f:47:27:79:32:1e:4c:81:
59:01:9f:a0:a5:92:4d:4a:59:bc:a3:45:a3:13:04:
f5:2c:f9:09:eb:58:a3:50:8a:b2:9a:a4:5c:6d:95:
97:0b:bc:09:d1:8e:af:da:06:8d:7f:63:fc:c4:bd:
02:78:ea:5a:83:62:1c:2a:03:cd:ad:4c:54:5c:bc:
8d:fd:1c:27:72:45:8e:e1:92:6a:ae:ff:bf:b5:48:
d0:f0:7e:ca:36:52:c6:67:0a:3f:bb:ab:c4:22:36:
d3:3a:fb:85:49:1e:c5:9f:1c:70:ea:80:5b:90:98:
64:c1:1e:00:9f:cd:19:32:43:31:0d:65:36:9e:53:
b6:e5:25:86:02:b2:eb:42:ee:d7:e8:74:e0:48:01:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:D1:91:80:17:E2:39:36:2B:28:65:76:C2:6D:38:B8:23:09:96
X509v3 Authority Key Identifier:
keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ba:a0:f2:6a:7c:9d:bf:5b:06:a5:ca:80:de:62:0d:e5:8d:
01:6a:10:7b:69:f0:c1:50:fe:d2:64:68:ee:cb:51:05:f7:ad:
32:7b:bc:62:8d:4a:5d:0f:75:95:34:81:1b:51:ba:34:af:1c:
a4:bd:2f:59:16:6c:bf:f7:1f:9e:a9:64:d6:bb:0d:ae:8f:2e:
ac:9e:50:6a:e5:04:fb:a0:11:e6:19:63:e2:09:f9:bd:83:da:
75:f1:08:80:5e:46:71:bf:a7:e8:50:c2:3f:97:f0:d0:ad:77:
a0:54:a5:1a:5a:05:9d:b4:01:6f:e3:3a:b8:22:f1:1e:68:55:
d0:3c:7b:9c:82:42:e4:6f:21:19:71:b4:90:93:b3:33:72:b8:
c6:e7:ce:1d:c2:37:bd:a9:10:eb:ab:d8:49:17:9d:89:11:74:
21:fc:8c:4c:4a:9b:74:3e:bb:74:d4:a2:82:23:09:0a:54:ff:
9b:ba:2d:40:40:fe:cd:2d:ac:0c:36:d0:8d:ae:5c:9c:e7:14:
92:1a:d5:e7:f3:ee:0c:a4:14:bd:2f:14:f5:5b:50:09:8a:f0:
fa:8a:8f:66:84:96:f3:aa:6b:d8:15:43:7c:f8:a4:ee:1b:43:
aa:56:39:59:2d:6f:3d:2a:72:12:bc:1d:d9:28:8f:f7:0d:e1:
94:68:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:36 2026 by rpki-client