
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier: IjHNJlzexkWUPYmarUjjfuWO87zBTMXVF0mZp+bfIsc=
Subject key identifier: 54:BD:D0:49:2D:A1:72:FA:AC:8B:99:73:94:8D:3C:5A:CD:DB:5B:C2
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number: 02E7
Signing time: Mon 02 Mar 2026 03:12:48 +0000
Manifest this update: Mon 02 Mar 2026 03:12:46 +0000
Manifest next update: Mon 09 Mar 2026 03:12:46 +0000
Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: kCYU4u08XWVkb09vDVjfpOn9NHp60Gl1Yz3XSdHoCAs=)
2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Validity
Not Before: Mar 2 03:12:46 2026 GMT
Not After : Mar 9 03:12:46 2026 GMT
Subject: CN=69a50030-3a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6b:b6:ee:a2:02:15:13:d5:9b:c8:b8:dc:2b:
7c:98:48:90:d6:20:23:77:f3:03:dd:fc:d6:2d:3a:
df:46:23:20:cf:0a:6f:07:0f:9b:89:18:fe:a6:ec:
aa:8f:71:28:97:a8:68:bc:38:fe:e3:bb:23:bd:d6:
26:b6:43:45:72:57:b3:ac:f4:3b:bb:3e:a2:57:2c:
07:2d:ee:98:67:24:49:d8:22:36:34:15:0b:4e:12:
90:bd:5c:1f:ad:97:ee:8f:99:f2:0a:fa:e9:5c:2d:
dd:c3:0f:19:f1:84:de:c3:14:e1:fd:f4:5b:cf:b9:
aa:16:5f:ca:03:35:23:57:66:a3:5c:7d:b9:ab:ce:
39:d9:7c:85:84:85:75:13:9e:63:e9:5b:bb:18:4f:
5c:b2:32:4a:98:d6:e5:1d:a7:ec:6c:b1:f3:8f:02:
05:60:09:82:05:0e:30:19:55:03:48:9e:ab:94:fb:
3f:7e:74:b4:29:fb:21:ca:0f:43:15:54:77:75:20:
2e:18:16:59:7f:f5:6b:04:ea:f3:27:de:63:57:74:
a3:bd:1b:03:2e:d9:af:19:f8:4f:2a:02:ff:70:cd:
18:94:ea:24:9c:3f:06:ea:ec:4d:83:6e:5f:b7:a6:
7e:f3:8e:25:c6:6b:62:7f:82:5a:31:cd:6d:77:08:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BD:D0:49:2D:A1:72:FA:AC:8B:99:73:94:8D:3C:5A:CD:DB:5B:C2
X509v3 Authority Key Identifier:
keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:44:96:8e:f8:9b:0d:92:82:c4:04:b7:18:ca:db:1b:e4:60:
f2:c1:13:8d:10:07:2d:89:4c:a3:24:1c:a7:95:69:6a:89:72:
65:41:48:08:65:0f:d2:ef:32:a0:8a:33:e2:ae:7c:9f:85:b8:
07:d9:fc:02:12:bb:77:6e:10:a5:4c:7a:cb:10:0d:69:36:54:
08:de:88:2f:9b:9d:b5:fa:c8:e9:55:51:2b:ea:71:48:08:61:
66:9b:f2:4f:2f:71:d0:dd:9a:c2:f3:39:99:91:89:ee:91:38:
a8:60:f3:7d:b9:3f:c7:35:e5:3e:87:8c:e3:22:cb:06:be:38:
3d:5d:c9:2d:28:18:57:02:3d:f4:c2:8c:d6:16:50:f3:45:5f:
37:5a:f2:f7:40:f3:b8:df:11:97:ca:80:28:43:91:23:7a:5b:
8c:4b:41:f8:dc:47:46:77:5b:22:73:cb:55:aa:98:da:d9:4a:
f6:45:cc:a4:1a:b6:f6:5e:0e:61:9f:79:cd:af:77:c0:ff:30:
eb:00:93:19:56:21:75:0d:68:e0:b6:02:58:3b:ac:84:31:ff:
33:dd:84:8e:2b:a2:b8:17:d2:d7:03:43:a3:18:9e:26:15:c3:
15:e0:fd:82:4c:e7:53:72:1c:7a:f0:ff:df:b3:e6:98:1d:bc:
f8:8e:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:07 2026 by rpki-client