
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier: co9SjZ3bM1/ePk/iukyEEUQ4wjA2dNtKop0btl2iTl0=
Subject key identifier: 20:A6:0E:90:34:9D:2E:F3:C5:D7:EB:49:02:5F:B1:B0:58:27:6F:20
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial: 0368
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number: 0359
Signing time: Sun 11 Oct 2026 01:01:35 +0000
Manifest this update: Sun 11 Oct 2026 01:01:34 +0000
Manifest next update: Sun 18 Oct 2026 01:01:34 +0000
Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: N0zFSwjy99ShJKe2yhSelNwQX86eppbbhF6DJ9Fbxsc=)
2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872 (0x368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Validity
Not Before: Oct 11 01:01:34 2026 GMT
Not After : Oct 18 01:01:34 2026 GMT
Subject: CN=6acadfee-b8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:a7:03:81:e2:79:0d:c0:96:0c:a7:25:6c:
2d:3c:17:8e:82:8e:8e:e2:5a:1a:07:78:af:4b:3a:
22:2b:2c:95:cc:08:c7:9b:be:7d:68:b0:c0:d0:58:
1e:1d:ff:4f:e9:99:33:31:f3:46:17:bb:d6:d8:2c:
08:02:00:5f:1c:0f:1e:50:82:ab:cc:fc:d6:cd:3c:
72:88:76:50:5e:5f:ff:7d:98:43:5d:77:a1:b1:0f:
f7:a2:71:29:d7:0e:8f:a5:16:39:25:15:09:fb:13:
1b:03:37:58:87:e0:dd:0d:00:39:c4:c9:6a:6a:b1:
d1:e0:2f:1f:4d:58:03:09:86:67:c7:e2:da:1d:e4:
7c:4e:18:1e:60:16:7a:5f:5b:eb:5f:f8:9d:41:c5:
b5:68:ae:5d:50:0f:9c:73:4b:ad:87:2b:c1:ac:6b:
e8:92:6c:f3:1d:12:11:b8:83:27:ae:e0:4a:7f:98:
1b:a4:19:03:e4:17:62:fe:15:8e:c5:9a:e9:fb:ff:
78:a3:1c:a6:74:5b:48:74:8f:37:7b:04:60:9c:09:
6b:c0:6d:6f:24:b7:f5:93:bc:85:e2:21:cc:27:b6:
7e:d7:4b:10:a6:0d:c4:99:48:7f:25:92:1b:72:26:
71:d0:88:72:39:86:69:ae:54:ee:41:84:cf:14:2d:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:0E:90:34:9D:2E:F3:C5:D7:EB:49:02:5F:B1:B0:58:27:6F:20
X509v3 Authority Key Identifier:
keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:63:43:12:8f:76:72:e1:f2:fe:b4:ce:72:46:5d:02:8b:
a7:8a:a9:62:a4:99:05:79:26:a3:71:22:ab:c1:25:35:ca:28:
4b:2d:b6:6d:e6:c5:72:2d:3c:33:80:b2:62:ef:eb:47:95:0a:
2a:bf:b1:14:4a:b4:92:de:dc:00:d1:87:2a:fa:c5:04:19:b2:
0d:ea:72:22:20:ab:f4:a2:e7:47:8e:88:5c:35:89:3e:a5:09:
35:95:05:65:87:8b:8a:79:c8:9c:6b:53:3f:ca:d6:ee:16:bb:
e1:fa:4e:9f:f8:d2:df:61:8c:55:07:61:86:27:bb:df:60:6b:
ed:c0:ac:0c:da:fc:00:d3:ba:de:78:40:0d:9b:a2:4e:a6:95:
67:5c:ab:99:b6:cc:27:da:9c:2e:f3:d2:cd:10:b6:30:61:85:
b4:d4:fa:a0:ab:9d:16:ff:1d:59:2c:06:58:cb:85:04:14:a4:
58:3e:05:3a:a0:8b:b8:49:d2:4e:62:6e:20:f6:bc:88:bd:26:
e6:c9:d7:9f:9a:9b:a9:53:73:a6:2f:78:3c:39:f9:ea:77:25:
83:94:2b:e7:b8:a1:ab:b1:b9:c4:17:7f:2b:8e:06:7d:87:e6:
8a:5d:1c:41:8e:99:d7:07:70:76:db:ee:15:d1:77:59:56:80:
84:bc:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:21:04 2026 by rpki-client