
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
File: KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json)
Hash identifier: Hgs7mxdxzNBqCQHdosU8PYuGrnRxsttMkdY5jgAJMng=
Subject key identifier: AA:40:DC:DA:B2:24:FF:73:8F:5F:D9:32:0C:7F:5C:F7:2D:AE:E3:15
Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
Certificate issuer: /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
Manifest number: 34
Signing time: Thu 11 Jun 2026 10:56:44 +0000
Manifest this update: Thu 11 Jun 2026 10:56:43 +0000
Manifest next update: Thu 18 Jun 2026 10:56:43 +0000
Files and hashes: 1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: hDApDI/ZSAoC0U824pRyEzWxM50z4MgizOqR2r747UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Validity
Not Before: Jun 11 10:56:43 2026 GMT
Not After : Jun 18 10:56:43 2026 GMT
Subject: CN=6a2a946b-4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:df:ca:13:9b:6d:7f:98:7e:b4:2b:e7:32:
33:0b:be:57:f3:42:35:f7:78:2e:10:42:a6:8a:84:
8d:c3:75:af:1e:7f:75:84:57:cd:2a:3b:36:75:81:
8c:db:a6:14:29:22:ae:6f:e9:e8:14:03:05:e1:44:
4f:5d:64:4c:31:be:1a:71:76:af:87:db:2d:1d:e3:
23:eb:2e:18:3b:df:8a:a5:ad:25:31:ff:ba:e4:31:
bd:4a:98:72:db:26:b3:92:20:22:76:d0:fd:2b:50:
ad:30:dd:61:04:05:42:73:cc:c0:3f:a2:f9:73:16:
74:32:b2:05:81:24:9f:2b:4a:5e:d2:0e:0c:bc:87:
67:f9:8b:0c:61:9d:5c:d6:e2:b2:86:cd:76:fa:c2:
2a:e8:c8:be:2e:73:c9:cd:d7:43:a7:ce:e0:7e:40:
01:dc:9b:7c:eb:64:ad:e5:05:d2:72:31:9d:97:ce:
69:63:6f:70:e3:40:a8:ea:eb:35:86:e4:4f:2f:95:
99:f2:c7:0e:22:12:b8:f5:5f:3d:d2:ac:3a:74:6c:
d1:d5:6a:cd:62:cd:cf:6a:6e:46:a9:b6:ed:b3:81:
01:23:2f:61:d8:3d:c7:40:f2:50:fb:3e:12:27:17:
64:44:36:be:74:69:69:cf:f4:5f:28:e1:16:72:0b:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:DC:DA:B2:24:FF:73:8F:5F:D9:32:0C:7F:5C:F7:2D:AE:E3:15
X509v3 Authority Key Identifier:
keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3c:0a:c0:d8:6a:5c:84:26:37:13:a8:50:12:16:f3:11:39:
bb:ac:fc:5d:0a:de:79:68:f2:ef:a4:74:36:3d:af:75:59:3e:
9e:1c:32:6b:2b:e9:e4:f1:63:48:16:4c:cf:e6:87:d4:f1:82:
56:e4:03:7d:d6:44:d1:f4:61:00:db:00:84:c3:e0:d4:2b:6b:
bd:2e:a2:8c:f8:c1:dc:be:15:b5:a7:48:46:04:dc:ce:76:63:
40:f5:31:d3:e2:9c:e9:54:17:c7:e1:f7:1a:4c:8d:70:49:45:
f7:d1:bf:4a:7c:d9:aa:d7:e0:52:2d:3d:bd:37:2d:71:59:8f:
93:72:bf:ba:a8:fa:2f:0b:64:e3:9c:ed:7a:15:7f:04:ad:57:
00:e1:40:2a:ba:f5:b3:cc:77:58:51:5a:c1:aa:fa:74:2e:a4:
b1:ba:9b:ad:70:3e:6e:8d:04:19:6f:b3:b2:09:67:e8:68:8a:
6d:a7:66:4d:cb:53:c4:b4:24:19:6c:e5:fa:2a:f0:3d:ae:43:
70:81:e6:ea:d8:eb:ce:21:f6:91:a7:b1:fb:6f:ca:4c:f8:b1:
76:b1:d1:16:73:34:35:a5:6b:48:94:bc:34:18:ae:ca:7c:90:
dd:11:20:b4:40:61:26:7a:1e:47:76:d9:d0:ff:c1:56:6a:0b:
d9:f5:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:56 2026 by rpki-client