
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier: vk2gED5hySA+OSEBIY8tVfaPPM4JeBo+9E0P+znyUeY=
Subject key identifier: EA:CD:18:A7:53:54:E8:91:54:AC:CC:14:8C:4B:F0:F4:02:3A:B1:AF
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial: 030E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number: 02FF
Signing time: Fri 17 Apr 2026 01:11:06 +0000
Manifest this update: Fri 17 Apr 2026 01:11:05 +0000
Manifest next update: Fri 24 Apr 2026 01:11:05 +0000
Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: mbL4ww2Nl2oNVXQ4PSLcoo+2rlwoVcYyQzMhpq1oC1s=)
2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Validity
Not Before: Apr 17 01:11:05 2026 GMT
Not After : Apr 24 01:11:05 2026 GMT
Subject: CN=69e188aa-3200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:73:7e:f9:05:47:96:9a:80:6b:9b:31:35:
3d:f9:3a:91:c5:08:a6:a9:ff:ba:80:94:2d:5b:e1:
50:be:2d:9d:47:5f:d2:cc:ea:f6:60:d2:a1:11:70:
c5:5b:62:d3:97:27:4d:4e:88:58:9f:73:c9:d3:48:
8a:81:54:b7:de:f4:1b:c5:20:d7:4b:36:88:42:66:
0b:18:07:7b:c8:63:83:90:08:76:0e:80:cb:ec:41:
11:c6:43:7b:04:e2:64:51:72:2c:6c:60:ca:e6:a4:
bb:be:8a:20:af:85:40:4a:d2:96:49:2a:c4:80:d0:
31:9d:b4:86:55:58:b9:d3:d7:7c:8a:b0:1f:25:a0:
56:9d:ce:d9:4b:44:34:01:bb:e3:64:92:fc:c0:01:
97:29:0e:70:60:5b:a5:62:28:c3:b2:6e:e5:5b:c3:
3b:c5:1f:73:6d:00:89:82:95:41:9b:64:74:23:c5:
9f:cf:38:2c:ca:b8:92:f5:43:40:53:f8:5e:13:ee:
35:37:82:3b:96:fd:07:8f:88:61:a2:cc:00:25:cc:
28:a3:9f:e9:89:7b:39:96:b6:18:8a:c6:b0:6f:d8:
1f:b9:31:b6:84:5c:6d:ad:d5:93:f2:b8:98:31:f6:
52:8b:20:6b:33:53:1d:52:4f:ac:95:1d:22:b0:e7:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CD:18:A7:53:54:E8:91:54:AC:CC:14:8C:4B:F0:F4:02:3A:B1:AF
X509v3 Authority Key Identifier:
keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:4e:60:c9:d4:81:83:7e:89:74:3f:76:38:9f:a0:64:02:
ad:8e:4d:3b:c1:10:76:2d:17:79:50:d4:4b:f8:a1:76:c7:2d:
9a:cc:35:36:95:71:40:f9:f5:91:60:7c:f7:b5:ad:c8:23:ed:
28:f7:63:77:b7:34:2b:56:cd:1d:76:f0:6f:ea:ab:ba:81:29:
b2:24:65:61:d3:f2:31:60:3b:d1:aa:f7:2d:c7:98:d5:5f:13:
2b:cf:fe:24:71:2e:74:7e:eb:8c:4d:1a:7f:3d:55:ed:5c:df:
f5:63:ae:15:06:25:7f:3b:36:83:30:2d:93:e6:2b:be:27:d6:
99:32:64:9d:cc:b4:76:88:5a:46:ba:14:9a:dd:77:82:76:6f:
df:23:20:79:92:0f:ed:66:f2:8c:76:5a:e8:cc:0f:c9:79:d0:
b0:a7:e8:82:60:0b:e9:f1:14:c2:c0:33:9f:9c:1a:ba:0c:6e:
5d:ea:23:c5:6b:55:d7:6b:b0:8e:98:08:e0:07:e0:65:ad:5f:
b8:34:f7:da:82:36:2d:9e:00:e1:f3:08:10:4a:05:b3:89:33:
04:8f:03:fc:19:fb:25:bd:1c:28:d3:55:69:ff:fe:ec:8e:0f:
8d:f1:05:a4:76:7e:0a:fe:bf:63:89:95:7d:54:08:54:39:e6:
31:0c:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:03 2026 by rpki-client